Privacy Policy

Who we are

HandsOnTop is a planning assistant for Australian primary school teachers. This policy explains what information we collect when you use the app, how we use it, and the choices you have. Questions or requests can be sent to handsontop@agentmail.to.

What we collect

• Account details — your email address and a password (stored securely by our authentication provider, Supabase), or your Google account identity if you sign in with Google.
• Billing information — payments are processed by Stripe. We never see or store your card details; we store only your Stripe customer reference, subscription status and credit purchases.
• Usage records — your credit balance, a ledger of credit movements, and records of the generations you run.
• Your content — the topics, notes and requests you type, and the documents you choose to save to your dashboard.
• Referral emails — if you invite a colleague, the email address you provide is stored so we can credit you both. We use it only for that invite.
• Support requests — your email address and message when you contact support.

Uploaded lesson-plan templates are processed in memory to fill them in and are returned to you directly — we do not store the uploaded file on our servers.

AI processing

HandsOnTop generates planning material using third-party AI providers — Anthropic (Claude), OpenAI and Google. The text you enter and documents you upload are sent to these providers, which process data in the United States, to produce your results. We use their business API services, which under their current terms do not use API data to train their models.

Please do not include student names or other personal details in anything you type or upload. The app is designed for planning content, not student records.

Product analytics

We use PostHog to understand how HandsOnTop is used — which pages are visited, which tools are run, and when the upgrade screen leads to a purchase — so we can improve the product. These usage events are linked to your account identifier and email address and are hosted by PostHog in the United States.

We keep this deliberately limited: we do not record your screen, your keystrokes, or session replays, and the lesson content you type or upload is never sent to our analytics provider.

Service providers

We rely on a small number of providers to run HandsOnTop: Supabase (database and authentication), Stripe (payments), Vercel (hosting), Resend (email delivery), PostHog (product analytics), and Anthropic, OpenAI and Google (AI generation). Some of these providers store or process data outside Australia, including in the United States.

How we use your information

We use your information to provide the service, process payments, credit referrals, respond to support requests, and send transactional emails (receipts, password resets, invite confirmations). We do not sell your personal information.

Retention and deletion

We keep your account data while your account is active. You can ask us to delete your account and associated personal information at any time by emailing handsontop@agentmail.to. Some billing records may be retained where required for tax and accounting purposes.

Changes

We will update this policy as the product evolves and note the date of the latest change at the top of this page.