Legal

Privacy Policy

Last updated: 13 April 2026

1. Who we are

Hand Told (“we”, “us”, “our”) operates the website handtold.art and the Hand Told mobile application (together, the “Service”). This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.

2. Information we collect

Account information

When you create an account, we collect your name, email address, and (if you sign in via Google) your Google profile information. If you sign up with a phone number, we collect that number for authentication.

Interview and chat data

When you participate in an interview or collaborative chat, we collect the text messages you send, any photos you upload, and the personality profile and art suggestions generated from your conversation. This data is used to create personalised art commissions on your behalf.

Address and shipping information

If you save a delivery address or shipping details, we store this information securely to facilitate delivery of artisan-crafted pieces.

Inspiration and preferences

Photos you upload to your inspiration board, colour preferences, art interests, and favourite themes are stored to personalise your experience and inform artisan briefs.

Usage data

We collect anonymous analytics data (page views, screen views, button clicks) via Google Analytics 4 to understand how the Service is used and to improve it. This data does not identify you personally.

3. How we use your information

  • To provide and personalise the Service: conducting interviews, generating personality profiles, suggesting art forms, and connecting you with artisans
  • To process and deliver art commissions you approve
  • To enable social features: friend connections, shared inspiration, collaborative chats
  • To send you notifications about your account, commissions, and friend activity
  • To improve the Service through anonymous usage analytics
  • To communicate important updates about the Service

4. Third-party services

We use the following third-party services to operate Hand Told:

  • Firebase (Google): authentication, user identity management
  • Supabase: database, file storage, real-time messaging
  • Anthropic (Claude): AI-powered interview conversations and profile generation
  • Together AI: concept image generation for art suggestions
  • HERE Technologies: address autocomplete and geocoding
  • Google Analytics 4: anonymous usage analytics
  • Vercel: website hosting
  • Railway: API server hosting

Each of these services has its own privacy policy. We only share the minimum data necessary for each service to function.

5. Data storage and security

Your data is stored in Supabase (hosted in AWS Asia-Pacific) with row-level security policies that restrict access to your own data. Interview transcripts stored on your device are encrypted using AES-256 with a key derived from your user ID. All data in transit is encrypted via HTTPS/TLS.

6. Data sharing

We do not sell your personal information. We share data only in these circumstances:

  • With artisans: when you approve an art commission, the artisan receives a structured brief containing themes, colour palettes, and emotional context from your interview. They do not receive your raw transcript, email, or address until shipping is arranged.
  • With friends you connect with: if you choose to share your inspiration, addresses, or colour preferences with a friend on Hand Told, they can view that information. You control these sharing permissions and can revoke them at any time.
  • With collaborative chat participants: messages in a collaborative thread are visible to both participants and the AI assistant.

7. Your rights

You have the right to:

  • Access your data: your profile, interviews, and inspiration are visible in your account at any time
  • Correct your data: you can edit your profile, addresses, and preferences
  • Deleteyour account and all associated data using the “Delete Account” button on your account page. This permanently removes your profile, interviews, briefs, friend connections, and uploaded files
  • Export your data: contact us and we will provide a copy of your data

8. Children's privacy

Hand Told is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending you a notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

10. Contact us

If you have questions about this Privacy Policy or your data, contact us at: hello@handtold.art