Handover is a self control tool. It works better the less it knows about you, so it is built to hold as little as possible.
| Data | Why | Where it lives |
|---|---|---|
| Email address, and a display name if you give one | Your account and sign in codes | Cloudflare Workers and D1, our servers |
| A sign in identifier from Apple or Google, if you use those | Recognising you on your next sign in | Our servers |
| Your rules, streak and credits | So they survive a reinstall or a new phone | Your device, and our servers once you create an account |
| Referral codes and who redeemed them | Awarding credits and preventing abuse | Our servers |
There is no third party analytics in Handover. No Google Analytics, no Facebook SDK, no attribution networks.
Performance of a contract for your account and the syncing of your own data. Legitimate interest for preventing abuse of referral credits. Consent for notifications, Screen Time, Motion and Fitness and location, each granted in your system settings and revocable there at any time.
Data is kept while your account exists. Deleting your account, in the app under Account or by emailing us, removes your personal data from our systems within thirty days. Backups roll off within ninety days. You can use Handover without an account at all, in which case nothing leaves your phone.
Access, correction, deletion, export, restriction and objection, and a complaint to your data protection authority. In Australia that is the OAIC. Email handover@tinkerlane.app and we respond within thirty days.
Cloudflare, for hosting, the database and sending sign in emails. Apple and Google, for sign in and for payments, under their own terms. Nobody else receives personal data.
Handover is not intended for under sixteens. We delete accounts we find to be underage.
Material changes will be shown in the app before they take effect.