Privacy Policy
For All Hands. Last updated: on release.
This policy explains what All Hands does with your information. It is written to be read, not to be survived. If anything here is unclear, ask us at harfredlabs@gmail.com.
The short version
All Hands is designed to keep your data on your own device wherever that is possible. We do not sell your personal information, we do not share it with advertisers, and we do not build advertising profiles about you.
What stays on your device
The content you create in All Hands — your entries, settings and preferences — is stored locally on your device by default. When you delete the app, local data goes with it. We cannot read data that never leaves your device, and we cannot recover it for you if you lose the device.
What we collect
We collect the minimum needed to run the app and keep it working:
- Technical information sent by your device when the app contacts our servers — IP address, device and operating-system type, and the time of the request. Web servers record these automatically. We use them to serve the app, to diagnose faults and to prevent abuse, and we do not use them to identify you personally.
- App version information, so the app can check whether an update is available.
- Anything you send us directly, such as the contents of a support email. We keep it for as long as it takes to help you, and no longer.
Features that send data off your device
You can fight the AI, play pass-the-phone and watch replays without anything leaving your device. Offices are the one feature that needs our server, and only if you start or join one:
- An anonymous account. Your device gets a random account identifier and a secret key, kept on the device. We store the identifier and a one-way hash of the key — no email address, phone number or real name is asked for.
- Your employee profile. The display name, optional pronouns, job title, desk slogan, cartoon avatar and chosen specials you enter, so your colleagues in that office can see your desk and fight you. All free text goes through a language filter. No photos are ever collected.
- Fight records. When you fight in an office, the input log of the fight (which buttons were pressed on which frame — a few kilobytes) so the server can replay it, confirm the result and award Annual Leave, plus your win–loss record.
Office data is visible only to members of that office. An office admin can remove you, and deleting an office removes it for everyone. To delete your profile or account data, email us at the address below.
Service providers
We use a small number of providers to run All Hands, and they process data only on our instructions:
- Google Cloud — hosting, storage and content delivery.
- Neon — the Postgres database that holds office, profile and fight records.
- Apple and Google — app distribution, and payment processing where the app offers purchases.
These providers operate internationally, so your information may be processed in a country other than your own. We rely on the safeguards those providers offer for transfers of that kind.
Children
All Hands is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, write to harfredlabs@gmail.com and we will delete it.
How long we keep things
Data you store locally lasts until you delete it or remove the app. Data held on our servers for a feature you enabled is kept while your account is active, and removed within 30 days of your asking us to delete it. Server logs are kept for a short period for security and diagnostics, then discarded.
Your rights
Depending on where you live, you may have the right to see the personal information we hold about you, to correct it, to have it deleted, to object to how we use it, or to receive a copy in a portable form. Ask us at harfredlabs@gmail.com and we will respond within the time your local law requires — and in any case within 30 days.
Much of this you can do yourself: deleting the app removes local data, and where the app offers an account you can delete it from within the app.
Security
Data sent between the app and our servers travels over an encrypted connection (HTTPS), and data we store on your behalf is encrypted at rest. No system is perfectly secure, so we do not claim otherwise — but we keep the amount of information we hold small, which is the most effective protection available.
Changes to this policy
If we change this policy we will update this page and the date at the top. If a change materially affects how we use your information, we will tell you in the app before it takes effect.
Contact
All Hands is published by All Hands. For any privacy question, or to exercise any right above, write to harfredlabs@gmail.com.