Privacy Policy
For All Hands. Last updated: 5 October 2026.
This policy explains what All Hands, published by Harfred Labs, does with your information. It is written to be read, not to be survived. If anything here is unclear, ask us at harfredlabs@gmail.com.
The short version
All Hands is designed to keep your data on your own device wherever that is possible. We do not sell your personal information, we do not share it with advertisers, and we do not build advertising profiles about you.
What stays on your device
The content you create in All Hands — your entries, settings and preferences — is stored locally on your device by default. When you delete the app, local data goes with it. We cannot read data that never leaves your device, and we cannot recover it for you if you lose the device.
What we collect
We collect the minimum needed to run the app and keep it working:
- Technical information sent by your device when the app contacts our servers — IP address, device and operating-system type, and the time of the request. Web servers record these automatically. We use them to serve the app, to diagnose faults and to prevent abuse, and we do not use them to identify you personally.
- App version information, so the app can check whether an update is available.
- Anything you send us directly, such as the contents of a support email. We keep it for as long as it takes to help you, and no longer.
Features that send data off your device
You can fight the AI, play pass-the-phone and watch replays without anything leaving your device. Offices, friend challenges, Nearby play and earning Annual Leave outside an office need our server, and only if you use them:
- An anonymous account. Your device gets a random account identifier and a secret key, kept on the device. We store the identifier and a one-way hash of the key — no email address, phone number or real name is asked for. So that you can get your player back after reinstalling the app or moving to a new phone, the app also saves that key and your display name in your device’s secure storage (the iOS Keychain, synced by iCloud Keychain if you have it on, or Google Block Store and Android backup on Android). That copy lives on your device and in your own Apple or Google backup; this mechanism does not send it to us, and we cannot read it.
- Your employee profile. The display name, optional pronouns, job title, desk slogan, cartoon avatar and chosen specials you enter, so your colleagues in that office can see your desk and fight you. All free text goes through a language filter. No photos are ever collected.
- Fight records. When you fight in an office, the input log of the fight (which buttons were pressed on which frame — a few kilobytes) so the server can replay it, confirm the result and award Annual Leave, plus your win–loss record.
- Your Annual Leave and unlocks. One balance and level for your account, wherever you earn it: a ledger of what each verified fight paid and what you bought (the item and its price), the moves, packs and taunts you own, the titles you have earned and the one you wear. When you fight the AI or play Career while online, the game asks our server for a one-time fight ticket and, after the fight, sends the input log so the server can check it; we keep only the result and its check codes (not the input log), so the same fight cannot be paid twice.
Office data is visible only to members of that office. An office admin can remove you, and deleting an office removes it for everyone. To delete your account and its data, open Settings → Delete my account in the app (see how deletion works); if you cannot use the app, email us at the address below.
Deleting your account
Deleting your account in the app removes your profile, fighter, settings, Annual Leave, unlocks, titles, friends and friend requests, notification tokens and the fights you played alone or against the AI, straight away. Fights you played against other people stay in their history and standings with your name and details removed (they show “Former colleague”). An office you own passes to its longest-standing admin or member if others are in it, and is deleted if you are alone in it. A record of each store purchase (the store’s receipt number, product, date and amount) is kept with no name or account on it, to meet tax and refund requirements. Deleting your account does not cancel a subscription: cancel it in your App Store or Google Play settings.
Friend challenges
If you challenge someone with a link, accept a link, or fight someone outside an office, we store:
- Your fighter for friend fights. A display name, optional job title and cartoon avatar (language-filtered, no photos), and whether you want notifications about friend challenges. Anyone holding your challenge link sees this fighter, and so do your friends. It is never linked to your offices: a friend never learns which offices you are in.
- Your challenge link. A random code that works for 7 days (you can switch it off), and the live fights started from it, so the two of you can connect.
- Friends and fight records. After a fight, the two of you appear on each other’s Friends list, with your head-to-head record and when you last played, and each fighter’s input log so the result can be verified. You can remove a friend or block someone at any time; a block stops links, invites and notifications both ways.
- Whether you are online. Friends see a dot when you have the game open (the time of your last request), nothing more.
Nearby (2 player over Wi-Fi)
The Nearby screen finds people on the same Wi-Fi by the network address their phones reach us from. We never store or show that address: while the screen is open we keep a one-way, keyed hash of the network (the address for IPv4, the first half for IPv6), under a key that changes every day, for about 45 seconds after your last check-in, and delete it when you leave the screen. People on the same network with Nearby open at the same moment see your fighter’s name and look, and can invite you; blocks apply here too.
Service providers
We use a small number of providers to run All Hands, and they process data only on our instructions:
- Google Cloud — hosting, storage and content delivery.
- Neon — the Postgres database that holds office, profile and fight records.
- Apple and Google — app distribution, and payment processing where the app offers purchases.
These providers operate internationally, so your information may be processed in a country other than your own. We rely on the safeguards those providers offer for transfers of that kind.
Children
All Hands is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, write to harfredlabs@gmail.com and we will delete it.
How long we keep things
Data you store locally lasts until you delete it or remove the app. Data held on our servers for a feature you enabled is kept while your account is active, and removed straight away when you delete your account in the app, or within 30 days of your asking us by email. Server logs are kept for a short period for security and diagnostics, then discarded.
Your rights
Depending on where you live, you may have the right to see the personal information we hold about you, to correct it, to have it deleted, to object to how we use it, or to receive a copy in a portable form. Ask us at harfredlabs@gmail.com and we will respond within the time your local law requires — and in any case within 30 days.
Much of this you can do yourself: deleting the app removes local data, and you can delete your account from within the app in Settings → Delete my account.
Security
Data sent between the app and our servers travels over an encrypted connection (HTTPS), and data we store on your behalf is encrypted at rest. No system is perfectly secure, so we do not claim otherwise — but we keep the amount of information we hold small, which is the most effective protection available.
Changes to this policy
If we change this policy we will update this page and the date at the top. If a change materially affects how we use your information, we will tell you in the app before it takes effect.
Contact
All Hands is published by All Hands. For any privacy question, or to exercise any right above, write to harfredlabs@gmail.com.