Privacy Policy

Version 2.8 · Published: 30 October 2026 · Takes effect: on publication · Applies to get-handyman.com, the HandyMan Android app (package com.gethandyman.app) and the HandyMan iOS app (App Store id 6796590581).

1. Who is responsible for your data

HandyMan is operated by Procode FZ-LLC, a Free Zone Limited Liability Company registered in the Ras Al Khaimah Economic Zone (RAKEZ), United Arab Emirates ("HandyMan", "we", "us"). Registered address: CWEP8754 Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. We are the data controller for the personal data described in this policy.

Privacy contact: feedback@get-handyman.com. We answer privacy requests within 30 days.

2. What this policy covers

This policy covers the website get-handyman.com, the HandyMan Android and iOS apps, e-mail and push notifications we send, and support conversations with us (together, the "Service"). HandyMan is a marketplace: clients post jobs, independent professionals ("pros") make offers, and the two sides agree the work between themselves. Where payment through HandyMan is switched on for a country (see Section 18), the client pays for the job through HandyMan by card; elsewhere the two sides arrange payment between themselves. Our Terms of Service govern the use of the Service.

3. What we collect

We do not collect: contacts, calendar, microphone or audio, health data, location in the background without a mode you switched on (the app never asks for "always" location; "On the line" and live location on the way work only while you keep them on, and the app shows that they are on; the route on the way to a paid job is recorded only from that same live location), advertising identifiers on the website, or data for behavioural advertising, except the advertising measurement in the apps for users connecting from the UAE, described in the table above.

4. Why we use your data and on what legal basis

We do not use your data for marketing on behalf of third parties or for selling, and we build no advertising profiles ourselves. For users connecting from the UAE, Meta, which receives the data for advertising measurement, may combine it with what it already holds about you under its own policy (Section 8). We send marketing e-mail only if you subscribed and you can unsubscribe with one click in every such e-mail.

5. Automated processing, machine translation and AI

• Machine translation. When you tap "Translate" on a job, a chat message or a review, the text is sent to Google Cloud Translation, translated, and the result is cached by us to avoid re-translating the same text. Nothing is translated without your tap. Translation is automated and may be inaccurate; do not rely on it for safety-critical details.
• Notification wording is produced from fixed templates in your chosen language, not by AI.
• Ranking. The order of jobs shown to pros and of pros shown to clients is computed from distance, category, rating and recency. This does not produce legal or similarly significant effects on you, and a human (you) decides whom to hire.
• No AI chatbots. Chat on HandyMan is only between people. We do not operate an AI assistant, companion or support bot, and we do not use your content to train AI models. If we ever add an AI feature, we will say so clearly in the product and in this policy before it processes your data.
• Which pros are offered a new job first is decided automatically: when a job is posted, the system offers it at once to every pro who is on the line within about 5 km and has the right specialty, and after 90 seconds to those within about 10 km. It does not decide who gets the job — the client chooses from the pros who accepted, and every pro can still answer the job in the general list once the search is over (at most four minutes). No decision with legal or similarly significant effects is made about you solely automatically: verification, reports and strikes are reviewed by a person before an account is restricted. A trade licence is compared with the register by a person; the only automatic step is that the badge goes out on the licence's own expiry date.
• Payments on jobs paid through HandyMan follow fixed rules, applied automatically: the held amount is charged when the client confirms the work, or 48 hours after the pro marks it done unless the client reports a problem; and when a client cancels after the pro has set off, a late-cancellation fee applies only if the pro's route shows they had covered at least half the way and had been travelling for at least 10 minutes. The client is shown the fee before confirming the cancellation. A client or pro who disagrees can report a problem with the job; disputes are decided by a person.

6. Where the Service is available

HandyMan operates in the United Arab Emirates and the United States. Three different things are checked against a country, and they do not use the same country.

Creating an account is checked against the country your internet connection appears to come from, when we can tell. The check has a couple of seconds to get an answer from our network provider. If none arrives, we fall back to the country of the city you entered — professionals are asked for one when they sign up. If neither is known, the sign-up is allowed. A VPN, a proxy or roaming can therefore refuse someone who is really in a country we serve, and can admit someone who is not.

Posting a job is checked against where the work is, not where you are. We take the country from the location of the address you give for the job; if there is none, from the country recorded on your account. Your connection plays no part in it, so you can post a job at your home address while travelling.

Offering to do work is checked against the country recorded for the professional, which also decides whether they appear in search results.

We keep the country your connection came from when you signed up. It is stored on your account, and afterwards it serves only as a fallback: when a job's address cannot be located on the map, the country on your account is used instead. We do not store your IP address itself. The one exception is the feedback form, where we keep a salted, irreversible fingerprint of the IP address to stop the form being flooded, and delete it after 24 months. Our hosting and network providers keep their own server logs, which do contain IP addresses, for their own retention periods: the database and its functions run on Supabase in Frankfurt, Germany, which keeps its server logs for 7 days, and the website is served through Cloudflare, which keeps its own logs for its own period.

A connection or an address can be attributed to the wrong country. If that happens to you, write to us and we will look at it.

We may also restrict a country outright, in which case the Service is unavailable from that country on the website and in the apps alike: the website answers with a notice instead, and requests from the apps are refused. Restricting a country restricts access; by itself it does not delete anyone's account or data, and the rights described in this policy — including asking for a copy of your data or asking us to delete it — are not affected by it.

7. Who else on HandyMan sees your data

• Pro profiles are public. Everything in the "Pro profile (public)" row above, including your rating, reviews and the work location you set, can be seen by anyone on the website and in the apps, and may appear in search engines. Set your work location to a district or street, not your home, if you prefer.
• Clients' jobs are shown to pros. While a job is open, signed-in pros can see its title, description, photos, budget, the area it is in and roughly how far it is, and your first name and photo. The exact address and its coordinates are shown only to the pro you hire. While a job is open, you can message each pro who responded to it: each has a separate chat that only you and that pro can see — other pros cannot — and phone numbers are not posted in it before you hire. After you hire a pro, only that pro sees the job details and the chat.
• Reviews are public. Your display name, rating, tags and comment are shown on the profile of the person you reviewed.
• Phone numbers are shared only between the client and the hired pro of a specific job, inside that job's chat.
• Payment status of a job paid through HandyMan (awaiting payment, held, charged, refunded) is shown to its client and its pro. A client never sees a pro's payout details, and a pro never sees a client's card.
• Verification documents, the licence file, the Emirates ID, the selfie with it, chat and job videos are never public. Of a confirmed trade licence, anyone can see the badge, the issuing authority, the expiry date, the licence number and the activity — the number is shown so that a client can look the licence up in the register.
• While a pro is on the way to you. On a job in the UAE, from the moment the hired pro taps "On my way" until the job starts, the client of that job — and no one else — can see the pro's licence — its details and the licence file — and the photo of the pro's Emirates ID, for example to get the pro through a building's security. The client opens them through a temporary link, and each view is recorded with its time. After the job starts, or if the job is cancelled, the client can no longer open them. The selfie is never shown.

A pro's live location during a job

A pro can let the client watch them approach. This is off by default. The first time a pro accepts a job the app asks, and the pro can switch it on or off at any time afterwards in the settings.

When it is on, the pro's coordinates are sent about every ten seconds, but only in a narrow window: after the client has accepted the pro's offer and until the work begins. They are shown on a map to that one client, so they can see the pro on the way, and to no one else. The points are kept no longer than 24 hours and are then deleted automatically.

On a job paid through HandyMan, live location must be on for the pro to tap "On my way", and from that moment until the work starts (at most three hours) the points are also kept as a route record for 30 days. The route record is not shown to other users: if the client starts to cancel, they are told only how much of the way the pro has covered, as a percentage, and what the cancellation would cost. Our staff look at the route only when they handle a dispute about that job.

A pro on the line

Our servers use the exact position of a pro on the line only to decide who is near a new job; no other user sees it. Clients signed in to the app see the pros on the line as nameless dots, never at the exact position:

• on the home map, a dot is placed within about 500 m and moves at most every 30 seconds;
• a client whose job is being searched (at most four minutes) sees the pros around that job more closely, within about 100 m, and the dots move as the pros move.

To protect where a pro starts and stops, no dot is shown within about 500 m of the place where the pro went on the line, and a pro who stays in one place for more than five minutes is shown only within about 500 m. Each dot is offset from the exact spot, has no name and no lasting identifier, and pros do not see other pros on the map. A moving dot still shows where a pro is driving while they drive; that is why we hide where they start and where they stop.

Being shown this way is a condition of the mode, and every pro on the line is shown this way. Who accepted a job appears in the list under the map, with their name, rating and approximate price. The distance a pro sees to a job is measured to the centre of the job's ~500 m square, not to the address. When a pro switches "On the line" off, or after 8 hours when it switches itself off, their position and their dot are deleted at once. If the app stops sending signals, the dot disappears within seconds, the pro is no longer offered jobs after five minutes, and the position is deleted after fifteen.

Before a pro is hired, outside the search described above, a client sees nearby pros as dots at the work location set in each pro's profile — the same location shown in search. Live location on the way to a job is never shown during a search, and it is never used to choose who is offered a job.

8. Providers and other recipients of your data

We share personal data only with the providers below, who process it on our instructions under contracts that bind them to protect it at least as well as this policy does, and with authorities where the law requires. We do not sell or rent personal data to anyone. The one exception, for users connecting from the UAE, is Meta: it receives the data in its row below under its own business terms and may also use it for its own purposes under its own privacy policy. The Meta SDK and the advertising ID concern only the Android and iOS apps, and only users connecting from the UAE: for everyone else the apps send Meta nothing. There is no Meta SDK on the website, and our servers send Meta no events.

Location data in the Service is built on GeoNames data, licensed under CC BY 4.0. Map data on the website comes from OpenStreetMap contributors and Google.

9. International transfers

Your data is stored in the European Union (Germany) and is processed by the providers above in the United States and other countries. Those countries may not have data-protection laws equivalent to those of your country. We protect transfers with contractual safeguards (the providers' data-processing agreements, including standard contractual clauses where the provider offers them), encryption in transit and at rest, and access controls.

If you are in the United Arab Emirates: under Federal Decree-Law No. 45 of 2021 we inform you that your data is transferred outside the UAE to the recipients and countries listed above, protected by the safeguards described here. Where the law requires it, we rely on your explicit consent given at sign-up, which you may withdraw by deleting your account.

10. How long we keep your data

Where we say we de-identify data, we remove names, contact details and identifiers so the record can no longer reasonably be linked to you.

11. Your choices

• Push notifications: turn off in the app (Profile → Notifications), in the website settings, or in your device settings.
• Location: deny or revoke the location permission in your device settings; you can still type addresses by hand.
• Analytics: on by default. Turn it off in Settings → "Analytics" on the website or in Profile → Privacy in the apps; when you are signed in, the choice applies to your account on all your devices. Crash reports in the apps are a separate switch that applies to that device only. While a switch is not yet available in your app version, e-mail us and we will turn analytics off for your account. In the apps this switch also stops the advertising data sent to Meta. You can also reset or delete your advertising ID in Android's settings (Privacy → Ads), and on iOS turn it off in Settings → Privacy → Tracking.
• WhatsApp: after you sign up we send one welcome message to the phone number in your profile, and we answer there if you write to us. To stop messages, reply STOP or write to feedback@get-handyman.com.
• Public work location (pros): set it to a district or street rather than your home.
• Live location (pros): switch it on or off at any time in the app settings. It stays off until you turn it on. With it off, a client sees only the work location from your profile, never your live position.
• On the line (pros): switch it on and off at any time in the app; it switches itself off after 8 hours. Withdrawing your consent to share your position takes you off the line at once. Being shown as an approximate dot is a condition of the mode: if you do not want it, stay off the line. Off the line, jobs still reach you through the general list and notifications, as before.
• Marketing e-mail: unsubscribe link in every e-mail.
• Browser storage (website): clear site data for get-handyman.com in your browser; this signs you out and resets your language.

12. Account and data deletion

You can delete your account yourself at any time:

• Android app: Profile → Delete account → confirm.
• iOS app: Profile → Delete account → confirm.
• Website: sign in → Settings → Delete account → confirm.
• By e-mail: write to feedback@get-handyman.com from the e-mail address of your account, or from any address with enough detail for us to verify you. We confirm and complete the deletion within 30 days.

Deletion immediately and permanently removes your sign-in account, profile, pro profile and portfolio, verification documents, trade licence submissions and their files, jobs, offers, chat messages, photos, videos, reviews you wrote, favourites, addresses, notification tokens and notifications from our active systems. Reviews you received are removed with your profile. Any Stripe account you connected is disconnected from HandyMan; Stripe keeps its own records under its policy.

If a job paid through HandyMan still has money held, charged but not yet paid out, or under dispute, the account cannot be deleted until that payment is closed: finish or cancel the job first, and then delete. This protects both the client and the pro of that job.

We keep, in de-identified form or as required by law: reports and strikes involving you (to protect other users), payment records — amounts, dates, commission, payouts, refunds and the Stripe identifiers that go with them — for as long as accounting and tax law requires (Section 10), and records of your deletion request. Encrypted backups containing your data are overwritten within 30 days.

Content you posted may remain visible to the other party of a completed job in their own history (for example, a job description), without your name or contact details.

13. Your rights

Wherever you live, you can ask us to:

• Access the personal data we hold about you and receive a copy;
• Correct inaccurate or incomplete data (most profile fields you can edit yourself);
• Delete your data (Section 12);
• Export your data in a structured, machine-readable format (portability);
• Restrict or object to processing based on our legitimate interests, including analytics;
• Withdraw consent at any time where processing is based on consent, without affecting processing before withdrawal;
• Not be subject to solely automated decisions with legal or similarly significant effects (we make none; the automatic first offer of a job to nearby pros on the line is described in Section 5);
• Complain to a supervisory authority and to appeal our decision on your request by replying to it.

You can export your own data yourself, without asking us: in Settings, choose "Download my data" and we build a JSON file of what your account holds — your profile, the jobs you posted or worked on, the offers you sent or received, reviews you wrote, the messages you sent, your notifications, favourites, the devices you turned notifications on for, your subscription and payment records, your verification status, your trade licence submissions (including your Emirates ID number), and your support messages. The export also includes your current on-the-line position, if you are on the line, your consent to share your position and your acceptance of the mode's terms, with their dates.

Some things are left out on purpose, because they are not yours alone to take: the other person's messages in a conversation, and anything about someone who blocked or reported you — their photo, their location, the job it concerned. Two technical values are excluded because they identify a device rather than describe you: the push tokens for your devices, and the salted hash of an IP address stored with feedback-form submissions. Your files — photos, and any verification documents — are referenced in the export and provided by link or on request, rather than packed into the JSON. The licence file, the Emirates ID photo and the selfie are neither included nor referenced; you can ask us for a copy.

If you are a professional, the export includes the jobs you accepted, with the client's address and job description — the same details the platform shows you once a job is yours, and no more.

You can export once an hour.

You can access and export your data yourself, as described above; for the other rights, e-mail feedback@get-handyman.com with the request and the e-mail address of your account. We verify requests proportionately (usually by replying to the account e-mail) and respond within 30 days; we may extend once by a further 30 days for complex requests and will tell you if so. Requests are free unless manifestly unfounded or excessive. An authorised agent may act for you if they show your written permission and we can verify your identity. We will never discriminate against you for exercising a right.

United Arab Emirates

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) gives you the rights above, including the right to receive information about the purposes of processing, the recipients inside and outside the UAE, the protection measures for cross-border processing, retention periods, and how to correct or erase your data and how we handle breaches (Sections 4, 8, 9, 10, 12, 14). Complaints may be made to the UAE Data Office. We report personal-data breaches to the Data Office and, where the breach is likely to harm you, to you, as the PDPL and its executive regulations require.

United States (California and other states)

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island or another state with a comprehensive privacy law, you have the rights above to the extent the law applies to HandyMan. The categories of personal information we collect, the sources, purposes and recipients are described in Sections 3, 4 and 8. In the last 12 months we have not sold personal information, have not shared it for cross-context behavioural advertising, and have not used or disclosed sensitive personal information (precise location, identity documents) for any purpose other than providing the Service you asked for, so no "Do Not Sell or Share" or "Limit the Use of My Sensitive Personal Information" opt-out is needed; we honour Global Privacy Control signals as an opt-out of any future sale or sharing. We do not knowingly sell or share the personal information of anyone under 16. Requests may be made by e-mail to feedback@get-handyman.com; we respond within 45 days where state law provides that period.

European Economic Area and United Kingdom

HandyMan is not directed at the EEA or UK, but our data is stored there. If GDPR or UK GDPR applies to you, the legal bases in Section 4 and the rights above apply, and you may complain to your local supervisory authority.

14. Security

We protect data with encryption in transit (TLS) and at rest, row-level access rules in the database so each user can read only what this policy says they can, private storage for verification documents, licence files, chat and videos with short-lived signed links, encrypted session storage in the apps, captcha and rate limits against abuse, and access to production systems restricted to the operator. No system is completely secure. If a breach affects your data we will notify you and the competent authority as the law requires.

15. Children

HandyMan is for adults aged 18 and over. You confirm you are 18 or older when you sign up. We do not knowingly collect data from anyone under 18; if you believe a minor has an account, e-mail us and we will delete it.

16. Cookies and what we store on your device

Website. We set no advertising cookies. For product analytics we use PostHog (Section 8): it keeps a random identifier in the browser's local storage, not in a cookie, and its requests go through our own domain. Usage events and session recordings — with every input field, chat and address hidden — are linked to your HandyMan user ID; turn them off in Settings → Analytics. The site uses browser local storage for: sb-…-auth-token (your session), hm_lang (language), hm_role and hm_active_mode (client or pro mode), hm_push_token (only if you enable push), and short-lived flags for guest jobs and referral links. Third parties loaded on specific pages (hCaptcha on sign-in forms, Google Maps where a map is shown, Firebase if you enable push) may store their own data under their domains and policies.

Apps. The apps store your session (encrypted), language, role, notification token and cached content on the device. Firebase stores an installation identifier for push delivery and, in release builds, for crash and usage reporting. For users connecting from the UAE, while Analytics is on, Meta's SDK in the apps keeps its own identifier on the device and reads the advertising ID (on iOS, only with your permission).

Campaign links. On our job-request guide, hm_acquisition_v1 in session storage remembers the first recognised campaign and page identifiers in the current tab, with a 24-hour expiry checked when the context is used. It is cleared when you sign out in that tab; closing the tab normally ends session storage, though browsers may restore tabs. We store only identifiers from a fixed campaign list and timestamps, not the full URL, referrer or arbitrary tracking values. After you successfully create a request, we send its identifier together with the approved campaign and page identifiers and store a link to that request, which is associated with your account, to understand which content leads to requests. A short-lived session-storage entry, hm_acquisition_pending_v1, may hold the request identifier for one retry; it is cleared on sign-out or expiry. The server link is removed by our daily cleanup after 90 days, or when the request or its owning account is deleted. It is included in your personal data export. The browser campaign context is not synchronized across devices. The server record is linked to your request and account.

17. Reviews and ratings

A review can be written only by the client or the pro of a job that was actually completed, once per side, and the author's name is taken from their account. We do not write, buy, or fabricate reviews, do not pay for or condition reviews on their content, and do not remove or hide a review because it is negative. Reviews that break the Terms (abuse, personal data of others, spam) may be removed and the removal is recorded. If you believe a review is fake, report it in the app.

18. Payments, commission and refunds

Where payment through HandyMan is switched on. We switch it on country by country, starting with the United Arab Emirates, and we announce it in the apps. Today this applies only in the UAE; in the United States payment stays directly between client and pro. In those countries the client pays for the job through HandyMan, by card: when the client accepts a pro's price proposal, the amount is held on the card, not charged. It is charged when the client confirms the work, or automatically 48 hours after the pro marks the job done unless the client reports a problem; any part of the hold that is not used is released. HandyMan keeps a commission from the pro, and the client pays a service fee shown before payment; the amounts are set out in Section 6 of the Terms. If a client cancels after the pro has set off and the pro's route shows they had covered at least half of the way and had been travelling for at least 10 minutes, a fixed late-cancellation fee may be charged; the conditions are in the Terms and the client is shown the amount before cancelling. Card payments and payouts are processed by Stripe (see Section 8).

Elsewhere, payment for the work itself is arranged directly between client and pro, and HandyMan charges nothing.

We do not currently sell subscriptions or packs of job responses; paid features for pros, if we introduce them, will be described here before they launch. If we introduce a recurring plan, we will show the renewal price and period before you subscribe, send a reminder before each renewal, and let you cancel in one step in the same place where you subscribed, in line with the laws that apply to you. Refund, cancellation and dispute terms are in the Terms of Service.

19. Changes to this policy

We will change this policy when the Service or the law changes. The version and date at the top will be updated. For material changes, such as new categories of data, new recipients, or new purposes, we will notify you by e-mail or in the apps, and where the law requires it we will ask for your consent again. A change you are asked to agree to applies to you from the moment you agree; other material changes take effect no earlier than 14 days after we notify you. Earlier versions are available on request.

20. Contact

Procode FZ-LLC, CWEP8754 Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates · feedback@get-handyman.com

The Terms of Service govern your use of HandyMan; this Privacy Policy describes our data practices. The English version prevails in case of any difference between language versions.