The short version
- Tend records health information about a person who is usually not the account holder. That makes her the most important person in this policy, not you.
- She can see everything recorded about her, correct it, delete any part of it, and revoke access at any time, without needing an account and without telling you.
- We never sell data, never use cycle, symptom, mood or relationship data for advertising, and never send it to general-purpose analytics tools.
- You can export everything or delete the account outright. Those controls are free on every plan, permanently.
- If she withdraws consent, we stop processing her data and delete it.
1. Who we are
Tend is operated by [Company name] ([company number]), registered at [registered address], United Kingdom. We are the data controller for personal data processed through the Tend app and this website. You can reach our privacy contact at privacy@tendtoher.com.
If you are in the UK or the EEA and you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, or to your local supervisory authority.
2. The unusual thing about Tend
Most apps process data about the person using them. Tend does something different: the account holder records information about his partner's menstrual cycle, symptoms and mood. That information is health data about her, and in UK and EU data protection law it belongs to a special category with additional protections.
We have designed the product around that fact rather than around it. Setup will not continue until the account holder confirms that she knows about the app. She is then given her own access link, and every right in this policy is available to her directly.
If she has not agreed to this, the app should not be used. Recording health information about an adult who has not consented is not something we can make lawful with a checkbox.
3. What we collect
Information you give us about her
- A first name or nickname for your partner
- Period start and end dates, typical cycle and period length, and cycle regularity
- Whether she uses hormonal contraception, and broadly which type
- Optional check-ins: mood, energy, physical symptoms, connection, social preference, and free-text notes
- Whether a support suggestion was marked helpful, neutral or unhelpful
Information she gives us
- What she selects on her access link, such as what would help on a given day
- Any corrections or deletions she makes
Account and technical information
- Your email address and authentication details
- Subscription status and purchase history from Apple or Google. We never see or store your card details.
- Device type, operating system version, app version, crash reports, and anonymous screen-view events
Technical analytics never carry cycle, symptom, mood, intimacy or note content. Crash reports are scrubbed of user content before they leave the device.
4. Why we process it, and our lawful basis
| What | Why | Lawful basis |
|---|---|---|
| Her cycle, symptom and mood data | To produce estimates, patterns and support suggestions | Her explicit consent (UK GDPR Art. 9(2)(a)), with the underlying processing under Art. 6(1)(a) |
| Your account and subscription | To provide the service you have paid for | Performance of a contract (Art. 6(1)(b)) |
| Crash and performance data | To keep the app working | Legitimate interests (Art. 6(1)(f)) |
| Records of consent and deletion requests | To show we complied | Legal obligation (Art. 6(1)(c)) |
Consent is the basis for the sensitive data, which means it can be withdrawn at any time. Withdrawal does not affect processing that already took place, but it stops all further processing and triggers deletion.
5. Her rights, and how to use them
The person whose cycle is recorded has the full set of data subject rights, and she does not need an account to use them. Her access link lets her:
- See everything recorded about her, including private notes if that has been shared
- Correct anything that is wrong
- Delete individual entries or all of her data
- Withdraw consent and revoke the account holder's access entirely, at any time, without notice to him
- Object to processing, or ask for a copy of her data in a portable format
She can also contact us directly at privacy@tendtoher.com and we will act on her request whether or not the account holder agrees. We will not tell him she has contacted us unless we are legally required to.
6. Your rights as the account holder
You have the same rights over your own personal data: access, correction, deletion, portability, restriction, and objection. Export and account deletion are built into the app and are free on every plan. Deleting the account deletes her data with it.
7. Who we share it with
We do not sell personal data. We do not share it with advertisers, data brokers, insurers, employers or social networks. We do not use it to build advertising profiles, and we do not allow it to be used for that by anyone else.
We use a small number of processors to run the service:
- Cloud hosting and encrypted database storage
- Crash reporting, on content-free data only
- Apple and Google, who handle payment and subscription status
- Email delivery for account and billing messages
Each is bound by a data processing agreement and may only act on our instructions. A current list of processors is available on request.
We may disclose data if we are legally required to. If we receive a request for a specific individual's data, we will tell the people affected unless the law prevents us.
8. How long we keep it
- Cycle, symptom and mood data: for as long as the account is active, then deleted within 30 days of account deletion or withdrawal of her consent
- Individual entries you delete: removed immediately, purged from backups within 30 days
- Account and billing records: 6 years, where tax law requires it
- Crash and analytics data: 90 days
9. Security
Sensitive entries are encrypted in transit and at rest. Access within our team is limited to the people who need it and is logged. Her access link uses an unguessable token, expires if unused, and can be regenerated or revoked. We run regular reviews of our security controls.
No system is perfectly secure. If a breach affects your data, we will notify the ICO within 72 hours where required and tell affected people directly where the risk is high.
10. International transfers
Our infrastructure is hosted in the UK and the EEA. Where a processor operates outside that area, transfers are covered by UK International Data Transfer Agreements, EU Standard Contractual Clauses, or an adequacy decision.
11. Children
Tend is for adults. You must be 18 or over to use it, and it must not be used to record information about anyone under 18. If we learn that we hold data about a minor, we delete it.
12. Changes to this policy
If we make a material change we will tell you in the app before it takes effect, and we will not apply a new purpose to existing sensitive data without asking for consent again.