Privacy Policy

What the Tendi app stores locally

Tendi stores the data you create in the app on your device, including mood entries, notes, activities, photos, voice notes, settings, reminders, import/export state, and insights calculated from your entries. This data is used to run the app and show your journal, charts, summaries, and reminders.

Tendi does not send your journal entries, note text, photos, voice notes, or local insight details to Tendi servers.

Optional iCloud sync

If you enable iCloud sync, Tendi uses Apple's servers through your personal iCloud account. Your data syncs between your Apple devices through Apple's infrastructure. Tendi does not receive, host, or read your synced journal data.

You can turn iCloud sync off in Tendi settings. You can also manage iCloud data through Apple's iCloud settings.

HealthKit

If you grant Apple Health access, Tendi can read supported HealthKit data such as sleep, steps, and workouts for local insights, and can write supported state-of-mind samples where available. If you turn on Cycle Insights, Tendi also requests access to menstrual-flow records for local insights.

HealthKit access is optional and controlled by iOS. HealthKit data is processed on device. Tendi does not send HealthKit samples to Tendi servers or analytics providers.

Photos, voice notes, and imports

Photos, voice notes, and imported journal data are stored locally in your device's protected app storage. If iCloud sync is enabled, this content may sync with Apple's servers through your personal iCloud account. Tendi does not upload this content to Tendi servers.

Optional analytics

Tendi uses TelemetryDeck for optional app analytics. Analytics are off by default. If you enable them, Tendi may send categorical product-interaction events and an anonymized device or app identifier so we can understand which app areas are used and whether errors occur.

Analytics events do not include journal text, mood notes, photos, voice recordings, HealthKit samples, email addresses, precise location, or advertising identifiers. Analytics are not used for tracking or advertising.

This website

The Tendi website does not include client-side analytics scripts. Cloudflare may process limited operational data for hosting, security, caching, and abuse prevention.

If you join the launch-updates list, your email address is sent to Buttondown so we can email you about Tendi's launch. We use that address for launch updates only. You can unsubscribe from those emails at any time, and we will keep the address only while the list is needed or until you unsubscribe.

If you contact us by email, we receive your email address and any information you choose to include. Please do not include sensitive journal content unless you want us to see it.

Third-party services

Tendi currently uses Apple platform services, including iCloud/CloudKit and HealthKit where you enable them, and TelemetryDeck for optional app analytics. The website is hosted through GitHub Pages with Cloudflare in front of tendijournal.app. Buttondown processes email addresses submitted through the website launch-updates form.

Journal content is never sent to Buttondown and is not part of the launch-updates list.

We do not share Tendi journal content with advertising networks or data brokers.

Your choices

• Use Tendi without an account.
• Keep analytics disabled, or disable analytics later in Settings.
• Turn iCloud sync off in Settings.
• Manage HealthKit permissions in iOS Settings.
• Export your data from Tendi.
• Delete Tendi data from your device by deleting entries or deleting the app.
• Ask us to delete support-email records by contacting us.

Who we are

Tendi is built by Two Desks. Contact us at [email protected].

Changes to this policy

If we change this policy, we will update the date at the top of this page.