Privacy Policy

Your journal is yours. We collect only what we need to run Tend, we never sell your data, and we never show you ads. We rely on a small number of service providers to run Tend (listed below) and give each only what it needs. When Tend writes you an AI reflection, the entries it reflects on are sent to our AI provider, Anthropic, to write it. If you dictate a check-in, the recording is sent to AI providers to turn it into text and fill in your check-in, and is kept with your entry so you can listen back unless you turn that off.

• ·
• Account information: your email address, used to sign you in.
• ·
• Journal entries: your check-ins, including mood, energy, emotions, gratitude notes, highlights, lessons, free-form notes, and pending items.
• ·
• Photos: if you add a photo to an entry (a Tend+ feature).
• ·
• Voice notes: if you dictate a check-in (a Tend+ feature), the recording, unless you turn saving off.
• ·
• Skills ratings: your self-ratings and the skills you tag on check-ins.
• ·
• AI reflections: the reflections Tend writes for you, stored in your account.
• ·
• Profile settings: display name, timezone, language, reminder and reflection schedule, and whether weekly reflections are on, and whether voice notes are kept.
• ·
• Push subscriptions: if you turn on notifications, your device’s push address and keys, plus its browser user agent.
• ·
• Subscription status: whether you have Tend+, until when, and where it came from (free trial, App Store, Google Play, or web). We never receive your card or bank details.
• ·
• Product events: a few first-party events, such as finishing onboarding, viewing the Tend+ screen, or a trial or subscription starting, converting, or ending.
• ·
• Usage data: basic server logs (request timestamps, response codes) retained for up to 30 days for debugging.

We do not collect advertising identifiers, sell data to brokers, or run third-party analytics or tracking scripts. Product events are stored in our own database with your account, are never sent to an analytics company, and are deleted with your account.

• ·
• To authenticate you and keep your account secure.
• ·
• To store and retrieve your journal entries.
• ·
• To send daily check-in reminders, if you enable them.
• ·
• To write your AI reflections (see below).
• ·
• To check whether you have Tend+ and unlock its features.
• ·
• To understand, in aggregate, how many people finish onboarding and choose Tend+.
• ·
• To respond to support requests you send us.

We do not use your journal content to train machine learning models.

Tend’s reflections are written by Claude, an AI model made by Anthropic. To write one, our server sends Anthropic the entries from the period being reflected on (date, mood, energy, emotions, highlight, gratitude, lesson, pending items, and free-form notes) and your language. We don’t send your name, email address, or photos.

This happens at two moments: once a week, on the day you choose in Settings, if you wrote at least three check-ins that week (free accounts get their first weekly reflection; after that it’s part of Tend+); and whenever a Tend+ member asks for a reflection on a range of days. The reflection is saved to your account.

You can turn weekly reflections off in Settings. While they’re off, Tend doesn’t send your entries to Anthropic for a weekly reflection. Reflections you ask for yourself still work as described.

Anthropic processes this data to provide the service to us. Under Anthropic’s commercial API terms, it is not used to train Anthropic’s models.

Tend+ members can dictate a check-in instead of typing it. Your device records the clip and our server sends the audio to Groq to turn it into text. The text is then sent to Anthropic, which suggests how to fill in your check-in’s fields. Nothing is saved until you review the suggestions and save the check-in yourself.

When you save, the recording is stored with that entry as a voice note, in private storage only you can access, so you can listen back to it later. You can remove a voice note from its entry at any time, or turn off “Keep my voice notes” in Settings to keep only the text. Deleting your account deletes them too.

Groq and Anthropic process the audio and text only to provide the service to us. Under their API terms, neither uses it to train their models.

We rely on these companies to run Tend:

• ·
• Supabase: database, sign-in, and photo and voice note storage. A managed Postgres platform hosted on AWS in the United States that encrypts data at rest and in transit.
• ·
• Vercel: hosts the Tend app and runs its scheduled jobs.
• ·
• Anthropic: writes your AI reflections and fills in dictated check-ins, as described above.
• ·
• Groq: transcribes check-ins dictated on the web.
• ·
• Brevo: delivers the one-time sign-in codes to your email address.
• ·
• Web push services: if you turn on notifications, your browser’s push service (run by its maker, such as Apple, Google, or Mozilla) delivers them. Notifications carry a short reminder or a “your reflection is ready” note, never your entries.
• ·
• Apple, Google, and RevenueCat: handle Tend+ purchases (see below).

Tend+ is sold through the Apple App Store, Google Play, and our website, with subscriptions managed by RevenueCat. Apple, Google, or the web payment processor takes your payment; Tend never sees or stores your card details. RevenueCat tells us whether your subscription is active so we can unlock Tend+. It receives an account identifier and purchase details, never your journal content.

Your data is retained for as long as your account is active. You can delete your account at any time from inside the app: go to You → Account → Delete my account and confirm. This immediately and permanently erases your account and all associated data: entries, photos, voice notes, items, skills, reflections, settings, product events, and push subscriptions.

Deleting your account does not cancel a Tend+ subscription bought through the App Store or Google Play. Cancel it in your store account settings so you aren’t charged again.

If you can’t access the app, email us at hello@tendjournal.app from the address on your account and we will complete deletion within 30 days. Server logs, which never contain journal content, age out within 30 days.

Step-by-step instructions, with or without the app, are on our account deletion page.

You may request a copy of your data, correction of inaccurate data, or deletion of your account at any time, in the app or by contacting us. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

If we make material changes, we will update the date at the top of this page. Continued use of Tend after changes take effect constitutes acceptance of the revised policy.

Questions? hello@tendjournal.app