Privacy Policy

Effective: 2026-04-30

Tend is designed around privacy. Relationship data is sensitive, and we treat it that way.

What stays on your device (never leaves)

• Calendar event titles, descriptions, attendee names, and locations
• Your notes, reflections, and milestone data
• Raw home address and coordinates

What we store on our servers

• Account identifier (from Apple/Google Sign-In) and email (if provided)
• Your partner's name and pronouns (as you configured)
• Anonymized calendar metadata: event counts, back-to-back block counts, evening availability, high-stress keyword tags you configured (but NOT event titles by default)
• Nudges delivered to you and your actions (done / snoozed / skipped)
• Subscription status (via RevenueCat)
• Your Expo push token (for silent push to wake the app)
• Your preferences (nudge intensity, quiet hours, LLM provider choice)
• Encrypted API key (only if you use BYOK) — AES-256 at rest

Data retention

• Nudge history: 90 days, then auto-deleted
• Calendar metadata snapshots: 30 days
• Account deletion: full data purge within 24 hours on request

Third-party services

• Apple Sign In / Google Sign In — authentication only
• RevenueCat — subscription management
• Anthropic / OpenAI / Google — nudge generation. We send anonymized metadata; never event titles or PII beyond partner name and pronouns, unless you've opted in to "Share calendar details" in Settings.
• Expo Push Service — notification delivery
• PostHog — privacy-respecting analytics, anonymized
• Sentry — crash reporting

Partner linking (Couples tier)

• Both partners must explicitly opt in
• Either can revoke at any time, immediately deleting shared data
• Only a home/away boolean is shared — never continuous location

Your rights

• Delete your account from Settings → Advanced → "Delete account". Cascades through every server-side row that belongs to you and wipes the local database.
• Export your data from Settings → Advanced → "Export my data". Returns a JSON document of every row we hold for your account and offers it via the system share sheet.
• Change LLM provider or BYOK anytime from Settings → AI Provider.

Contact

Privacy questions, data export requests, and deletion requests: use the contact form (topic "Privacy"). For subjects unrelated to privacy, see the support page.