Privacy Policy

Effective date: October 19, 2026

1. Who we are

HandyFM (“HandyFM”, “we”, “us”) is an audio service for audiobooks, podcasts and full-cast dramas, available at handyfm.com. This policy explains what personal data we collect when you use the website, why we collect it and the choices you have.

Questions about this policy or your data: [email protected].

2. Data we collect

  • Account information. Your email address and a hashed password. If you choose to continue with Google, we receive your Google account’s email address, name and profile picture.
  • Activity. Your library, listening progress and history, reader preferences, Quill balance, missions and subscription or pass status.
  • Purchase history. The plans, passes and Quill packs you buy, their price, date and status. Card and wallet details are entered on the payment provider’s checkout and are never received or stored by us.
  • Device and usage data. A pseudonymous analytics identifier, the pages you view and actions you take (for example opening a chapter or starting a checkout), browser and device type, approximate location derived from your IP address, and error information when something fails. We do not send your email address to our analytics tools.
  • Cookies and local storage. A session cookie that keeps you signed in, and preference cookies such as theme and reader settings. Analytics cookies are described in section 4.
  • Messages to support. What you send us by email, and our replies.

3. Why we use each category

CategoryPurpose
Account informationCreate and secure your account, sign you in, send receipts and password-reset emails.
ActivityShow your library, resume listening where you left off, apply your subscription, pass and Quill unlocks.
Purchase historyProcess and confirm payments, provide purchase history and refunds, meet tax and accounting obligations.
Device and usage dataUnderstand which features are used, measure and fix errors, keep the service fast and prevent abuse.
CookiesKeep you signed in and remember your preferences.
Support messagesAnswer your request and keep a record of it.

We do not use your data to build advertising profiles, and we do not show third-party ads.

4. Third parties

We share data only with providers that help us run the service, and only what each one needs:

  • Google: Google Sign-In, if you choose it; Google Analytics, for aggregated usage statistics.
  • PostHog: product analytics, keyed to a pseudonymous identifier.
  • Payment provider: processes website purchases. It receives your payment details directly and tells us whether the payment succeeded.
  • Cloud hosting and email providers: store our data and deliver account emails.

We do not sell or rent your personal data. We may disclose data if the law requires it, to protect the rights and safety of our users or of HandyFM, or as part of a merger or sale of the service, in which case this policy continues to apply.

5. Retention

We keep your data while your account is active. When your account is deleted, we delete or anonymize your personal data within 30 days. Purchase records are kept, without a link to you, for as long as tax and accounting law requires. Server logs and analytics events expire on their own within 24 months.

6. Your rights

  • See and change your email, password and linked logins on the Account page.
  • See your purchases under Purchase history.
  • Delete your account and its data. See Delete account.
  • Ask for a copy of your data, a correction, or object to how we process it, by emailing [email protected]. Depending on where you live, you may also complain to your local data protection authority.

We answer requests within 30 days and may ask you to confirm you own the account.

7. Children

HandyFM is not directed at children under 13, and some titles are marked 16+. We do not knowingly collect data from children under 13. If you believe a child has given us personal data, contact [email protected] and we will delete it.

8. Security

All traffic uses encrypted HTTPS connections. Passwords are stored as one-way hashes, session cookies are HTTP-only, and access to production data is limited to the people who need it. No system is perfectly secure; if you think your account has been compromised, change your password and contact us.

9. Changes

We may update this policy as the service changes. We will update the effective date above and, for significant changes, tell you by email or with a notice on the site before they take effect.

10. Contact

For privacy questions or requests, email [email protected].