Privacy Policy

Last updated October 26, 2026

Handrail is made by Midpoint Software Group ("we"). This policy explains what the app collects, why, and what you control. It's written to be read, not skimmed.

What we collect

• Account — your email address and a password (stored hashed by our authentication provider). Optionally a display name.
• Shifts, plans, and reminders — schedules, plan titles, dates, places, people you add to a plan, prep steps, tasks, and essentials you enter. These are user-entered records; Handrail does not read your device contacts or calendar. Live location access is optional as described below.
• Places — your home address and the addresses of places you go (work, appointments, anything you add), with the map coordinates Apple Maps returns for them, and how you usually get to each (drive, bus, walk, or bike). Handrail uses these only to work out when you need to leave. You can skip the home address and type trip times instead, and you can edit or remove any place under Profile → Places.
• Captures — photos, screenshots, pasted text, and voice-note transcripts you choose to capture, plus what the app read from them (title, dates, amounts, sender).
• Forwarded email — if you forward an email to your Handrail address, we keep the sender, subject, message text, and any attachments as a capture. Your Handrail address is private to your account; anyone who has it can send to it, so treat it like a phone number.
• Usage of AI features — when a capture is read or a question is asked, we record that it happened and how much text was processed, so we can meter free reads and Pro. Error records may include the question or request details needed to diagnose a failed operation.
• Health-related organization and older reminder preferences — doctor, therapy, and pharmacy checklists and information you choose to enter may contain health information. We use it to provide your requested planning, storage, and AI features. Android version 1.1.1 removes the built-in “Take meds” reminder and no longer reads or sets its preference. Older versions may have stored that preference, its timing, and checklist status; existing records remain subject to the deletion options below. Handrail does not request medication names or doses through a dedicated medication feature.
• Diagnostics — our services record failed operations and technical request information to maintain the app and investigate problems.
• App updates — Expo processes a random app-installation identifier, operating system, and app version information to deliver compatible updates and measure update delivery. This identifier is not an advertising ID.
• Subscription status — purchase and subscription history, product identifiers, renewal/expiration status, and app-user identifiers processed by RevenueCat to validate purchases, restore access, and analyze subscription operation. RevenueCat receives technical app/device information and associates purchases with your Handrail account ID. Apple or Google Play processes payment; Handrail does not receive your full payment-card details.

How captures are read

When you request an AI feature, our backend sends the information needed for that request to Anthropic's Claude API. Read uses the selected capture text, image, or PDF. Ask Handrail uses your question and relevant saved document details. What am I forgetting uses relevant schedule, task, reminder, and checklist information. Suggested prep lists use the plan title, time, place, people you entered, and saved essentials. This content can include personal, financial, or health information that you chose to enter. Anthropic processes API content for us under its commercial terms; API inputs are not used to train its models by default. AI results can be wrong. Review suggestions before adding or relying on them. Captures and generated readings may already be stored before you accept a proposed action.

Forwarded email arrives through Resend, the service that receives mail for us, and is filed to your account within seconds. Resend processes received messages and attachments and retains provider records under its applicable retention settings.

Voice notes are transcribed using on-device speech recognition when supported by your phone. The audio never leaves your device; only the text you approve is sent for reading.

Trip times. When you search for an address, and when Handrail works out a leave-by time, our backend sends the search text or the two map points (where the trip starts and ends), the way you're getting there, and the planned arrival time to the Apple Maps Server API, which returns suggested places and an estimated travel time based on typical traffic. Your Apple ID is not involved and Apple does not receive your name, email, or account identifier from Handrail. Trip times are rechecked when you open the app using saved place coordinates. Optional live location assistance is separate from these trip estimates.

Optional location assistance

Starting with version 1.1.3, location assistance is off by default. If you enable it and grant location permission, Handrail compares your live location with your saved home place while the app is open. It asks whether you are leaving for an upcoming work shift before changing departure reminders. Choosing No leaves reminders unchanged. Choosing Yes marks departure complete and stops remaining shift alarms; it does not change your work schedule.

Live location coordinates are processed on your phone and are not uploaded to our servers, shared with AI or advertisers, or stored as location history. Monitoring stops when the app is in the background or closed. Saved addresses and their map coordinates remain part of your account data as described above. You can turn assistance off in Handrail Settings or revoke permission in device settings. Working from home is a setting you choose for a shift; Handrail does not infer remote work merely because you are home.

Permissions and device access

Camera access is used when you choose to take a photo. The system photo picker gives access to the images you select. Microphone access is used only for voice capture you start; unsupported devices can use typed notes. Notifications support reminders and can be disabled in device settings. Clipboard content is used when you choose to paste or copy. Opening a place in Maps passes the selected place to your maps provider. No advertising ID, device contacts, or broad photo-library access is requested. If you enable location assistance, Handrail requests location access while you use the app. You can deny or revoke it and keep using ordinary reminders.

Where data lives

Supabase provides authentication, database storage, and private file storage in the United States. Row-level security restricts app users to their own records, and temporary signed links allow authorized access to files. Authorized backend services also process records to provide the features described here. Data sent between the app and our services uses HTTPS. Providers may process technical request information, including IP addresses, for delivery, security, and diagnostics. Backups support disaster recovery.

What we don't do

• We don't sell your data, share it with advertisers, or show ads.
• Access to personal content is limited to providing the service, resolving support or security issues, and meeting legal obligations. Do not send sensitive documents to support unless needed to resolve your request.
• We don't track you across other apps or sites.

Notifications

Handrail sends local notifications only for leave-by alarms and reminders you set. No marketing, no nudges. You can turn them off in your device settings at any time.

Your controls

• Remove individual data — you can remove documents, shifts, plans, and tasks in the app. Removing a vault document or discarding a capture does not necessarily erase its underlying capture or uploaded file. Request full removal of those items by emailing us. See data deletion instructions.
• Delete your account — Profile → Delete my account. Successful deletion removes your account, associated app records, uploaded capture files, AI usage records, and account-linked error records from our active app database and storage. Provider records and backups are subject to the retention limitations below. Details at myhandrail.me/delete-account.
• Export — email us and we'll send you what we hold about you.

Retention and deletion limits

We retain account information and saved content while your account is active or until you request deletion. Account-linked app error records are removed by account deletion. Provider backups, security logs, AI-processing records, and mail-delivery records can remain for the providers' applicable retention periods; deletion from active storage does not immediately erase backup copies. Apple, Google Play, and RevenueCat may retain transaction records needed for billing, fraud prevention, and legal obligations. Subscription-provider profile deletion is a separate support request at hello@myhandrail.me. We will explain any records that must be retained when handling your request. Account deletion and uninstalling do not cancel a subscription. Manage or cancel your subscription.

Children

Handrail is not directed at children under 13 and we don't knowingly collect data from them.

Changes

If this policy changes in a way that matters, we'll say so in the app and update the date at the top.

Contact

Midpoint Software Group · hello@myhandrail.me