Last updated 14 October 2026

Privacy policy

Handemova is operated by [CAMERON TO CONFIRM] legal name of the operator (Cameron Drummond as a sole trader, or a company), ABN [CAMERON TO CONFIRM], of [CAMERON TO CONFIRM] postal address in Western Australia. Privacy contact: [CAMERON TO CONFIRM] contact email.

Coverage: we handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). [CAMERON TO CONFIRM] Small businesses with an annual turnover of A$3 million or less are generally exempt, so we intend to opt in to the Privacy Act by choosing to be treated as an organisation under section 6EA (the OAIC keeps a public register). Until that is done, this policy is a voluntary commitment.

What we collect (APP 3, APP 5)

• Your account: the display name you choose, your passkeys' public keys (your fingerprint, face or screen lock never leaves your device) and a one-way hash of your recovery code.
• Your family's shared calendar: schedule pattern, start date, state or territory, one-off changes, requests and answers, events, handover times and places, bring-lists and tracked items, and any child details you choose to add (for example school, allergies or a doctor's name).
• Sensitive information: child details can include health information. We collect it only with your consent, because you chose to enter it so both homes can see it. Don't enter more than you need.
• Children's information: it is entered by a parent or carer. Children don't have accounts. We consider children's best interests in how this information is used and shown.
• School notices: if you paste, upload or forward a notice, we keep only its subject, sender address, a short preview and the sentence each date came from. The full email and attachments are not stored.
• Technical records: sign-in times and a device label (for your own device list), a one-way hash of IP addresses for rate limiting (up to 24 hours) and scrubbed error logs (up to 30 days).
• Error diagnostics (Sentry): when something breaks in the app or on our server, a scrubbed error report goes to Sentry (Functional Software, Inc., USA) so we can fix it. Before it leaves your device or our server we remove names (yours, your co-parent's and your children's), email addresses, notes, message and expense text, sign-in and link tokens, cookies, web-address query strings and request bodies. We don't send IP addresses (Sentry may work out an approximate country from the connection, then discards the IP), and we don't use session replay or screen recording. Sentry offers US and EU data regions; ours is the US region. Reports are kept for Sentry's standard retention (up to 90 days on our plan).
• Professional workspace: if you save an approved mediator link, we store your private case label, account reference and a hashed link reference. The workspace does not copy the family’s records. Access is rechecked when records are opened and ends when the original link expires or either parent switches it off.
• We don't collect location, contacts, photos, advertising identifiers or tracking cookies. We don't sell data or use it for advertising.

Who can see what

• Both adults in a family see the shared calendar and its history. Each adult sees only their own sign-ins and devices. Private “Busy” blocks show only as “Busy”.
• The kids' view link (if you create one) shows tonight and the next 7 nights, with no notes. Anyone with the link can open it; either parent can switch it off.
• No other family can see your data.

How we use and disclose information (APP 6)

Only to run Handemova for your family (the schedule, alerts you turned on, the tamper-evident history, backups, preventing abuse, support) and where required or authorised by law (for example a subpoena or court order). If we receive a legal demand, we will tell the affected adult(s) unless the law prevents us or it would put someone at risk.

Overseas disclosure (APP 8)

Your family’s active database is in Cloudflare’s Oceania region. Some processing and retained copies are overseas. Handemova runs on Cloudflare (Cloudflare, Inc., USA). The active database and daily backup destination use Cloudflare D1 with an Oceania location hint. This is a best-effort placement, not a contractual Australian-only hosting guarantee. Earlier rollback copies remain in Eastern North America. Requests are handled at the Cloudflare location nearest you, and school-notice text may be processed by Cloudflare Workers AI at Cloudflare locations that may be outside Australia. Scrubbed error reports (no names, emails, notes, message or expense text, tokens or IP addresses) go to Sentry's US data region for error diagnostics. Push alerts pass through your browser's push service (Apple, Google, Mozilla or Microsoft) and contain no names or details. If you connect an AI assistant, data goes to the provider you chose. We take reasonable steps (contractual terms and technical controls) so these providers handle information consistently with the APPs. [CAMERON TO CONFIRM] confirm Cloudflare's data processing addendum is accepted.

AI and automated processing

Children's names saved in the app are replaced with placeholders such as “[Child 1]” before any text is sent to AI, where this is feasible (nicknames and misspellings may not be caught). AI only suggests calendar entries; a parent decides. Handemova does not use computer programs to make decisions that significantly affect your rights or interests. See the AI notice.

Security and retention (APP 11)

Data is encrypted in transit and at rest by our host. Passkeys mean there is no password to steal. Sessions expire after 30 days of inactivity. The history is append-only and hash-chained. Daily backups are kept 30 days. When the last adult in a family deletes their account, the family's calendar data is deleted and backups containing it age out within 30 days. [CAMERON TO CONFIRM] retention of the locked history log for deleted families.

Data breaches

If a data breach is likely to result in serious harm, we will notify affected people and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme, and as quickly as we can.

Access, correction and export (APP 12, APP 13)

Download a complete copy of your records at any time, free (More → Download your records). You can correct most information in the app; past history entries can't be edited, so a correction is added as a new entry. Ask us for anything else at [CAMERON TO CONFIRM] contact email; we'll respond within 30 days.

Early-access list and emails

If you join the early-access list we keep your email, state and when you agreed, and email you about early access only. Every email we send identifies us and has a way to unsubscribe, as the Spam Act 2003 requires. Service emails (for example a security notice) are sent only when needed.

Family safety

Don't use Handemova to monitor or control another person. If you are unsafe, call 000; see family violence help. If you tell us someone is at risk, we may share information where the Privacy Act permits it to lessen a serious threat to life, health or safety.

Complaints

Contact [CAMERON TO CONFIRM] contact email. We aim to respond within 30 days. If you're not satisfied, you can complain to the OAIC: oaic.gov.au, 1300 363 992. You may also have rights under the statutory tort for serious invasions of privacy (Privacy Act, Schedule 2).

Changes

We'll show material changes in the app before they take effect. We will review this policy against the Children's Online Privacy Code once the OAIC registers it.