TANDEM

Privacy Policy

Last updated: July 2026

1. Introduction

Welcome to Tandem ("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our fitness tracking platform at tandemcoaching.app.

By using Tandem, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our platform.

2. Who We Are

Tandem is an AI-powered fitness tracking platform operated by an individual developer based in the United States. For privacy-related inquiries, contact us at hello@tandemcoaching.app.

3. Information We Collect

Information you provide directly:

  • Name and email address (via Google login)
  • Fitness and health data you choose to log, including body weight, body fat percentage, nutrition and macronutrient intake, workout activity, step count, and personal notes
  • Optional profile information such as gender and fitness goals

Information collected automatically:

  • Usage and analytics data via Vercel Analytics (page views, session data, device type)
  • Authentication tokens and session data necessary to keep you logged in
  • Cookies and similar tracking technologies (see our Cookie Policy)

4. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Tandem platform
  • Analyze your logged fitness data using AI to generate personalized insights and recommendations
  • Process payments and manage your subscription (via Stripe)
  • Respond to your inquiries and provide customer support
  • Improve and develop new features based on usage patterns
  • Comply with legal obligations

5. AI Processing of Your Data

Tandem's core feature is AI-powered analysis of your fitness data. Your logged data is processed by an AI system (powered by Anthropic's Claude API) to generate personalized insights, identify trends, and provide recommendations. This processing happens automatically based on the data you log.

We do not use your personal data to train AI models. Your data is used solely to generate insights for you personally.

6. How We Share Your Information

We do not sell your personal information. We share your data only with the following trusted third-party service providers, solely to operate the platform:

  • Supabase — database storage and authentication infrastructure
  • Vercel — website hosting and analytics
  • Anthropic — AI processing (Claude API) for generating fitness insights
  • Stripe — payment processing (they never share your card details with us)
  • Google — authentication via Google OAuth

Each of these providers has their own privacy policy governing how they handle your data.

7. Health and Fitness Data

The fitness and health data you log in Tandem (weight, body fat, nutrition, workouts, notes) is sensitive personal information. We treat it with the highest level of care:

Your health data is private to you and never shared with other users.

Your health data is never sold or shared with advertisers.

Your health data is used solely to provide you with AI-generated insights within the platform.

Coach users may view client data only for clients who have explicitly connected with them.

8. Data Retention

We retain your personal data for as long as your account remains active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

Analytics data collected via Vercel Analytics is retained for up to 30 days.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right to access — request a copy of the data we hold about you
  • Right to correction — request that we correct inaccurate data
  • Right to deletion — request that we delete your personal data
  • Right to data portability — request your data in a portable format
  • Right to object — object to certain types of processing

To exercise any of these rights, contact us at hello@tandemcoaching.app or submit a request through our privacy request form.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information.

To submit a California privacy request, contact us at hello@tandemcoaching.app.

11. International Users and GDPR

If you are located in the European Union or United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including the rights listed in Section 9 above. Our lawful basis for processing your data is your consent, given when you create an account and agree to this policy.

For health data specifically, we rely on your explicit consent as our lawful basis for processing.

To exercise your GDPR rights, contact us at hello@tandemcoaching.app.

12. Cookies and Tracking Technologies

What are cookies?

Cookies are small text files stored on your device when you visit a website. They help the site remember information about your visit and improve your experience.

How Tandem uses cookies:

Strictly necessary cookies:

These cookies are essential for Tandem to function and cannot be disabled. They include:

  • Authentication tokens that keep you logged in via Google OAuth
  • Session cookies that maintain your user session while you use the app

Analytics cookies:

We use Vercel Analytics to understand how users interact with Tandem. This helps us improve the platform. Vercel Analytics is privacy-friendly and does not track you across other websites or build advertising profiles. Data collected includes page views, session duration, and device type. Analytics data is retained for up to 30 days.

Third-party cookies:

Our third-party service providers may set their own cookies:

  • Google — authentication cookies via Google OAuth
  • Vercel — analytics cookies
  • Stripe — payment processing cookies (when you make a purchase)

Managing your cookies:

You can control or delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using Tandem. For more information on managing cookies, visit www.allaboutcookies.org.

Cookie consent:

When you first visit Tandem, you will be asked to acknowledge our use of cookies. By continuing to use the platform, you consent to our use of cookies as described in this policy.

Global Privacy Control (GPC):

Tandem does not currently support Global Privacy Control signals.

13. Children's Privacy

Tandem is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use our platform. If we become aware that we have collected data from someone under 18, we will delete it promptly.

14. Security

We take reasonable measures to protect your personal information, including:

  • HTTPS encryption for all data in transit
  • Secure database storage via Supabase with row-level security
  • Authentication managed through Google OAuth
  • Payment data handled exclusively by Stripe, which is PCI-DSS compliant

No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

15. Third-Party Links

Tandem may contain links to third-party websites, including affiliate links. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this policy. Continued use of Tandem after changes constitutes your acceptance of the updated policy.

17. Contact Us

For any privacy-related questions, requests, or concerns, please contact us at:

Email: hello@tandemcoaching.app