Privacy policy.

Plain English. No legalese. This page describes how Handled ("we", "us") collects, uses, and protects information you give us when you use the Handled app, website, and related services. We comply with the New Zealand Privacy Act 2020 and the thirteen Information Privacy Principles.

01What we collect

We collect the smallest amount of information necessary to make Handled work for you:

• Account information. Email address and authentication identifier provided through Microsoft Entra External ID when you sign up.
• Transaction data. The categorised transactions parsed from any bank CSV you upload — dates, amounts, descriptions, merchant names, and the account they belong to.
• Financial inputs. Information you choose to enter, such as account balances, KiwiSaver details, savings goals, loans, and retirement-forecast inputs.
• Billing information. A Stripe customer ID and subscription status. We never see or store your full card number — Stripe handles that.
• Usage telemetry. Basic information about how the app is used (for example, which features are opened) to help us fix bugs and improve the product. No third-party advertising trackers.

02What we don't collect

• Your bank login credentials. Ever. We don't screen-scrape and we don't connect to your bank.
• Your raw CSV file. We process the upload, store the categorised transactions, and then permanently delete the file.
• Personal information about people other than you. If a transaction description names another person, it stays with your account and is never shared.
• Location, contacts, photos, microphone, or camera data.

03How we use it

We use your information only to:

• Provide the Handled service to you (categorise transactions, generate budgets, compute retirement forecasts, track savings goals and loans).
• Bill you for your subscription and send receipts.
• Respond to support enquiries you send us.
• Fix bugs and improve the product.

We do not sell your data. We do not share your data with advertisers. We do not use your data to train models that other people benefit from.

04Where it lives

Handled runs on Microsoft Azure infrastructure. Data is stored in encrypted form, both at rest and in transit. Where Azure offers a New Zealand region for a given service we use it; otherwise data may be stored in an Australian region. Stripe processes payments and stores billing information under its own controls.

05Who can see it

Inside Handled, only the very small number of people responsible for running the service can access stored data, and they only do so when strictly necessary to fix problems or respond to your support requests. All access is logged.

We may share information with third parties only in these specific cases:

• Stripe, to process your subscription payments.
• Microsoft Azure / Entra External ID, as our hosting and authentication providers.
• If required by law, in response to a valid New Zealand court order, search warrant, or production order. We will tell you when we can.

06How long we keep it

We keep your data while your account is active. If you cancel your subscription, your data is retained for 30 days so you can resubscribe and pick up where you left off, then permanently deleted. You can request immediate deletion at any time by emailing us.

07Your rights

Under the Privacy Act 2020, you have the right to:

• Access the personal information we hold about you.
• Ask us to correct anything that is wrong.
• Export all of your transaction data as CSV at any time.
• Ask us to delete your account and all associated data.
• Complain to the New Zealand Privacy Commissioner if you think we have mishandled your information.

To exercise any of these rights, email privacy@handled.nz.

08Cookies and similar

Our website uses the minimum cookies required to keep you signed in and remember your preferences. We do not use third-party advertising cookies or cross-site tracking.

09Changes to this policy

If we change anything material in this policy, we will tell you by email and post the updated version here with a new "last updated" date.

10Contact

Questions or requests about privacy: privacy@handled.nz. A real human will reply.