Privacy Policy
This Privacy Policy explains how Kaitlin Last LLC ("we," "us," or "our") collects, uses, and protects your information when you use the handled. app and website (the "Service"). handled. is a product of Kaitlin Last LLC, and a home-front headquarters built for military spouses and families. We know the information you keep here is personal, and often sensitive, so we try to collect as little as possible and to explain plainly what we do with it. Questions? Reach us at myhandledapp@gmail.com.
The short version
We collect the account details you give us and the information you choose to add to run your household. We do not sell your data, we do not show ads, and we do not host your actual documents, only the details you log about them. You can export everything or delete your account at any time from within the app.
Information you provide
Account information. When you create an account, we collect your email address and a securely hashed version of your password. If you sign in with Google, we receive basic identity information from Google in place of a password. If you turn on two-step verification, we store the settings needed to verify your authenticator app, never the codes themselves.
Your profile. During setup you may tell us things like your service branch, base or installation, household members, your role, and your current deployment status, so the app can tailor itself to your situation. This is optional, and you can change or clear it at any time.
The information you add. handled. holds what you put into it to run your home. Depending on which features you use, that can include:
- Tasks, reminders, and notes
- Bills and their due dates
- Medical contacts and appointments
- Profiles for your children
- DEERS dependents and ID or benefit renewal dates
- Details about your documents (a name, a category, where the document lives, and any expiration date), never the document file itself
- Military benefit information and PCS or deployment progress
Household sharing. If you invite a partner or family member to your household, the information created within that household can be seen by its members. You control who you invite and can remove members at any time.
Your app PIN. If you set an optional privacy-lock PIN, we store only a one-way hashed version of it, never the PIN itself.
Messages you send us. When you send feedback or contact support, we receive your message and any screenshot you choose to attach. Feedback screenshots are delivered to us by email and are not stored in the app's database.
Information collected automatically
We keep this to a minimum. Our hosting and infrastructure providers generate standard technical logs that may include IP addresses, browser or device information, timestamps, and account identifiers, used to operate, secure, and troubleshoot the Service. We do not log the contents of your sensitive records.
Website analytics. On our public marketing pages only (the home page, Features, Pricing, and these legal pages) we use Google Analytics to count visits and see which pages people find useful. It records the page address, approximate location from a truncated IP address, and general browser and device information, and it sets cookies in your browser. It is not loaded on any page inside the app, on sign-in or sign-up pages, or on invitation links, so nothing you keep in handled. and no part of your account is ever sent to Google. We do not use advertising trackers, we do not run ads, and we do not send your personal information to Google. You can opt out for every site using the Google Analytics opt-out browser add-on, or by blocking cookies in your browser.
Campaign tags. A link we share on social media or in email may carry a short label naming the post it came from. Your browser holds that label for the length of your visit and passes it to our waitlist provider if you go on to join the waitlist, so we can see which posts bring people to us. It is a label about the link, not about you, it is never attached to your account, and it is cleared when you close the tab.
How we use your information
We use your information to provide and maintain the Service, including to:
- Create and secure your account and keep you signed in
- Store and display the information you add, and send the reminders you set
- Enable household sharing when you invite others
- Respond to your feedback and support requests
- Protect the Service against fraud, abuse, and security threats
- Comply with legal obligations
We do not sell or rent your personal information, and we do not use it for advertising.
How we share information
We share information only in these limited ways.
Service providers (sub-processors). We use a small number of trusted providers to run handled. They process data on our behalf, under contract, and only to provide their service to us:
- Supabase, for our database, authentication, and encrypted backups
- Vercel, for application hosting and infrastructure
- Resend, for sending transactional email such as invitations, password resets, and feedback
- Upstash, for rate limiting that protects the Service (request metadata, not the contents of your records)
- Google Analytics, for visit counts on our public marketing pages only, never inside the app
- beehiiv, for our email waitlist and announcements, if you choose to join it
Legal reasons. We may disclose information if required by law, or to protect the rights, safety, or property of our users, the public, or handled.
Business transfers. If handled. is ever involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
Sensitive information and military families
handled. is built for military life, which means the information you keep here can be sensitive: your children's details, medical contacts and appointments, and the timing of deployments and moves. We treat all of it as private to you and your household. A few things to know:
- We are not a healthcare provider and are not a HIPAA-covered entity. Medical information you log is treated as your private content, not as a medical record.
- For your family's operational security, please do not enter classified information or specific operational details about missions, movements, or unit activity. handled. is for managing your home, not for storing sensitive operational information.
- You decide what to put into handled., and you can edit or delete any record at any time.
Children's privacy
handled. is intended for adults 18 and older. It is not directed to children, and children do not create or hold their own accounts. As a parent or guardian, you may record information about your own children as part of managing your household, and you are responsible for the information you choose to enter about them. We do not knowingly collect personal information directly from children. If you believe a child has created an account, contact us and we will address it.
How long we keep your information
We keep your information for as long as your account is active, because the value of handled. is continuity across deployments and moves. When you delete your account, we permanently remove your data from our live database. Some data may persist temporarily in encrypted backups until those backups age out, currently up to [confirm backup window] days. [confirm inactivity policy: whether long-dormant accounts are eventually deleted after notice.] Feedback emails, including any screenshots, remain in our support inbox until we delete them.
Your rights and choices
You are in control of your information:
- Access and export. You can download everything you have added, at any time, from Settings.
- Correction. You can edit or delete any individual record directly in the app.
- Deletion. You can permanently delete your account and its data from Settings.
- Email. Transactional emails such as password resets and invitations are part of the Service. We do not send marketing email during the beta.
Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or other state privacy laws, including the right to know what we hold and to request deletion. You can exercise these through the in-app tools above, or by contacting us at myhandledapp@gmail.com. We will not discriminate against you for exercising your rights.
How we protect your information
Security is a core part of handled. We use encryption in transit, database access rules that isolate each household's data, hashed passwords and PINs, optional two-step verification, and automatic sign-out. We keep encrypted backups. No online service can promise perfect security, but we work to protect your information and to limit what we collect in the first place.
Where your information is stored
handled. is operated from the United States, and your information is stored and processed on servers located in the United States. If you access the Service from outside the United States, you understand that your information will be processed here.
Changes to this policy
We may update this Privacy Policy as handled. grows. If we make a material change, we will update the date at the top and, where appropriate, notify you in the app or by email. Your continued use of the Service after a change means you accept the updated policy.
Contact us
handled. is a product of Kaitlin Last LLC. Questions about this policy or your information: myhandledapp@gmail.com.