1. Who we are and what this policy covers
Handy, listed on the App Store as Handy: Snippets & Files, is owned and provided by Vairagya Ltd (“we”, “us” or “our”). This policy explains how information is processed when you use the app, its extensions, optional integrations, purchases and our support service.
For personal information whose purposes and means of processing we determine, Vairagya Ltd is the data controller. Vairagya Ltd is a private company limited by shares, incorporated under the Companies Act 2006 in England and Wales, United Kingdom, with company number 9360006. Our registered office is at 128 City Road, London EC1V 2NX, United Kingdom. Contact us about privacy at apps@vairagya.co.
This policy covers the Handy app. A website hosting this policy or a third-party page you visit may have separate hosting, security-log and cookie practices, which must be described in that website’s notice.
2. The essentials
Handy is built so that your data stays on your device. You do not need a Handy account, and the snippets, links, images, files and other content you save are never sent to Vairagya’s servers: we do not operate a server that stores or receives your library content. If you turn on optional iCloud sync, your library is stored in Apple’s private CloudKit service associated with your own Apple Account, not with us.
Handy does not continuously monitor your clipboard or collect a history of everything you type. You choose the content to save, paste, share or process. The app has no advertising SDK or cross-app advertising tracking. We do not sell personal information or share it for cross-context behavioural advertising.
“Local first” does not mean no information ever leaves your device. Enabling iCloud, using Siri or Shortcuts, sharing content, contacting support and using purchase services involve the processing described below. Purchase-related information can be processed even if you have not purchased Pro.
3. Your saved content and local processing
Handy processes the text, links, images, videos, files and documents you explicitly save. Associated information can include titles, original filenames, file types and sizes, dates, tags, collections, pins, visibility choices and deletion state. Saved files may contain embedded metadata, such as photo location information, which can remain in the original file when you export or share it.
The app also creates local thumbnails, search indexes, recognised or extracted text, integrity hashes, import queues and recovery records. These support previews, search, reliable imports, offline reuse and recovery. Original content and generated metadata are maintained separately.
Your content can include personal information about you or other people. We do not routinely receive or inspect that content. The app does not upload it to a Vairagya content server or to RevenueCat. If you voluntarily include content in a support message, we receive what you send as described in section 9.
4. Optional iCloud sync
If you enable sync, Handy sends library content and relevant organisation, file and deletion metadata to Apple’s CloudKit service so your compatible devices can share the library. This can include app-only items: app-only visibility is not a setting to exclude an item from sync. Account-scoped identifiers and sync records help keep data associated with the correct Apple Account and reconcile changes.
Apple processes iCloud data under its own terms and Privacy Policy. Storage and transfer protections depend on the Apple services and device settings involved. Handy uses Apple platform protections; we do not promise an additional Handy-managed encryption system or that every data category is end-to-end encrypted.
You can turn sync off in Handy. Doing so stops Handy’s sync activity but does not itself erase copies already in iCloud or on other devices. Sync is not an independent backup: changes and deletions can propagate when devices reconnect. Apple backup services may also retain app data according to your device and account settings.
5. Keyboard and clipboard access
The keyboard reads a limited, app-prepared selection of eligible saved items from shared storage on your device. It excludes app-only and deleted items. It does not send your library or typing to our servers and does not collect the surrounding text of the field you are editing.
Saved text and links can be inserted without Full Access. If you enable Full Access, supported image and PDF copy actions can write your selected content to the system clipboard so you can paste it. The keyboard does not continuously read the clipboard. Access by other apps, and any system clipboard transfer between devices, is governed by iOS and your Apple settings.
The keyboard can write a small local status report containing its Full Access state and the reporting time, which helps setup confirm that the keyboard has run with the permission enabled. Appearance preferences are also exchanged locally with the app. These reports do not contain keystrokes or saved content and are not sent to us. You can disable Full Access or remove the keyboard in iOS Settings.
6. On-device intelligence and search
Supported image recognition, PDF/text extraction and organisation suggestions run on-device using Apple frameworks. The app may use saved content, extracted text and existing organisation information to generate suggested titles, tags or collections. Generated results and search indexes are kept locally; changes you accept may subsequently sync as ordinary library metadata if sync is enabled.
Handy does not send this content to an external AI service or use it to train Vairagya AI models. Suggestions are optional and can be turned off. Availability depends on your device, operating system, model availability and Pro entitlement. Disabling suggestions does not automatically erase changes you previously accepted or all other locally generated search data.
7. Siri, Shortcuts and sharing with other apps
If you use Siri or Shortcuts, Handy provides eligible item identifiers, titles, metadata or the requested content to Apple’s automation system as needed for your action. Voice requests and Siri processing are governed by Apple’s settings and privacy information. This is separate from Handy’s on-device organisation suggestions.
Handy keeps a local record of item identifiers exposed to these surfaces so it can request removal of suggestions when items become unavailable. Making an item app-only prevents subsequent retrieval through Handy’s external surfaces; clearing Siri suggestions requests removal of Handy donations. Neither action can erase text you copied into a shortcut or content another app already received.
Sharing, dragging, exporting or running an automation can transfer content to a destination you choose. That destination’s practices apply after transfer. Handy may create temporary copies to support these operations. Review the content and destination before confirming an action.
8. Purchases and RevenueCat
Apple processes App Store payments. We do not receive your full payment-card details. Handy uses RevenueCat, Inc., a company based in the United States, to verify transactions, restore Pro access and manage purchase status, with purchase reporting available to us through its dashboard. RevenueCat is the only third-party data processor built into the Handy app, and it acts on our behalf under a data processing agreement.
RevenueCat processes purchase records, product and entitlement information, an automatically generated app user identifier and service-related technical information. Technical information can include app/SDK and operating-system details, locale, currency and service activity times. Network providers receive connection information, such as an IP address, when the app contacts them. Purchase screens may also generate purchase-flow events through the SDK.
To check whether you have Pro, RevenueCat identifies you only by a randomly generated identifier created by the app. The identifier is pseudonymous: it does not require you to supply a name or email, but it can distinguish an installation or purchase profile. We do not treat it as a guarantee that information can never be linked to a person. Our implementation does not supply your saved content, contact details or advertising identifiers to RevenueCat. Automatic device-identifier collection and optional SDK diagnostics are disabled.
RevenueCat can be contacted when purchase services initialise or refresh, even before you buy Pro. Local caching helps verified access work offline. Apple and RevenueCat may retain transaction records separately from your library. See RevenueCat’s privacy information for its practices in the roles it describes; our obligations for processing on our behalf remain ours.
9. Settings, support and diagnostics
Handy stores preferences such as appearance, haptics, onboarding progress and feature choices locally. It also keeps local activity counts and dates to limit how often it asks for an App Store rating. These rating-prompt counters are not uploaded by Handy. A review you submit is handled by Apple and may be publicly visible under Apple’s rules.
Support is provided by email at apps@vairagya.co. If you contact us, we receive your contact details, message and any screenshots, files or diagnostic information you choose to provide. We use them to answer your request, investigate problems and keep necessary correspondence. Please avoid sending confidential library content unless it is needed for your request.
The app does not include a separate behavioural analytics or third-party crash-reporting SDK. Purchase reporting described above is distinct from library-use tracking. Apple may provide app analytics, crash reports or TestFlight feedback according to its services and your sharing choices. Any such information we receive is used to maintain and improve Handy, not to build an advertising profile of your saved content.
10. Purposes and legal bases
Where a law such as the UK GDPR or EU GDPR requires a legal basis, our intended bases are as follows, subject to the circumstances and applicable law.
Providing requested functionality and paid access: processing necessary to perform our agreement with you, such as enabling Pro, restoring purchases and responding to service requests. Optional library actions operate only when you choose them and grant any required permissions.
Operating and protecting the service: our legitimate interests in preventing purchase fraud, troubleshooting, maintaining security and understanding purchase performance, balanced against your rights. This does not authorise advertising tracking or uploading your library.
Legal obligations: keeping records or responding to lawful requests where a specific legal obligation applies.
Consent: where required for an optional activity, we will obtain consent before that processing and provide a way to withdraw it. An operating-system permission is not blanket consent to unrelated uses. Withdrawing consent does not invalidate earlier lawful processing, and may make the optional feature unavailable.
We do not use your content for automated decisions that produce legal or similarly significant effects about you. Search and organisation suggestions are tools for your review.
11. Recipients and international processing
Information is provided to Apple for the Apple services you use, to RevenueCat for purchase services, and to apps or recipients you select when sharing. If you email support, your correspondence is stored in our email service, Google Workspace, which Google processes on our behalf under its data processing terms. We may disclose information we actually hold where legally required, to protect legal rights, or in a business transfer subject to appropriate confidentiality and data-protection obligations. We cannot disclose a library copy we do not possess.
Providers may process information in countries other than yours, including the United States. Where we are responsible for a restricted international transfer, we must use the safeguards required by applicable law, such as a valid adequacy arrangement or contractual safeguards with any required UK provisions. Because Vairagya Ltd is based in the United Kingdom and RevenueCat, Inc. is based in the United States, the pseudonymous identifier and transaction information described in section 8 are transferred to the United States. These transfers are protected by the European Commission’s Standard Contractual Clauses together with the UK Information Commissioner’s International Data Transfer Addendum, as incorporated in RevenueCat’s data processing agreement. Contact apps@vairagya.co for information about applicable safeguards and how to obtain a copy where available.
12. Retention and deletion
Local library content is retained until you delete it or remove app data, subject to device and backup behaviour. Recently Deleted keeps content available for restoration. Permanent deletion removes recoverable item content and schedules file cleanup; cleanup can take longer if a file is in use, storage is unavailable or another item legitimately shares that original.
With sync enabled, permanent-deletion markers are propagated to other devices when they sync. Content-free identities and replay records may be retained for as long as the library needs them to prevent old offline changes from restoring deleted content. These operational records are not copies of the original snippet or file. Separate versions retained for unresolved recovery are handled by the app’s recovery and deletion controls.
Privacy & storage lets you clear temporary share/export copies and rebuildable thumbnails. Other generated information is retained while needed for library features and cleaned up as its source is removed. Copies you exported elsewhere, system backups and another app’s copies are outside Handy’s deletion controls. Turning sync off or uninstalling is not a request to delete every cloud or purchase record.
Purchase records are retained as needed to maintain a non-expiring entitlement, handle refunds or disputes and meet legal obligations. Support correspondence is retained as needed to resolve the request and for proportionate follow-up or legal recordkeeping. Retention depends on the purpose, record type and applicable obligations; it is not automatically the same as the lifetime of your local library. Contact us to request deletion of information we or our processors hold. We will explain any necessary retention or limits on deletion, including effects on future purchase recognition.
13. Your choices and rights
You can choose what to save, disable optional sync and suggestions, change keyboard permissions, make items app-only, delete items, clear temporary copies and export your library. Export is available without Pro. App-only visibility controls discovery, not a separate lock or a promise that previously shared copies disappear.
Depending on your location, you may have rights to access, correct, delete or obtain a portable copy of personal information; restrict or object to processing, including processing based on legitimate interests; and withdraw consent. Some rights have legal exceptions. We will not discriminate against you for exercising a protected privacy right.
Send requests to apps@vairagya.co. We may need proportionate information to verify a request and locate a purchase or support record, but will not ask for your Apple password or payment-card number. Because Handy has no user account and we do not hold your local library, we may guide you to the app’s controls instead of retrieving content remotely. An authorised representative may submit a request where local law permits.
You can complain to your local data-protection authority without contacting us first. If UK law applies, the regulator is the Information Commissioner’s Office. If EU/EEA law applies, you may contact the supervisory authority where you live, work or believe an infringement occurred.
14. Security and children
Handy uses device storage protections, controlled shared-container access, file-integrity checks and Apple service protections appropriate to the features involved. App-only visibility is not additional encryption, and exported archives are not password-protected by Handy. No storage or transmission method is completely secure. Protect your device, Apple Account and archive copies, and consider what personal information is embedded in a file before sharing it.
Handy is a general-purpose productivity app, not a service designed to solicit children’s personal information. Where parental permission is required, it must be obtained before a child uses the relevant service or provides information to us. If you believe we received a child’s personal information unlawfully, contact apps@vairagya.co so we can investigate and take appropriate action. The App Store age rating does not replace these legal requirements.
15. Policy changes and contact
We will update this policy when relevant practices change and revise the last-updated date. Material changes will receive appropriate notice through the app or another suitable channel. Where a new use requires consent, we will ask before undertaking it; publication of a revised policy is not itself consent.
Vairagya Ltd
Registered office: 128 City Road, London EC1V 2NX, United Kingdom
Company registration: 9360006, England and Wales, United Kingdom
Privacy enquiries and rights requests: apps@vairagya.co