Privacy policy

Handsy AI (ESP32 Agent) is an iOS app that works with a small ESP32 USB board. An AI service you choose looks at your mirrored iPhone screen and, after you start a task, carries out its steps through the board. If you use your own AI service, the developer receives none of your screens or tasks. The developer's servers are used only for the optional free Handsy line (section 2), diagnostics you choose to send, and board firmware downloads (section 5).

1. Data sent to the AI service you choose

To decide each step, the app sends the AI service you set up (for example OpenRouter, OpenAI or your own server):

• a screenshot of your mirrored screen at each step of a run;
• the task you typed and the steps taken so far;
• your API key, to sign in to that service.

Nothing is sent until you agree. Before the first request, the app shows the service's address and what will be sent, and asks for your consent. Changing to another service asks again. Requests are made only when you start a run, test the connection, check the calibration or save an intent. That service handles the data under its own privacy policy and terms.

You can withdraw consent at any time in Settings › Privacy › AI service › Withdraw. After that, the app sends nothing to the service until you agree again.

2. The free Handsy line (optional)

Instead of your own AI service you can use the free Handsy line, run by the developer with limited capacity. It is not available in every region. Before the first request, the app shows what will be sent and asks for your consent. With your consent, the line receives and privately keeps each step's screenshot, your task, the model's replies, timings and results, plus a random installation ID and network address ranges used to limit abuse. Screenshots can show anything on your screen and are not blurred, so avoid private tasks on the free line. Full details: llm.handsy.tech/privacy. You can withdraw consent in the app at any time; to delete records already kept, email [email protected] with the installation ID shown in the app.

3. Data kept on your iPhone

Runs (steps, model replies, screenshots and a low-frame-rate screen video), saved intents, the debug log and crash reports are stored in the app's own storage on your iPhone. Your API key is stored in the iOS Keychain and is never written to logs or exports. Run data leaves the phone only when you export or share it yourself.

4. Anonymous usage stats (off by default)

If you turn on Share anonymous usage stats, the app sends a fixed list of events to PostHog (US) so the developer can see where setup and runs get stuck: setup steps reached, board and mirroring connected, calibration results, run outcomes with step counts and durations, the model provider, model speed and token counts, app and iOS version, device model, language, and crash and hang reports from iOS. Each event carries a random ID created for this install. Location is not collected, and no person profile is built. Your tasks, screenshots, screen video, typed text, model replies, API keys and server addresses are never sent. Turning the switch off stops sending and deletes the ID.

5. Bluetooth, Wi-Fi, firmware and diagnostics

The app connects to the ESP32 board over Bluetooth and may join the board's own Wi-Fi hotspot so the board can receive Screen Mirroring. It does not scan for or record other devices or networks. To update the board, the app downloads signed firmware from handsy.tech; no personal data is sent.

If you tap Send diagnostics to the developer and confirm, the app sends the debug log, board state and crash reports (no runs, screenshots or keys) to the developer to fix problems.

6. What the app does not do

No accounts, no advertising, no tracking across apps or websites, and no data sold. The app does not use the advertising identifier.

7. Deleting your data

• Delete a run from the Runs tab, or delete the app to remove all runs, intents, logs and settings.
• Free Handsy line records: email us with the installation ID shown in the app.
• Withdraw AI-service consent in Settings › Privacy; data already sent is held by that service under its policy. Contact the service to delete it.
• Turn off usage stats to stop sending them. To delete stats already sent, email [email protected] with the date you used the app; because the ID is random, we may not be able to match every event to you.

8. Children

The app is not directed to children under 13.

9. Changes

We will post updates on this page and change the date above.

10. Contact

Email [email protected] or open an issue at GitHub.