What you type into the app stays on your phone. A handful of anonymous usage events go to PostHog, the analytics service we use, so we can tell whether people get through the questions and do something with their results. You never make an account, and the app doesn't track you across other apps.
What stays on your phone
Everything you enter is saved only on your device and is never sent to us or anyone else by the app:
- your age, the body-part question, symptoms, smoking history, family history and past conditions;
- where you live and your language choice, as you set them in the app;
- the dates of your last tests, your plans to book a check, and the answers to "Did you go?";
- the reminders the app schedules on your phone.
What the app sends
These are the events, and the values that go with each one. If it isn't on this list, the app doesn't send it.
check_startedwhen you tap Start. It carries no values.question_answeredeach time you move past a question, withindex(1 to 6) so we can see where people give up. The answer isn't in it.results_shownwith theplacecode you picked (CA-QC, or a country code likeFR),verified(true if we've checked that place's own rules) and four counts:overdue,due,up_to_date,not_yet.check_openedhas the check'sfamily(colon,bloodPressureand so on) and thestateit was in.last_test_setfires when you fill in your last test for a check. Onlyfamilygoes with it: not the date, and not "never".plan_created: thefamilyof the check you planned to book.reminder_all_scheduled: how many reminders (count) and whether your phone let the app set them (resultisscheduled,partialordenied).print_pressedsendsscope, a fixed word for whether you printed everything or one check.share_pressedsendskind:results,check, orfamilyfor the message to relatives.ask_ai_copiedsendsplace_verified. The text you copied stays on your phone.report_pressed, with the check'sfamilyif you reported from a check.country_requested: thecountrycode you asked for.did_you_go: just thefamily. Whether you went is kept on your phone.story_pressedwhen you tap "Share your story". No values.explainer_openedwith thetopic, for examplewholeBodyMri.
The app also reports which screen is showing, by a fixed name such as results or question_3, and PostHog's own app-installed, app-updated, app-opened and app-closed events with the app version.
Every event also carries app, platform, app_version, app_build and dev (true only in test builds), plus the basic device details PostHog's toolkit adds on its own: phone model, operating system version, screen size, language setting and time zone.
What we never get
- Your age, birth date, sex, symptoms, smoking, family history or conditions.
- Dates of any test, whether you said you never had one, your answer to "Did you go?", or anything you type.
- Your name, email, phone number, contacts or precise location.
- Advertising identifiers. The app has no ad or marketing toolkit.
About PostHog
PostHog, Inc. processes the events for us on servers in the United States (us.i.posthog.com). The app runs PostHog with these settings: no person profiles, location lookup from IP addresses switched off, no session recording, no automatic capture of taps, no surveys and no feature flags. Each install gets a random ID so that events from one phone can be counted together. That ID is not linked to you, your name or any account.
Like any server, PostHog sees the internet (IP) address a request comes from, and it may store that address with the event. We do not use it to find out where you are or who you are.
We don't sell or share the events with anyone else, and we don't use them for advertising.
When you choose to share
Some buttons hand information to another app, and only when you tap them:
- Remind me / plan adds an event to your calendar. It is then an ordinary calendar event in your calendar app.
- Ask your AI copies a question to your clipboard that includes your answers, so you can paste it into an AI chat of your choice. The app clears the copy after an hour. What you paste is covered by that AI service's own policy.
- Share and Print use your phone's share sheet and print screen.
- Something wrong? and Share your story open your email app with a message to checkups@handled.tools. If you send it, we receive your email address and what you wrote. We use it only to reply and to fix the app, keep it in our email inbox (Gmail), and never publish a story without your written permission.
Deleting your data
There is no account, so there is nothing on our side tied to you. The quickest way to erase what the app saved is inside it: on the results screen open Settings and tap Delete my answers. That removes your answers, last tests, plans, reminders and saved printouts, and on iPhone it also clears anything the app left on your clipboard. Deleting the app works too (on Android you can also clear its storage). Calendar events you added stay in your calendar until you delete them there. Usage events in PostHog carry no answers and can't be matched to you, so we can't pick out yours. To have an email you sent us deleted, write to checkups@handled.tools. Step-by-step instructions are on the delete your data page.
Children
The app is meant for adults. A parent may use it to look up checks for a child; nothing about the child is sent.
Changes and contact
If what the app sends changes, this page changes first, with a new date at the top. Questions about privacy: checkups@handled.tools.