Privacy Policy

Last updated: May 6, 2026

Your privacy matters. This page explains what data Handoff collects, how we use it, who we share it with, and the controls you have.

1. What we collect

• Account info— your name, .edu email address, and school. We use your .edu email to verify you're a student.
• Profile content — anything you choose to add: display name, profile photo, optional phone, optional Instagram.
• Listings — what you post: title, address, price, dates, photos, description.
• Activity data— saved listings, handoff requests you've sent or received, notifications you've received.
• Technical data — IP address, browser type, and basic usage analytics so we can improve the product. We do not use cross-site tracking cookies.

2. What we don't collect

• Your password (it's hashed by Supabase Auth before we ever see it)
• Payment information — money never moves through Handoff
• Your browsing history outside of Handoff
• Your contacts, social graph, or location data

3. How we use your data

• To verify you're a real student at a participating campus
• To show your listings on the map and to other verified students
• To deliver in-app notifications about handoff requests
• To prevent fraud, abuse, and misuse of the platform
• To improve Handoff in aggregate (we look at counts and trends, not individuals)

4. When contact info is shared

Your email address is hidden from other users until bothsides accept a handoff request. Once accepted, your email and any optional contact methods you've added become visible to the other party so you can finalize the handoff offline. This is the only situation in which we share your contact info.

5. Service providers

We use a small number of trusted services to run Handoff:

• Supabase — database, authentication, file storage
• Vercel — application hosting and CDN

These providers process data on our behalf and are bound by their own privacy commitments. We don't sell your data to anyone, ever.

6. Your controls

• Edit or delete your profile from /profile
• Delete any listing from My listings
• Email hello@handofflease.com to request full account deletion or a data export

7. Data retention

We keep your data for as long as your account is active. When you delete your account, we remove your profile and listings within 30 days. Some records may be retained longer if required by law.

8. Children

Handoff is for college students, ages 18 and up. We don't knowingly collect data from anyone under 18.

9. Changes

Material updates will be announced by email and an in-app notice. Read the date at the top — that's the version you're currently agreeing to.

Questions? Email hello@handofflease.com.