Privacy Policy

HandyMan (get-handyman.com) — web & Android app. Last updated: 23 July 2026.

This Privacy Policy explains how HandyMan, operated by Bakhtiiar Ismailov, Astana, Kazakhstan ("HandyMan", "we", or "us"), handles personal information. It applies to get-handyman.com and our Android application (package com.handyman).

Information we collect and its sources

• Account data: name, email, phone number, role (client or professional), and profile details (specialty, city, experience, bio) you provide.
• Service content: requests, addresses, offers, reviews, reports, feedback, chat messages, and photos you choose to upload.
• Professional verification data: identity-document and selfie images, certificates, and related review status when a professional voluntarily requests verification. These documents are not public.
• Location: approximate or precise device location, only after permission and a user action that needs location, such as centering a map or saving a work location. We do not request background location.
• Device and security data: push-notification token, authentication/session data, IP address and basic request logs processed by our infrastructure, and diagnostics needed to operate and protect the Service.
• Transaction data: purchase status and identifiers if an optional paid feature is offered. Full card details are handled by the payment provider and are not stored by HandyMan.

We receive this information directly from you, automatically from your device when you use a requested feature, from authentication providers you choose, and from our service providers operating the Service.

Why we use information

• To create and manage your account and authenticate you.
• To connect clients with professionals (matching, requests, offers, chat, reviews).
• To provide maps, location-based results, notifications, support, and requested verification.
• To enforce our Terms, moderate UGC, investigate reports, prevent fraud and abuse, secure the Service, and comply with law.
• To maintain and improve reliability and user experience. We do not use personal information for third-party behavioural advertising.

Service providers and disclosures

We disclose information only as needed to operate the Service, complete a user-requested transaction, protect users, or comply with law:

• Supabase for authentication, database, storage, realtime messaging, and server functions.
• Google for Maps, optional Google sign-in, and Firebase Cloud Messaging push delivery. The Maps SDK may automatically process request/device metadata, IP address, crash metrics, a Maps-specific pseudonymous identifier, and map interaction events. Firebase Cloud Messaging uses an app-installation identifier and app/device metadata needed to route notifications.
• hCaptcha for bot and abuse prevention. When a protected flow is used, hCaptcha may process IP address, device/browser characteristics, time spent, and interaction signals to distinguish people from automated abuse. See hCaptcha's privacy policy.
• Stripe only where an optional payment flow is offered.
• Authorities, advisers, or a successor organisation when required by law, to protect rights and safety, or as part of a legitimate business transfer.

Profiles, requests, offers, reviews, and other content intended for marketplace interaction are visible to the relevant users as described in the app. Private chat and verification documents are limited to their intended recipients and authorised operations.

No sale, targeted advertising, or ads

We do not sell personal information, share it for cross-context behavioural advertising, or display third-party advertising. We do not knowingly sell or share personal information of users under 18.

Retention

We retain account and service information while your account is active and as reasonably needed to provide the Service, resolve disputes, investigate abuse, secure the platform, and meet legal obligations. Reports and limited anti-fraud or transaction records may be retained after account deletion where necessary for those purposes. Deleted information is removed from active systems; residual encrypted backups roll off according to our infrastructure providers' backup schedules.

Account and data deletion

We keep your data while your account is active. You can permanently delete your account in the HandyMan Android app by opening Profile → Delete account and confirming the deletion.

If you no longer have access to the app, request deletion by emailing ismailovbakhtiiar@gmail.com from the address associated with your HandyMan account. We may ask you to verify ownership before processing the request.

Deletion removes your authentication account and associated profile, requests, offers, chat messages, reviews, and uploaded files from active systems, subject to the limited retention described above. Content may also be retained where necessary to protect another user's legal rights, document a safety report, prevent fraud, or comply with law.

Security

We use safeguards designed for the nature of the data, including row-level access controls, encrypted connections (HTTPS/TLS), restricted verification-document access, and encrypted Android session storage. No system is completely secure, so we cannot guarantee absolute security.

Children

The Service is for adults aged 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor provided information, contact us so we can investigate and delete it.

United States and regional privacy rights

Depending on where you live and whether a law applies to HandyMan, you may request access to, correction of, portability of, or deletion of personal information; information about categories collected, sources, purposes, and recipients; or withdrawal of consent. You may appeal a denied request by replying to our decision. We will not discriminate against you for exercising a privacy right. Because we do not sell personal information or share it for cross-context behavioural advertising, there is no sale or targeted-advertising opt-out needed for our current practices.

To make a request, email ismailovbakhtiiar@gmail.com. Describe the request and the account email involved. We will verify the request proportionately before acting. An authorised agent may submit a request where applicable, but we may request proof of authority and direct identity confirmation.

International processing

HandyMan and its providers may process information in countries other than yours. Where required, we rely on appropriate contractual or legal safeguards for those transfers.

Changes to this policy

We may update this policy as the Service or legal requirements change. We will update the date above and provide additional notice for material changes when required.

Contact

Questions or requests: ismailovbakhtiiar@gmail.com

The Terms of Service govern your use of HandyMan; this Privacy Policy describes our data practices.