Privacy Policy

This policy explains what FourHanded (Retainer Learning LLC, doing business as FourHanded) collects, why, who sees it, and what you can do about it. We've kept it short and specific to how the service actually works.

What we collect

• Account details. Your email address, a password (stored only as a secure hash), and a name if you give one.
• Your chats. The text of your questions and Cara's answers. We keep your most recent 50 chats so you can reopen them; older ones are deleted automatically, and you can delete any chat yourself at any time.
• Photos you send. Used to produce the answer and then discarded. We do not store them, and they never appear in your chat history (the history shows "[Photo]" in their place).
• Voice. If you dictate a question, the recording is sent to our speech provider to turn it into text and is not stored; only the text is kept, like any typed question. If you have an answer read aloud, the answer text is sent to the same provider to generate the audio. We don't keep the audio.
• Usage. A count of questions asked (so plan limits work), which plan you're on, and basic technical details like the model used and token counts for each answer. For FourHanded Office plans, the office owner can see each member's question count, not their chats.
• Payment records. Stripe handles payment. We receive a customer ID, your plan, and payment status. We never see or store your full card number.
• Technical logs. Standard server logs (IP address, browser type, timestamps, errors), kept briefly for security and debugging.

We don't run advertising trackers and we don't buy data about you from anyone.

Cookies and tracking

We use only the cookies and similar storage the service needs to work: keeping you signed in, remembering settings like whether spoken answers are on, and letting Stripe process your payment securely. We don't use advertising cookies, third-party analytics, social media pixels, or cross-site tracking of any kind. Because we don't track you across other sites, we don't change how the service works when your browser sends a "Do Not Track" or Global Privacy Control signal; there is nothing to opt out of. You can block or clear cookies in your browser, but you won't be able to stay signed in without them.

How we use it

• To answer your questions. Your message, your recent messages in that chat, and any photo are sent to our AI provider to generate the response.
• To run your account, enforce plan limits, and process payments.
• To keep the service secure and fix problems.
• To improve Cara. We may review chats in aggregate or individually to find wrong or unhelpful answers and fix them. We don't use your chats to train a public AI model, and our AI provider doesn't use them for training either (see below).
• To email you about your account: receipts, renewal and cancellation notices, security notices, and significant changes to the service. We don't send marketing email unless you opt in, and you can opt out any time.

Who else sees it

We share data only with the companies that run the service for us, and only what each needs:

• Anthropic processes your questions and photos to generate answers, and runs the web search when you ask Cara to check the web. Under its commercial API terms it does not train on this data and retains it only briefly for abuse monitoring.
• OpenAI turns your voice recordings into text and turns answers into speech. Under its API terms it does not train on this data.
• Supabase hosts our database and handles sign-in.
• Vercel hosts the website.
• Stripe processes payments and stores your payment method.

We don't sell your personal information and we don't share it with advertisers. We'll disclose information if the law requires it, to protect someone's safety, or as part of a sale or merger of the business (in which case this policy still applies to it).

Patient information

FourHanded is a study tool. Please don't send patient names, faces, chart numbers, or anything else that identifies a patient. If a photo you send happens to include a patient, it is still discarded after the answer and never stored, but the safest step is not to send it. We are not a HIPAA business associate for your office.

Where it lives and how long

Data is stored on servers in the United States. FourHanded is built for people in the United States; if you use it from somewhere else, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live. Your account and chat history are kept while your account exists. When you close your account, we delete your account record and chat history within 30 days; payment records are kept as long as tax and accounting law requires. Aggregated statistics that don't identify anyone may be kept.

Your choices

• Delete any chat from the history panel in the app.
• Change your plan or payment method from your account page.
• Ask for a copy of your data, a correction, or deletion of your account by emailing admin@getfourhanded.com. We'll respond within 30 days. We won't treat you differently for making a request.
• Opt out of any marketing email with the link in the email.

If you live in a state with its own privacy law (California, Colorado, Utah, Virginia, and others), you may have additional rights to access, correct, delete, or port your data, and to appeal if we decline a request; use the same email and we'll honor them. We don't sell personal information or use it for targeted advertising, so there is nothing to opt out of on that front.

California residents

In the categories California law uses, we collect identifiers (email, name, IP address), commercial information (your plan and purchases), internet activity (your chats and basic technical logs), and audio (voice recordings, which are not stored). We collect them directly from you and use them only for the purposes listed above. We have not sold or shared personal information in the preceding 12 months, and we don't do so now. You have the right to know what we've collected, to correct or delete it, and not to be discriminated against for exercising those rights; email admin@getfourhanded.com, and we'll verify the request against your account email. You can use an authorized agent if you give them written permission. Because we don't share personal information with third parties for their own direct marketing, there is nothing to report under California's "Shine the Light" law.

Children

FourHanded is for adults and, with a parent or guardian's account and consent, for students aged 16 and 17. We don't knowingly collect information from anyone under 16. If you believe a child under 16 has an account, email us and we'll delete it.

Security

Data is encrypted in transit and at rest with our hosting providers. Access to the database is limited to what the service needs. No system is perfectly secure; if we learn of a breach that affects you, we'll tell you as the law requires.

Changes

If we change this policy in a meaningful way, we'll post the new version here with a new date and email account holders before it takes effect.

Contact

Retainer Learning LLC, doing business as FourHanded. admin@getfourhanded.com. Our Terms of Service cover the rest of the relationship.