Effective August 3, 2026
Privacy Policy
Handa is designed for short-lived collaboration. This policy explains what information is processed when you create or join a shared checklist room.
Information we process
We process the display name you provide, a Firebase-generated anonymous user identifier, room titles, checklist items, assignments, comments, activity records, presence timestamps, and technical information necessary to provide and secure the service.
Handa does not require an email address or conventional account for anonymous rooms.
How we use information
We use this information to create shareable rooms, synchronize changes in real time, show participant initials and presence, attribute room activity, prevent abuse, troubleshoot reliability, and operate Handa.
We do not sell personal information or use room content for targeted advertising.
Firebase and service providers
Handa uses Google Firebase Authentication and Cloud Firestore. Firebase processes anonymous authentication identifiers and room data on our behalf according to Google's applicable terms and privacy commitments. Hosting and operational providers may also process limited technical data needed to deliver the service.
Sharing and room links
Anyone who receives a room's unguessable link can join that room after anonymous authentication and can see or modify its contents. Do not place passwords, payment data, medical records, government identifiers, or other sensitive information in a Handa room.
Retention
Handa marks inactive rooms for deletion after seven days and completed rooms after 24 hours. Actual deletion timing may vary while Firebase's time-to-live service processes expired records. Anonymous Firebase accounts may be retained separately according to the project's Firebase Authentication settings.
Your choices and rights
You may edit or remove room content while the room remains active. Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal information. Because rooms use anonymous identifiers, we may need the room URL and other details to verify a request.
Children
Handa is not directed to children under 13, or the minimum digital-consent age applicable where they live. We do not knowingly collect personal information from children.
Security and changes
We use Firebase Authentication, Firestore Security Rules, limited retention, and unguessable room identifiers to reduce risk. No online service can guarantee absolute security. We may update this policy as Handa evolves and will post the revised effective date here.
Contact
Questions or privacy requests can be sent to tristanrosales0@gmail.com.

