Your data, kept small on purpose.

SwiftShiftHoldings Limited (trading as Handov AI; "Handov", "we", "us") is the data controller for the personal data described in this policy. You can reach us at any time at support@handovai.com or by calling +44 (0)1473 943 220 and choosing technical support.

This policy explains what we collect when you use the Handov AI telephone service or the handovai.com website, why, how long we keep it, and the rights you have under the UK GDPR and the Data Protection Act 2018.

Account data: your 8-digit PIN, your subscription tier, your token balance, and (if you call from a mobile) your phone number, used to recognise you on return calls.

Conversation data: text transcripts of what you say to Handov and what Handov replies, so that the memory, search and reminder features work. We never record or store raw audio.

Reminder and wellness data: reminders you set, wellness check-in transcripts, and — only if you ask us to — a nominated family member's email address for wellness alerts.

Payment data: handled entirely by Stripe. We never see or store your card number; we receive only your subscription status and a payment reference.

Support tickets: messages you dictate to technical support and our replies.

To provide the service you bought (performance of a contract): authenticating your PIN, maintaining your balance, remembering your conversations, firing your reminders.

Wellness alerts to a family member are sent only at your explicit request (consent). You can withdraw this at any time by saying so on a call, and we will stop immediately.

Keeping our systems secure and preventing fraud, such as PIN brute-force lockouts (legitimate interest).

Conversation transcripts are automatically and permanently deleted after 6 months. Reminders persist until you delete them or ask us to. Wellness logs are kept while your subscription is active.

You can erase everything we hold about you at any time, in one of three ways: say "delete my data" on any call, use the account option on a call, or email support@handovai.com. Erasure is immediate and permanent.

We use a small number of processors under contract: OpenAI (AI conversations), Twilio (phone calls), Stripe (payments), Cloudflare (secure networking), and Resend (email alerts). Some of these process data in the United States; where they do, transfers are protected by the UK International Data Transfer Agreement or standard contractual clauses.

We never sell your data, never share it for advertising, and never use your conversations to train AI models.

You have the right to access, correct, export, restrict, object to, and erase your personal data. Most of these can be exercised by voice on any call — Handov is designed so that people who cannot use the internet can still control their data.

If you are unhappy with how we handle your data, contact us first at support@handovai.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

PINs are rate-limited and locked after failed attempts. All traffic is encrypted in transit (TLS). Access to production data is restricted and every administrative action is written to an audit log.