Last updated: September 2026
Handled ("we", "our", or "the app") is a mobile app that helps families turn school, sports, and household emails into tasks and events. This policy describes what data we collect, including Google user data, and how we use it.
The use of raw or derived user data received from Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google user data is used only to provide or improve user-facing Handled features that are visible in the app (mailbox sync, email list, task and event extraction, notifications, and the Android tasks widget). We do not sell Google user data. We do not use it for advertising, retargeting, credit or lending decisions, or any other purpose prohibited by Limited Use.
When you sign in with Google we receive your Google account email address, display name, and a sign-in identifier.
If you connect Gmail, we request read-only access (gmail.readonly). We read message metadata and content needed to sync your mailbox: sender, recipients where available, subject, timestamps, message and thread identifiers, and message body. We do not send, delete, label, or otherwise modify your Gmail messages. We do not request write or delete Gmail scopes.
Derived data: we create tasks and events (titles, dates, times, related email references) from those messages for display in the app.
We do not create aggregated or anonymized datasets from your Gmail content for advertising, resale, or training generalized models.
Other app diagnostics (crash reports and coarse analytics) are for operating the app. They are not used to build advertising profiles from Gmail content.
To extract tasks and events, we send the relevant message text to an automated language model hosted on Amazon Web Services (Amazon Bedrock). That processing is only to produce tasks and events for the same user who connected the mailbox.
We do not use Workspace API user data to develop, improve, or train generalized AI or machine-learning models. We do not transfer Workspace API user data to third-party services for those services to train their models.
Synced message content is stored on your device (local app database) so you can read emails offline in Handled. Extracted tasks and events, account records, and mailbox connection metadata are stored on our servers (Amazon Web Services, United States), including Amazon DynamoDB. Message text is sent to our AWS processing pipeline (including Amazon Bedrock) for extraction, then is not kept as a long-term mail archive on our servers.
We share Google user data only with processors that help us provide these features, not for their independent use:
We do not share Gmail content with advertisers, data brokers, or other unrelated third parties. Transfers that Limited Use allows (security investigations, legal process, or a sale of the business with user consent) are the only exceptions.
Traffic to our API uses HTTPS. Data at rest in AWS uses the platform’s standard encryption. Access tokens and mailbox credentials are stored using OS and cloud secret-storage mechanisms rather than plaintext in source code. Access to production systems is limited to operators who need it to run the service.
We keep connected-mailbox data, tasks, and events while your account is active. You can delete your account and associated data in the app (Settings → delete account) or by following Account & data deletion. That removes server-side account records, tasks, events, mailbox watch configuration, and the local app database on that device. Deletion of your Handled account does not delete your Google account or your mail in Gmail. You can revoke Handled’s Gmail access at Google Account third-party access.
Handled is not directed at children under 13. We do not knowingly collect data from children under 13.
We may update this policy. We will notify you of material changes via the app or email.
For questions about this policy or your data, contact Handled Support.