Privacy Policy

1. Who we are

Handled, Inc. operates THELMA (available at meetthelma.com), an AI-powered household management assistant. This Privacy Policy explains how we collect, use, and protect your information when you use our service. By using THELMA, you agree to the practices described here.

2. Information we collect

• Account information: your name, email address, and password when you create an account.
• Household data: names, birthdays, dietary restrictions, and relationships of family members and circle members you add.
• Calendar and task data: events, tasks, and routines you create or import.
• Meal preferences: dietary restrictions, cuisine preferences, and meal history.
• Phone number: if you opt in to SMS notifications, we store your mobile number.
• Usage data: how you interact with the app, features used, and general session information.
• Device information: browser type, operating system, and IP address for security and analytics.

3. How we use your information

• To provide and personalize the THELMA service, including daily briefings, meal planning, and household management.
• To send SMS notifications if you have opted in (see Section 5).
• To send transactional emails, such as account confirmations and weekly digest emails.
• To improve our AI models and service quality (using aggregated, de-identified data only).
• To respond to support requests.
• To comply with legal obligations.

4. How we share your information

We do not sell your personal information. We share data only with:

• Service providers: Supabase (database/auth), Anthropic (AI processing), Twilio (SMS), Postmark (email), and Vercel (hosting). These providers process data on our behalf under confidentiality agreements.
• Legal authorities: if required by law, court order, or to protect the safety of our users.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to you.

5. How THELMA acts on your behalf

Anything that spends money or sends something outside your household — an email, an RSVP, a shopping cart, a text message — is never sent automatically. THELMA prepares it and waits for a parent to tap approve. Until you approve, nothing leaves your household. You always see the exact content (the full email, the exact cart) before it goes anywhere, and either parent can decline it.

6. SMS messaging

If you opt in to SMS notifications in your account settings, THELMA will send you recurring automated text messages including daily briefings, meal plan updates, and household reminders. Message frequency is up to 3 per day. Standard message and data rates may apply.

Consent to SMS is not a condition of using THELMA. You may opt out at any time by replying STOP to any message, or by turning off SMS in your account settings. Reply HELP for support contact information.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

8. Security

We use industry-standard security measures including encrypted connections (TLS), secure authentication, and access controls. No method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your account.

9. Children's information

THELMA is a tool for parents and guardians, not for children. It is not directed to children, and children do not create accounts or use the service directly. We do not knowingly collect personal information directly from children.

THELMA does let you, the adult account holder, add information about your children and dependents — such as their name, birthday, age, dietary needs, schedule, and similar details — so the service can help you manage your family. This information is provided by you, the parent or guardian, not collected from the child. By adding it, you confirm you are the child's parent or legal guardian, or otherwise have the right to provide it.

We protect children's information with the same safeguards as all household data: it is never sold, never shared for advertising, and never used to train AI models. Raw forwarded emails and uploaded photos are automatically deleted after 30 days. You can export or permanently delete all of your household's data — including your children's information — at any time from Settings, or by contacting us at support@meetthelma.com. If you believe a child has provided us information directly, contact us and we will delete it promptly.

10. Your rights

You may request to access, correct, or delete your personal data at any time by contacting us at support@meetthelma.com. You may also export your data or close your account through the app settings.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the app. Your continued use of THELMA after changes take effect constitutes acceptance of the updated policy.

12. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Handled, Inc. support@meetthelma.com meetthelma.com