Your family’s information.

What Tandem stores, why we use it, and the choices you have.

Effective October 14, 2026

Information we collect

We store your email address, password hash if you use a password, Apple account identifiers and encrypted Apple refresh tokens if you use Apple sign-in, and sign-in sessions. We store the household information you enter: family-member profiles, tasks, deadlines, recurring schedules, assignments, completion history, contacts, relationships, and notes.

When you use the task assistant, we store your messages and task drafts to support follow-up clarification. If you enable notifications, we store your device push token, notification preferences, and personal reminders. We also process technical information such as IP addresses, request and error logs, rate-limit records, and delivery status to operate and secure the service.

How we use information

We use this information to provide household collaboration, sign-in, task assistance, reminders, invitations, account recovery, support, and service security. Household members with access can see shared household information. Personal reminders and notification settings belong to the individual account.

The task assistant processes requests on Tandem-operated inference infrastructure. These requests are not sent to an external AI API.

Service providers and sharing

Tandem runs on infrastructure in the United States. Database backups are stored with Amazon Web Services in its US West (Oregon) region. Apple provides Apple sign-in and iOS push delivery, Expo provides push delivery, and Resend provides account, invitation, and operational email delivery.

Push payloads can include task titles and reminder text, which may appear on your lock screen. Email providers process recipient addresses and message content. We share information with these providers as needed to provide their services. We do not sell personal information or use it for advertising. We may disclose information when legally required or when necessary to protect the service and its users.

Children and family profiles

Tandem’s family profiles let household adults coordinate responsibilities for children. Child profiles do not have separate sign-in accounts. Add only the information your household needs; avoid detailed medical records or sensitive identifiers. Parents and guardians can contact us about access, correction, or removal of information concerning a child.

Retention and deletion

We retain account and household information while needed to provide the service. You can delete your account in Household → Account settings → Delete account. We remove its sign-in credentials, sessions, account challenges, queued account emails, and private drafts.

If you are the household’s only signed-in adult, deleting your account deletes the household. If other adults remain, shared household records remain; your member profile is disconnected from your account and renamed “Former member.” Personal references in shared task descriptions or notes are not automatically removed. Contact us for help removing personal information that remains in shared records.

Sent or expired account emails are removed from the delivery queue. Expired notification records are periodically removed. Database backups use a 30-day recovery window; supporting backups may predate that window, so deletion from the live database does not mean immediate removal from every backup. Backups are used for recovery and expire under the backup retention policy.

Your choices

You can update household information, configure notifications, revoke sessions, and delete your account. Your device settings also control notification permissions. Email privacy@tandemfamilyhq.com to request access, correction, or deletion, or to ask a privacy question. We may need to verify your identity before acting on a request.

Security

We use safeguards including encrypted connections, password hashing, access controls, and encrypted Apple refresh tokens. No service can guarantee absolute security. Avoid sharing passwords or verification codes.

Changes to this policy

We will update the effective date when this policy changes and provide additional notice when required.