Privacy Policy

1. Who we are

Mr. Handy is operated by Lino Agency LLC, a company incorporated in Georgia, USA ("we", "us", "our"). Postal address: 30032 Gardner Drive, Alpharetta, GA, USA 30009.

2. What we collect, and why

Account information

When you create an account, we collect the identifier you sign in with (email address, phone number, or the unique ID returned by Sign in with Apple / Google) and your display name. We use this to authenticate you across devices and sessions. Passwords, when used, are stored only as a salted hash — never in plaintext.

Profile information

You can optionally add your first name, last name, phone number, birthday, and occupation in the app. We use these only to personalise the app (e.g. greeting you by name). You can edit or remove any of these at any time.

Camera frames

While you are using a guided repair, the app captures still frames from your camera. We use these frames for two purposes:

• Job classification — identifying the repair you're asking about (e.g. "drywall hole", "running toilet").
• Step verification — checking whether the step you just completed looks correct before letting you move on.

Frames are sent to Google's Gemini Vision API for the AI evaluation. Frames are stored on our servers only as long as needed to produce a completion record for that job (your "proof photos"). You can delete that record at any time from the app.

Microphone audio

During a guided session, your microphone is streamed in real time to Google's Gemini Live service so the assistant can hear your questions and respond. We do not record or store this audio. It is processed in flight and discarded.

Job history

We store a record of the jobs you start and complete — job type, when you started and finished, which steps you verified, and the proof photos for verified steps. This is what lets you re-open a completed job and see what you did. It is associated with your account and only visible to you.

Billing information

If you subscribe to Mr. Handy Pro, your payment is handled by Stripe (on the web) or by Apple (in the iOS app via In-App Purchase). We never see or store your full card number. We store only a customer reference (a Stripe customer ID or Apple receipt identifier), your subscription status, and the billing country reported to us by the payment processor. We use this to grant you Pro access and handle renewals, refunds, and tax.

Product analytics

We use PostHog to understand how people use the app: which screens they reach, which steps they complete, which onboarding questions they answer. Events are linked to your account so we can debug your specific session if you ask for support, but they are not used for advertising and are not shared with any ad network.

Crash and error reports

We use Sentry to collect crash logs and JavaScript stack traces when the app errors. These reports contain technical information only (which file, which function, which line) — they do not contain camera frames, audio, photos, repair history, or your personal identifiers beyond your internal account ID. They help us find and fix bugs.

Cookies and local storage (web only)

On the web (mrhandy.ai), we use first-party cookies and local storage to keep you signed in, to remember your onboarding answers between pages, and to fire product-analytics events. We do not use third-party advertising cookies, and the marketing site does not include tracking pixels from ad networks.

What we do NOT collect

• Advertising identifiers (IDFA / GAID) — unless you grant permission via iOS App Tracking Transparency
• Precise location
• Contacts, calendar, or other on-device data
• Browsing history outside the app
• Health, fitness, or biometric data

3. AI features and how they work

Mr. Handy uses Google's Gemini family of models for three things: identifying the job from a single camera frame, verifying step completion from one or more camera frames, and answering your spoken questions via voice. Inputs to these models (frames and audio) leave our servers only to reach Google's API and back. Per the Gemini API Service Terms, your inputs are not used to train or improve Google's models.

The AI can be wrong. A "step verified" signal from the model is not a professional inspection. See our Terms of Service for the full disclaimer.

4. Who we share data with

We share data with the following processors, only to the extent necessary to operate the service:

• Google (Gemini API, Sign in with Google) — camera frames, microphone audio in flight, OAuth identity tokens. United States.
• Apple (Sign in with Apple, In-App Purchase) — opaque identity tokens, subscription receipts. United States.
• Stripe— payment-card data, billing address, and subscription status when you subscribe on the web. United States, governed by Stripe's own privacy policy.
• Twilio — your phone number, only when you sign in with phone OTP, only for the duration of sending the verification code. United States.
• Resend / Nodemailer transactional email — your email address, when sending verification codes and account emails. United States.
• Meta (Conversions API and Pixel) — hashed email, name, IP address, user agent, and iOS IDFA (when you consent via App Tracking Transparency), plus event metadata (page views, trial starts, subscription starts). Used for measuring and improving ad conversions from Meta platforms. Delivered server-side via Conversions API and client-side via Pixel (web) and App Events (iOS). United States.
• PostHog— product-interaction events linked to your internal account ID. United States by default; we can route EU traffic through PostHog's EU instance on request.
• Sentry — crash and error reports (stack traces only). United States.
• Our hosting and database providers — to store account data, billing references, and job history.

We do not sell your data. We do not share it with advertisers or data brokers. We don't engage in cross-context behavioural advertising as defined by the California Consumer Privacy Act.

International data transfers

Most of the providers above are based in the United States. If you are in the European Economic Area, the United Kingdom, or Switzerland and your data is transferred outside your region, we rely on Standard Contractual Clauses (SCCs) and the providers' own certifications (e.g. EU-U.S. Data Privacy Framework participation) as the transfer mechanism.

5. How long we keep your data

Account data, profile data, and job history are kept until you delete your account.

When you delete your account from inside the app (Profile → Delete account), the account enters a 15-day grace window — if you sign back in within that window, the account is restored and nothing was lost. After 15 days, the account and all linked records (job history, proof photos, OAuth links) are permanently deleted by an automated daily process.

Crash and error reports in Sentry are retained for 30 days, then purged. PostHog product-analytics events are retained for 12 months, then purged.

Anonymised aggregates (e.g. "how many users completed step 3 of a drywall patch last month") may be retained indefinitely using techniques that prevent re-identification.

6. Your rights

Regardless of where you live, you can:

• See your data — email [email protected]and we'll send you a machine-readable JSON export of everything we store about you, within 30 days.
• Correct your data— most of it is editable in the app; anything that isn't, we'll change on request.
• Delete your data — use the in-app delete button in Profile, or email [email protected].

EU / UK / Switzerland (GDPR)

If you are in the EEA, the UK, or Switzerland, you also have the right to: object to processing, restrict processing, lodge a complaint with your local data-protection authority, and (where processing is based on consent) withdraw consent. The lawful basis for the processing described above is contract (account, billing, AI inference required to deliver the service) and legitimate interests (analytics, crash-reporting for product improvement). Email [email protected] to exercise any right.

California (CCPA / CPRA): Do Not Sell or Share My Personal Information

California residents have the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of any sale or sharing of personal information for cross-context behavioural advertising. We do not sell personal information, and we do not share it for cross-context behavioural advertising. This means there is nothing to opt out of — but if that changes, this page will be updated and an opt-out mechanism will be provided. To exercise any California right, email [email protected].

7. Children

Mr. Handy is rated 4+ but is designed for adults doing home repairs. We do not knowingly collect data from anyone under 13 (or the equivalent minimum age in your jurisdiction — 16 in some EU member states). If you believe we've collected data from a child, email [email protected]and we'll delete it promptly.

8. Security

We use industry-standard security practices: all traffic between your device and our servers is TLS-encrypted; auth tokens are stored in the device's secure keystore (iOS Keychain / Android Keystore); passwords are hashed; access to production data is logged and restricted.

No system is perfectly secure. If you believe an issue exists, please report it to [email protected].

9. Changes to this policy

If we make substantive changes — for example adding a new third-party processor or a new category of collected data — we'll update the date at the top of this page and notify you in the app the next time you sign in.

10. Contact

Privacy questions or data-rights requests: [email protected].