Privacy Policy

Who we are

HandsOnTop is a planning assistant for Australian primary school teachers. This policy explains what information we collect when you use the app, how we use it, and the choices you have. Questions or requests can be sent to handsontop@agentmail.to.

What we collect

• Account details — your email address and a password (stored securely by our authentication provider, Supabase), or your Google account identity if you sign in with Google.
• Free try without an account— you can try HandsOnTop before signing up. To do that we create a temporary anonymous account for your browser with no name or email attached, holding only its credit balance, generation records and the content you make. If you later create an account, that same record becomes your account. If you don't, it is deleted automatically after 30 days of inactivity, along with everything in it.
• Billing information — payments are processed by Stripe. We never see or store your card details; we store only your Stripe customer reference, subscription status and credit purchases. If you turn on auto top-up we also store a reference to the card you saved with Stripe, its brand and last four digits, your chosen amount and monthly limit, and when you gave consent.
• Usage records — your credit balance, a ledger of credit movements, and records of the generations you run.
• Your content — the topics, notes and requests you type, and the documents saved to your library.
• Referral emails — if you invite a colleague, the email address you provide is stored so we can credit you both. We use it only for that invite.
• Support requests — your email address and message when you contact support.

Uploaded lesson-plan templatesare saved to your private template library so you can reuse your school's template without uploading it again. They are stored in private, access-controlled storage, are visible only to your account, and are never shared with other users. You can delete a saved template at any time, which removes both the file and its record. Deleting your account removes them too. Older formats (.doc, .odt, .rtf) are converted to Word's .docx format first: the file passes briefly through Google Drive for the conversion and the copy there is deleted straight away. What we store is the converted .docx.

AI processing

HandsOnTop generates planning material using third-party AI providers — Anthropic (Claude), OpenAI and Google. Requests to these providers are routed through OpenRouter, an AI gateway service. The text you enter and documents you upload are sent to these providers, which process data in the United States, to produce your results. We use their business API services, which under their current terms do not use API data to train their models.

Please do not include student names or other personal details in anything you type or upload. The app is designed for planning content, not student records.

Connected apps (ChatGPT)

You can connect HandsOnTop to other apps, such as ChatGPT, so you can make resources from there. When you do, you sign in to HandsOnTop and approve the connection on our site; the other app then sends us the text of your request (what to make, a student's first name and interest if you give them) and we send back the result — the sentences, picture links and download links. We receive your account identity through that sign-in, not your conversation: nothing else you say in the other app reaches us. Resources made this way are saved to your library and use your credits exactly as on the website. What the other app keeps of your conversation is governed by its own privacy policy (for ChatGPT, OpenAI's). You can remove the connection in the other app's settings at any time.

Product analytics

We use PostHog to understand how HandsOnTop is used — which pages are visited, which tools are run, and when the upgrade screen leads to a purchase — so we can improve the product. These usage events are linked to your account identifier and email address and are hosted by PostHog in the United States.

We keep this deliberately limited: we do not record your screen, your keystrokes, or session replays, and the lesson content you type or upload is never sent to our analytics provider.

Cookies and bot protection

We use cookies only to keep you signed in (including the temporary anonymous session used for a free try) — not for advertising. To stop automated abuse of the free try and of sign-up, we use Cloudflare Turnstile, which checks that a request comes from a real browser; it may process technical details such as your IP address and browser characteristics for that purpose. For the free try it runs silently in the background; a visible check appears only if Cloudflare cannot verify your browser that way. See Cloudflare's Turnstile privacy addendum. We also keep a one-way hash of the network address that claimed a free try, and a random first-party identifier for the browser that claimed it (a cookie and local storage entry named tt-device), for 30 days — so a single device or connection can't claim it repeatedly. Neither identifies you, and neither is used for anything else.

Service providers

We rely on a small number of providers to run HandsOnTop: Supabase (database and authentication), Stripe (payments), Vercel (hosting), Resend (email delivery), PostHog (product analytics), Cloudflare (bot protection), Anthropic, OpenAI and Google (AI generation), Google Drive (converting older document formats), OpenRouter (AI request routing), and — only if you connect it — OpenAI (ChatGPT) as the app you make requests from. Some of these providers store or process data outside Australia, including in the United States.

How we use your information

We use your information to provide the service, process payments, credit referrals, respond to support requests, and send transactional emails (receipts, password resets, invite confirmations). We do not sell your personal information.

Retention and deletion

We keep your account data while your account is active. Content you generate (saved documents and image sets) is deleted automatically 30 days after it is created; templates you upload are kept until you delete them. An anonymous free-try session that never becomes an account is deleted, with its content, after 30 days of inactivity. You can ask us to delete your account and associated personal information at any time by emailing handsontop@agentmail.to. Some billing records may be retained where required for tax and accounting purposes.

Changes

We will update this policy as the product evolves and note the date of the latest change at the top of this page.