Privacy policy

Effective date: 25 October 2026

This policy covers Handy Mind for Windows and this website at handymind.alexlv.com. Handy Mind is developed by Alex LV. Contact alex@alexlv.com with privacy questions or deletion requests concerning information you send to the developer.

Text you send to your AI provider

Handy Mind does nothing until you press the shortcut of one of your actions. It then copies the selected text in the active input, or reads an image already on the clipboard for image actions, and sends it with that action’s prompt to the AI provider and model you configured. Supported providers are Google Gemini and an OpenAI compatible endpoint whose address you enter. Requests go directly from your PC to that provider over HTTPS using your own API key.

The provider processes the request under its own terms and privacy policy, for example the Gemini API terms. Review your provider’s data use and retention rules before sending sensitive text. Handy Mind does not send your text, images, or results to the developer or to this website.

Handy Mind uses the Windows clipboard to copy your selection and paste the result. A result can remain on the clipboard after use. If the original input changes during a request, the result stays pending in the app and on the clipboard until you paste it or quit Handy Mind. Pending results and recent activity are kept in memory only and are not saved to disk.

Settings, keys, and diagnostics

Handy Mind saves your actions, prompts, shortcuts, provider and model choices, appearance, update schedule, and sync state in %LocalAppData%\HandyMind\settings.json. It may retain a previous copy as settings.json.bak. These settings files are readable JSON and are not encrypted by Handy Mind.

Your Gemini and OpenAI compatible API keys are stored in %LocalAppData%\HandyMind\api-credentials.bin, protected by Windows DPAPI for the current Windows user. They are sent only to the provider they belong to.

If the app hits an unexpected error, it writes technical details to %LocalAppData%\HandyMind\errors.log. The log is used to troubleshoot the app and is not automatically uploaded. Handy Mind has no analytics or telemetry.

Google data Handy Mind accesses

Google Drive sync is optional. Handy Mind requests one permission:

• https://www.googleapis.com/auth/drive.file allows Handy Mind to access only files it creates or files you explicitly make available to it. Handy Mind uses this to create, read, and update its own sync file.

Handy Mind does not request access to your entire Drive, Gmail, contacts, or calendar. It reads its sync file and the file’s identifier, version, creation time, and Drive link to locate and reconcile your actions.

What Drive sync stores

Handy Mind stores one file, handymind-settings.json, in My Drive. It contains your action names, prompts, enabled flags, input behavior, Windows shortcuts, your default and per-action AI provider and model choices, and your OpenAI compatible endpoint address. It does not contain Google tokens, selected text, AI results, activity, logs, or pending results. Appearance and update settings stay on the PC.

Your API keys are included only if you set a sync password in Handy Mind. They are then encrypted on your PC with AES-256-GCM before upload, using a key protected by your sync password (Argon2id) and by a recovery code shown once. The file holds only this ciphertext; Google and the developer cannot read the keys. Each PC where you enter the password keeps the key protected by Windows DPAPI in %LocalAppData%\HandyMind\sync-key.bin.

The sync file is readable JSON. Handy Mind does not encrypt it before upload. Requests to Google use HTTPS. Do not put passwords or other secrets in prompts you sync.

Sync runs directly between your PC and Google Drive at startup, after you save settings, and periodically while connected, so PCs connected to the same Google account use the same actions. The developer does not operate a server that receives these synced actions.

Google authorization tokens

Google sign-in opens in your default browser. Handy Mind stores authorization tokens in %LocalAppData%\HandyMind\google-token.bin, protected by Windows DPAPI for the current Windows user. Tokens are used only to authorize requests to Google Drive. They are not sent to this website or the developer.

Sharing and Limited Use

Handy Mind uses Google user data only to provide its action-sync feature. It does not sell Google user data, share it with AI providers, or use it for advertising, profiling, or training AI models. The developer does not access your Google account or sync file.

Handy Mind follows the Google API Services User Data Policy, including its Limited Use requirements. Google handles data in your Drive under Google’s privacy policy.

Disconnecting and deleting data

• In Handy Mind Settings → Google Drive, choose Disconnect to remove the local authorization token and stop sync on that PC. Local actions remain available. Repeat on each connected PC.
• Revoke Handy Mind’s Google access through your Google Account’s third-party connections. Revoking access does not itself delete the sync file.
• Delete handymind-settings.json (or an older handymind-actions.json) from Drive and empty the Drive trash.
• To remove local settings, keys, tokens, and logs, quit Handy Mind and delete %LocalAppData%\HandyMind on each PC. Uninstalling the app keeps this folder so your data survives reinstalls.
• To remove data held by your AI provider, follow that provider’s own deletion options.

Disconnect before deleting the Drive file to prevent a connected PC from recreating it. Local settings and the Drive copy remain until you delete them. Google’s own retention rules can apply to data stored in Drive.

This website and contact

This website uses no analytics, advertising, tracking scripts, or cookies. The web server records standard request logs, including IP address, request path, timestamp, browser information, and response status. These logs support site operation and troubleshooting and follow the server’s log rotation settings.

If you send the developer an email or diagnostic file, the developer uses that information to respond and investigate the issue. Contact alex@alexlv.com to request deletion of information you sent. The developer cannot delete files stored only on your PCs, in your Google account, or with your AI provider.

Policy changes

Updates will appear on this page with a new effective date. Changes to the app’s data handling will be described here.