Privacy Policy

Effective date: October 18, 2026

Tandem ("we", "our", "the app") is a relationship check-in app that gives couples a private space for individual reflection and a shared space for facilitated conversations. This policy explains what data we collect, how we use it, and your rights.

What We Collect

• Account information — your first name and either your Apple ID identifier or your email address and password.
• Conversation content — messages you send in private sessions and shared sessions, session summaries generated by the AI, and any notes you choose to share.
• Audio — when you use a voice feature, your audio is streamed to Deepgram to be turned into text. We never keep the audio of a recorded conversation or a spoken answer: a recording is kept only as its summary, and a spoken answer as its words. A voice memo you add to a capture is saved with the capture, along with its transcript.
• Captures and Memory — the captures you write, with any photos or voice memo. A capture can stay private or be saved to Memory, your shared archive: the captures either of you saves there, the takeaways from the conversations you have together, and your relationship's milestones. Once you're paired, you and your partner both see Memory.
• Context documents — AI-generated summaries of your session history, used to provide continuity across sessions.
• Relationship data — the link between you and your partner (no other personal details about your partner beyond their name).
• Usage and diagnostics — which features you use, through PostHog, never what you write, record or feel; and reports of errors and crashes, through Sentry. Both know you only by a random ID.

How We Use Your Data

• To provide the service — your conversation content is sent to Anthropic's Claude API to generate AI responses, session summaries, and context documents. So is a capture you're still writing, before you save it, when Tandem offers you a prompt for it.
• To maintain continuity — session summaries and context documents are stored so the AI can remember prior conversations.
• To send transactional emails — email verification and password reset codes are sent via Resend.

The Privacy Boundary

Your private sessions are never shared with your partner, or used for what the two of you see together, unless you choose to keep a note for both of you. This boundary is enforced at the server level — it is not a UI-level restriction.

When you keep a note for both of you, only that note crosses the boundary: your partner's Tandem keeps it in mind, and it can shape the Themes you both see, without your name on it.

Sharing Outside Tandem

Either of you can make a picture of up to nine memories from Memory and share it outside Tandem, to Messages or Instagram for example. It can show any memory in Memory, including ones your partner saved. You choose which memories it shows, and its headline and line. The picture is made on your phone, and once you share it, it is no longer in Tandem's control.

If you ask Tandem to suggest the headline or the line, the words of the memories you chose are sent to Anthropic's Claude API to write it. The text that goes with the picture carries a link to sign up for Tandem, never a code to join your relationship.

Third-Party Services

• Anthropic (Claude API) — processes conversation content to generate AI responses. Anthropic's data retention policy applies to data sent to their API. See Anthropic's privacy policy.
• Deepgram — turns speech into text when you record a conversation, answer aloud in a voice session or add a voice memo, and speaks Tandem's lines aloud in voice sessions. It receives the audio, and the text of what Tandem says, which can mention what you and your partner said. We ask Deepgram not to use any of it to train its models, so it keeps it only as long as it takes to process. See Deepgram's privacy policy.
• Resend — sends transactional emails (verification codes, password resets). See Resend's privacy policy.
• Cloudflare R2 — stores the photos and voice memos you add to captures. See Cloudflare's privacy policy.
• PostHog — product analytics: which features are used, under a random ID, never what you write, record or feel. See PostHog's privacy policy.
• Sentry — receives reports of errors and crashes, which we use to fix them. See Sentry's privacy policy.
• Apple — authenticates Sign in with Apple users. See Apple's privacy policy.

Data Storage and Security

Your data is stored in a server-side database hosted on Railway in the United States (US East); photos and voice memos are stored in Cloudflare R2. API keys and sensitive credentials are never stored on your device. Communication between the app and server uses HTTPS/WSS encryption. Passwords are hashed using argon2id and are never stored in plain text.

Data Retention

Your data is retained for as long as your account exists. When you delete your account (available in Settings), all of your data is deleted from our database and storage at once, including:

• Your user profile
• All private sessions and messages
• Your captures, with their photos and voice memos
• All notes, threads and your private context document
• Your relationship and everything you share with your partner — Memory, Things To Discuss, guides and conversations. Your partner keeps what is theirs: their private space, the notes they kept for themselves, and what they had made before you paired.

If either of you ends the relationship, what you shared together is deleted for both of you. Each of you keeps your private space, and what each of you made before you paired goes back to whoever made it.

Our database backups, kept so we can recover from a failure, still hold deleted data until they expire. Usage analytics, which know you only by a random ID, stay with PostHog.

Your Rights

• Access — you can view all your data within the app.
• Deletion — you can delete your account and all associated data at any time from Settings.
• Correction — you can update your name in Settings.

Children

Tandem is not intended for anyone under the age of 18. We do not knowingly collect data from minors.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

Contact

Questions about this policy? Email us at ferdinandosigona@gmail.com.