Privacy

What Heard & Handled holds

An email address, a display name, a timezone, the items in your household and the state changes on them. Device push tokens, so a reminder can reach a phone. Nothing else is the point of the product, so nothing else is collected as a matter of course.

What Heard & Handled does not hold

• No read tracking beyond Seen. Seen is one state on one item, recorded when the person it was sent to opens it. There is no read mark on anything else, no last-seen time, and nothing about who looked recorded after it.
• No location history. Location moments are evaluated on the device of the person being reminded, are opt in, and record that a moment happened rather than where.
• No advertising identifiers, and no advertising.
• No sale or brokering of anything above, on any tier, ever.

Who can see your items

The members of your household, and nobody else. Every query the API answers is scoped to a household, and an invite grants membership rather than a view of anything.

How long items are kept

Your household’s history is kept for good, and it is yours. There is no time limit on it, and it is not behind a paid plan.

• Items, their answers and the times they happened are kept for as long as the household exists. An item that was done, or that could not be done, stays in the history.
• An item its sender removes is not erased. It stays in the history under Removed, where it can be put back, until its sender deletes it for good. Deleting it for good erases the item and its answers.
• Deleting an account removes the items that person sent, removed ones included. Items sent to that person stay with the household, no longer addressed to anyone.
• Nothing about attention is kept beyond the one Seen moment on an item, which records that the person it was for opened it, and when. There is no read mark and no last-seen time, and nothing about anything else anyone looked at.

Still to write

• Retention of what is not an item: push tokens, sign-in links, sessions and error reports.
• Processors: hosting, push delivery, error reporting, product analytics.
• Legal basis, data subject rights and how to exercise them.
• Export and deletion, including what happens to a household when one person leaves.
• A contact address for privacy questions.