Who is responsible
Rainybit, run by Joakim Langkilde (private individual, no company registration number), Havrevej, 4040 Jyllinge, Denmark · handover@rainybit.dk.
What we hold
- Your account: email address, your name and your language.
- The household: its name, who is in it and their role, which topics they can see, and invitations (the invited person's name and the code).
- The handbook: what you write, the pictures you add, your own topics and choices such as "not relevant".
- Sealed envelopes: codes each person keeps, and the household's "Shared codes" (for example Wi-Fi and alarm). They are encrypted on the phone before they are sent, and we cannot read them. Only the label (for example "Alarm code") is visible to the household.
- Phones: a public key and a name (for example "Samsung SM-S921B") for each phone that is signed in, so new phones can be approved and you can be told about them.
- The household's icon and your own name for it, if you choose them. Your own name for a household is seen only by you.
- Time-limited access: the end date, if someone is invited for a period.
- Guest pages (Lend for a while), if you make them: which entries the page shows, the guest's name as you type it, the period, a 4-digit code (stored only so that it can't be read back), and when and how many times the page was opened. Shared codes on a guest page are encrypted on your phone with a key that exists only in the link and the 4-digit code; we cannot read them.
- Suggestions about our questions, if you send one.
- Technical: when people signed in and changed things, and IP addresses in the server's logs for a short time.
We don't collect your location, your contacts or an advertising ID. Pictures are made smaller on the phone and the information about where they were taken is removed before they are stored. The handbook is designed not to hold passwords, PIN codes or CPR numbers, and the app refuses text that looks like them. Codes belong in a sealed envelope. The Health and medicine topic is for the practical things: who the doctor is, where the medicine is kept and who to call. Please don't write illnesses or diagnoses in the handbook.
Why, and on what legal basis
To provide the service you asked for: keeping and sharing your household's handbook (GDPR Article 6(1)(b)). Logs are used to keep the service secure (Article 6(1)(f)).
Where it is kept
- On your phones, while you are signed in.
- On our own server in Denmark.
- Emails with sign-in codes, a welcome when you create or join a household, new-phone notices, envelope requests and guest page notices are sent through Proton Mail (Proton AG, Switzerland, which the EU considers to provide adequate protection).
- If you use Talk: at Anthropic in the USA, only to make the answer (see below).
Who can see it
The people in your household, according to their role: owner and partner see everything; family and trusted members see only the topics shared with them. We, who run the service, can technically access the server to keep it running and secure and to comply with the law, but we don't read your handbook. We don't pass data on unless the law requires it.
Conversation with artificial intelligence
Under the Talk tab you can ask the handbook questions or get help writing it. The answers are made by Claude, an artificial intelligence from Anthropic PBC (USA). This only happens when you use Talk yourself:
- If you scan a letter (Scan a letter), its text is read on your phone and CPR, account and card numbers are removed. If you use Talk, the cleaned text is sent to Anthropic to suggest where the letter belongs; the picture is never sent.
- If you make a guest page in another language than the handbook and choose to have it translated, the text of the chosen answers (topics, headings and text) is sent to Anthropic to be translated. You read and correct the translation before it is used, and it is kept with the guest page. Codes, pictures and Health and medicine are never sent.
- What you write or say in the conversation is sent through our server to Anthropic to make an answer. Speech is turned into text by the phone's own speech recognition (on many phones entirely on the phone), and answers are read aloud by the phone's own voice. The sound is sent neither to us nor to Anthropic.
- Whether the conversation may read the handbook is the household's choice: the owner or a partner turns it on or off under Household, and it applies to everyone in the household. (Until the household has chosen, older versions of the app follow the phone's own setting.) If it may, what you can see in the handbook is sent as well, including what others in the household wrote, the names of the codes in the envelopes (not the codes) and your names. Otherwise only what you write.
- What is written under Health and medicine is never sent to Anthropic.
- Codes from the sealed envelopes and pictures are never sent. If something in a message looks like a code, the app stops it before it is sent.
- Anthropic processes the data on our behalf under its commercial terms and data processing agreement, and does not use it to train its models. Anthropic keeps it only for a limited time under those terms (longer if something is suspected of misuse). The transfer to the USA follows the rules of the data processing agreement. We don't keep the conversations; the server only records how many words were used.
- If you report an answer, the answer itself is sent to us so we can look at it.
Guest pages
The owner and partner can make a guest page for someone who borrows the house or the car for a while, with no app and no account. A guest page shows only the entries and codes chosen, and only during the period. Anyone with the link can see the page while it is valid; if it has codes, the 4-digit code is needed too.
- If you are a guest: you have no account with us. We only know the name the household typed, and the server's logs hold your IP address for a short time. The page uses no cookies, ads or tracking. The link is kept only in the browser tab you have open.
- If you open the page in the Handover app, it is kept on your phone, encrypted with a key that exists only on the phone, so it also works without a connection. It is deleted from the phone when it ends or is stopped.
- The household gets an email the first time the page is opened.
Invitations by email
If you ask Handover to email an invitation, we use the address you type once: to send the invitation. The address is deleted as soon as the mail has gone. We only keep that an invitation was sent.
Buying Family
Family is bought in Google Play. Google takes the payment; we never see your card or your address. We keep the purchase's number from Google, which product it is, who in the household bought it and until when it is valid. Our server asks Google whether the purchase is in order, and Google tells us when the subscription renews, is cancelled or refunded. This is kept as long as the household exists and bookkeeping requires.
Security
All traffic is encrypted (HTTPS). For every request, the server checks who may see and change what. The handbook is not end-to-end encrypted: it is protected by access rules, not by a key only you hold. The sealed envelopes are end-to-end encrypted: the key exists only on your phones and on the printed key, so neither we nor anyone else with access to the server can open them. The app can be locked with fingerprint, face or the phone's code.
How long
As long as the account and household exist. When an entry or picture is deleted, its content is removed from the server. You can delete your account in the app under Settings › Account › Delete my account (how), or write to handover@rainybit.dk; then we delete within 30 days. Backups and the sign-in service's log are deleted after 30 days at most. A guest page is deleted 30 days after it ends; its codes are deleted at once when it ends or is stopped. Time-limited access ends by itself on the end date.
Your rights
You can see your data, have it corrected, deleted or handed over, and object to its use. Write to handover@rainybit.dk. You can also complain to the Danish Data Protection Agency, datatilsynet.dk.
Children
Handover is made for adults and households. Children under 15 should not create an account.
Changes
If we change this policy, the new version is published here with a new date.