What we hold, and what we never do with it.

What the service holds

Your account. Your email address, the name you tell us to use, and which devices are signed in. If you sign in with Apple or Google we receive an identifier and your email from them, and nothing else.

Your work. Everything you and your Hands write down: messages, notes, tasks, calendar entries, contacts, expenses, invoices and any tables your Hands keep for you. Some of it is kept by a Hand without being asked (a size you mentioned, a preference), and all of that is listed on one screen (What I kept) with an undo beside each row.

Calls. When you call a Hand, what you say is streamed to the company that runs the voice model so it can answer. A written transcript is kept in your account afterwards, and you can delete it. If you turn the camera on during a call, what the camera sees goes the same way, while the camera is on.

Recordings of calls. The iPhone app also records the call itself, both voices, and keeps the audio on your phone. It is never uploaded: not to us, not to the voice model, not into a backup of your Hands account. It sits in the app's own storage, which means it is included in your phone's own iCloud or computer backup if you keep one; that backup is Apple's and yours, and we can't read it. The screen says Recording for the whole call, every recording is listed under Settings › Calls › Recorded calls, and deleting one deletes the audio. You can turn recording off there. Deleting the app deletes every recording with it.

Photos and files. What you attach. A photo of a receipt is read so it can become an expense; a photo you send in a chat is read so a Hand can answer about it.

Where you are. Only if you turn it on, and only while the app is open. It is used to work out which stop is nearest, how long a drive takes, and to answer "where am I". It is never stored as a history of your movements and never sent anywhere except to look up places and routes.

Accounts you connect. If you connect Gmail or another service, your Hands act on it with the permissions you granted, through a service that holds the connection on our behalf. We never see your password. Disconnecting it in the app ends that access.

Diagnostics. The machine your Hands run on sends us its own log lines so we can see what went wrong. These are lines of technical output, never the contents of your messages, and obvious secrets, addresses and identifiers are masked before they leave. They are deleted after a fortnight.

Where it lives

Your Hands run in a home of their own on Cloudflare's network: a container for your account, a database nobody else shares, and a continuous encrypted backup in our storage.

Companies that process some of it on our behalf, because the service can't work without them: the provider of the language model that writes the replies, the provider of the voice and vision model used on calls and to read receipts, the service that holds your connected accounts, the provider of the cloud computers your Hands work on, the service that runs web searches and fetches pages you ask a Hand to read, our hosting and storage provider, our payment processor, and the service that sends our emails. Each acts on our instructions and none is permitted to use your content for their own purposes. We'll name any of them on request: write to hello@tryhands.com.

Usage analytics in the apps, only if you turn them on

The apps have a setting called Usage analytics, off unless you switch it on. If you do, the app tells PostHog (PostHog, Inc., in the United States) which parts of Hands you use, so we can see what works and what people get stuck on: things like a Hand being created, a message sent, a call started, or a step of setup finished. Those events are linked to your account's email address, and PostHog also records what any website visit would show it: your IP address (which it uses for a rough location), your operating system and device type, and the time.

It never receives what you or your Hands write, your records, files, contacts or calls, and it doesn't record your screen or every click. Turn the setting off and nothing more is sent; ask us and we'll delete what was.

Using your Hands from Claude, only if you connect it

You can connect Hands to Claude, Anthropic's assistant. Nothing is shared until you add Hands as a connector in Claude, sign in, and choose what Claude may do: see what your Hands did, start work, or both.

Claude then receives only the answers to what it asks for: your Hands' names, roles and whether they're busy; the recent log of what they did; and a record you or Claude name (a note, task, person or table row), with anything that looks like a password or key masked first. If you let it start work, the job it sends goes into that Hand's thread, where you read it. It can't approve anything, change settings or see your secrets. What Claude receives is then handled by Anthropic under its own terms.

We keep the connection's sign-in tokens (one lasts an hour, the other up to 30 days) and a log of each request: when, which tool, which app, whether it worked, and which Hand or record. The log never holds the words of a message, and only the last 500 entries are kept. Disconnect at Your account › Connected apps and it stops at once; delete your account and all of it goes.

What we never do

We don't sell or rent your data. We don't show advertising. There is no advertising identifier and no session recording, in the apps or on this site, and no third-party analytics on this site; the apps' usage analytics above are off unless you turn them on. We don't use your content to train models, ours or anybody else's. We don't read your work except when you ask us to help with a specific problem, and we ask first.

What you can do about it

See it. Every record is on a screen in the app, including the ones a Hand kept on its own.

Take it. Any kind of record exports as a spreadsheet from the app.

Delete it. Settings › Account › Delete account removes your account, the machine your Hands ran on, its database and its backup, and closes the credit account. It can't be undone, and it happens in one go rather than over days. A subscription bought through the App Store has to be cancelled with Apple; we can't do that for you.

Ask us. Write to hello@tryhands.com and we'll tell you what we hold about you, correct it, or delete it. No form, no waiting period. If you're in the UK, the EU, or a US state with its own privacy law, these are your rights under it, and you can complain to your regulator if we get it wrong.

How long we keep it

Your work stays until you delete it or delete your account. Backups are continuous and go with the account when it is deleted. Diagnostic logs are deleted after a fortnight. Payment records are kept as long as the law requires, because a receipt is an accounting record rather than a fact about you.

Children

Hands is not for children. You must be at least 16 to have an account, and we don't knowingly collect anything about anyone younger.

What this website collects

A count. When a page is served, our own server writes down which page, the site that linked to it if your browser said, the two-letter country, and the time. When you open a question on a page of questions, the page tells our server which one. That is all it reports: no identifier of any kind, no address, nothing that could tie two visits together, and nothing is loaded from anybody else's server; the fonts are served from this domain too. The counts exist so we know which pages are read and which questions are asked, and they can't be turned back into a person.

One design test. We're comparing two colour schemes for this site, pink and blue. Outside the EU, the UK and Switzerland, a new visitor is shown one at random, and a cookie named hands-look holding only the word "pink" or "blue" keeps you on the same one for 30 days, so the site doesn't change colour as you read it. The counts above note which colours a page was shown in, and whether a click went on to sign up, so we can see which works better. The cookie holds nothing else and identifies no one; delete it any time. In the EU, the UK and Switzerland we set no cookie and you see the usual pink.

Signing up happens on our accounts page, and what it holds is your account, described above. If you left your email on the early access list this site used to have, we hold that address, the page you signed up from, the referring page if your browser sent one, the country and the time. Reply to any email from us, or write to hello@tryhands.com, and we'll delete the row.

If you are in Europe or the UK

The same policy applies to everyone; this says it in the words the GDPR asks for.

Who is responsible. General Intelligence Systems LLC, a Wyoming limited liability company, is the data controller. hello@tryhands.com reaches a person.

Why we are allowed to hold it. Almost all of it is because you asked us to: running the service for you is the contract between us, and your notes, tasks, records and messages are what running it means. Keeping the service standing up and safe (the diagnostic logs, the checks that stop abuse) is our legitimate interest, and we've kept it to the least that works. Where we ask for something you can say no to (your location, the camera, recording your calls) the basis is your consent, and you can withdraw it in Settings without losing the rest.

No tracking cookies. This site sets no tracking cookies and loads nothing from anybody else's server; the only cookie is the colour test's above, which identifies no one. The page counts above hold no identifier, so there's no banner because there's nothing a banner could ask you. Signing in to your account keeps you signed in, and the apps store things on your own device in order to work; that is the exception every privacy law makes for a thing doing the job you opened it to do.

Your rights. You can ask us for a copy of what we hold, correct it, have it deleted, have us stop or limit what we do with it, take it elsewhere in a form a computer can read, or object to us holding it at all. Most of it you can do yourself in the app, immediately. For the rest, write to us: we answer within a month and there's no form to fill in. If we get it wrong you can complain to your national data protection authority, and we'd rather you told us first so we can fix it.

Where it goes. We are a US company and the machines are in the United States, so your data is held there and by the providers named above, some of which are also American, as is PostHog if you turn usage analytics on. Where the law requires a safeguard for that, we use the European Commission's standard contractual clauses with each of them.

Nothing decides anything about you. A Hand writes, suggests and files. No automated process here decides whether you get something, refuses you anything, or produces a legal effect about you.

Changes

If this changes we'll say so here with a date, and tell you in the app if the change matters. This version: 15 October 2026 (using your Hands from Claude, only if you connect it). Before that: 11 October 2026 (usage analytics in the apps, opt-in; a colour test on this site).

Questions about any of it: hello@tryhands.com. We are General Intelligence Systems LLC, a Wyoming limited liability company.