At MyHandyDocs ("MyHandyDocs", "we", "us" or "our"), your privacy is fundamental to everything we build. This Privacy Policy explains what information we collect, how we use and protect it, and the choices and rights you have. By using the MyHandyDocs mobile application and this website (together, the "Service"), you agree to the practices described here.

1. Information We Collect

We practise data minimisation and collect only what is necessary to operate the Service:

Account & authentication data. Your name, mobile phone number and password (and, optionally, your email), used to create your account and sign you in. Your phone number is verified with a one-time SMS code when you register.
Profile information. Optional details you choose to add, such as your name and a profile photo.
Documents you upload. The files you store in your vault and related metadata such as titles, categories and tags that you assign.
Group & sharing data. Groups you create or join, and the membership and roles associated with sharing documents with people you trust.
Technical & usage data. Limited information required to run and secure the Service, such as device push-notification tokens, and security logs used to protect against abuse.

2. How We Use Your Information

We use the information we collect to:

Create your account and sign you in securely with your phone number and password.
Store, organise and display the documents you upload.
Enable private sharing of documents within the groups you create.
Send transactional messages such as one-time SMS verification codes and relevant push notifications.
Protect the Service, prevent fraud and abuse, and maintain security.
Provide customer support and respond to your requests.
Comply with legal obligations that apply to us.

We do not sell or rent your personal information

3. Service Providers & Where Your Data Is Stored

To deliver the Service, we rely on trusted third-party infrastructure providers who process data on our behalf under appropriate safeguards:

Cloudflare R2 — secure cloud object storage where your uploaded documents are stored.
MongoDB Atlas — managed database service used to store account and document metadata (not the document files themselves).
Google Cloud — managed cloud infrastructure that hosts and runs our backend application.
Twilio — messaging provider used to deliver one-time SMS verification codes for phone-number verification.

These providers are contractually required to safeguard your information and may only process it to provide services to us. Your data may be processed in data centres located in regions operated by these providers.

4. How We Protect Your Documents

Security is central to MyHandyDocs. Our safeguards include:

Password-protected sign in. You sign in with your phone number and password, and your number is verified with a single-use, time-limited SMS code when you first register.
Signed, short-lived access. Documents are served only through temporary signed URLs generated at the moment of access — there are no public or permanent file links.
Session protection. We use short-lived access tokens together with rotating refresh tokens to protect your session.
Hardened APIs. Our services apply rate limiting and modern security headers, and run on managed cloud infrastructure.

While no method of transmission or storage is ever completely secure, we work continuously to protect your information using industry-standard practices.

5. Sharing of Your Information

Your documents are private to you and are only shared with the people you explicitly choose to share them with through groups. We share personal information with third parties only in the limited circumstances described in this policy — namely with the service providers listed above, or where required by law, legal process or to protect the rights, safety and security of our users and the Service. Sharing you initiate within the app is always reversible: you can revoke an invite or remove a member at any time.

6. Data Retention

We retain your personal information and documents for as long as your account is active or as needed to provide the Service. When you delete your account, we remove your documents and associated personal data from our systems, except where we are required to retain certain information to comply with legal obligations, resolve disputes or enforce our agreements.

7. Your Rights & Choices

You have meaningful control over your information. You can:

Access and update your profile information within the app.
Add, download and delete documents in your vault at any time.
Manage group membership and revoke sharing you have granted.
Delete your account and associated data (see below).

To exercise any of these rights, contact us at myhandydocssupport@gmail.com.

8. Account Deletion

You may delete your account at any time from within the app, or by emailing us at myhandydocssupport@gmail.com. When you delete your account, your stored documents and personal data are removed from our systems in accordance with this policy. Account deletion is permanent, so we recommend downloading anything you wish to keep beforehand.

9. Children's Privacy

MyHandyDocs may be used by children, including for personal notes and study material. We do not verify the age of users at signup. Because our sign-in process requires a phone number, we recommend that children use the app under a parent or guardian's supervision, particularly when creating an account or joining a group. Parents and guardians who believe their child has shared personal information with us, or who wish to review, modify, or delete their child's account information, can contact us at myhandydocssupport@gmail.com to request this.

10. International Users

By using the Service, you understand that your information may be processed and stored in regions operated by our infrastructure providers, which may be outside your country of residence. We take steps to ensure your information is handled consistently with this policy wherever it is processed.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, please contact us at myhandydocssupport@gmail.com or visit myhandydocs.com.