Privacy Policy
Effective date: May 29, 2026 Last updated: May 29, 2026
This Privacy Policy explains what information Tendlist ("Tendlist", "we", "us") collects, why we collect it, and what choices you have. We've tried to keep it short and readable. If anything is unclear, email us at the address in the Contact section.
The short version
- Tendlist is a personal app for tracking habits, tasks, movement, to-dos, and (optionally) your menstrual cycle. To do that, it stores the things you type into it.
- We do not sell your data, show ads, or use third-party advertising or analytics trackers.
- Your data is stored with our hosting providers (Supabase and Vercel) and is only accessible to your own account.
- If you turn on the daily Coach, a limited summary of your activity is sent to an AI provider to generate that day's message. Your email and name are not sent.
- You can view, change, or delete your data at any time, and you can request an export of it.
What we collect
We only collect information you give us or that the app needs to function. We do not buy data about you, and we do not track you across other websites.
1. Account information
- Email address — used to sign you in and to contact you about your account (for example, password resets).
- Password — handled by our authentication provider (Supabase). It is stored as a salted hash. We never see or store your password in readable form.
- Display name — optional, if you choose to enter one.
2. Content you create
Everything you enter to use the app, including:
- Recurring tasks, daily habits, movement/exercise items, and to-dos (their names and schedules).
- Your completion history — which items you checked off, and on which dates.
- Coach inputs — your "current focus" and "long-term goals", if you fill them in.
3. Cycle and health-related information (optional)
If you use the Cycle feature, we store the information you enter:
- The start date of your last period.
- Your typical cycle length, period length, and cycle variability.
This is sensitive health-related information. We treat it as private to your account, we use it only to show you cycle phase information and predictions inside the app, and we apply the same security and access controls as the rest of your data. You are never required to use the Cycle feature, and you can clear this information at any time.
4. Device and technical information
- Time zone — so the app shows the right "today" and so the daily Coach message arrives near 6 a.m. your local time.
- Push notification subscription — notifications are only delivered after you grant your browser's permission and turn them on. When you do, your browser gives us a push "endpoint" and keys for your device so we can deliver them. You can turn this off at any time, which removes the subscription.
- Session cookies — set by our authentication provider to keep you signed in. These are essential to the app working; they are not used for advertising or cross-site tracking.
- Local storage — we store small preferences in your browser, such as whether you've dismissed the notification prompt. This stays on your device.
We do not currently use third-party analytics, advertising, or marketing tracking tools. If that changes, we'll update this policy first.
How we use your information
We use your information only to operate the app for you:
| Purpose | What it covers |
|---|---|
| Provide the app | Store and display your tasks, habits, movement, to-dos, completions, and cycle information. |
| Authenticate you | Sign you in, keep you signed in, and let you reset your password. |
| Generate your daily Coach message | If the Coach is enabled, create a short personalized message (see AI processing below). |
| Send notifications | If you enable them, deliver your daily Coach message as a push notification. |
| Keep the service running | Operate the app and investigate problems when they're reported. |
| Communicate with you | Send account-related messages (for example, password resets). |
We do not use your information to advertise to you, and we do not sell or rent it to anyone.
AI processing
If you turn the Coach on (it is on by default, but you can turn it off in Settings → Coaching), once per day the app builds a short summary of your recent activity and sends it to an AI model through the Vercel AI Gateway to generate that day's message. The model used is Anthropic's Claude.
What is sent to the AI:
- The current day of the week and date, and whether it's your rest day.
- Your current cycle phase and cycle day (if you use the Cycle feature).
- The names of your habits, tasks, and movements, and a summary of which you completed over the past 7 days.
- Your "current focus" and "long-term goals" text, if you've entered them.
- The text of your few most recent Coach messages, so the new one stays consistent.
What is not sent to the AI: your email address, your name, or your password.
The AI provider processes this information only to generate and return the message, under the terms of our agreement with it. The generated message is stored in your account so it can be shown to you.
If you turn the Coach off, no activity is sent for AI generation.
How your information is shared
We share information only with the service providers ("sub-processors") that run the app on our behalf, and only as needed to provide the service:
| Provider | What it does | What it handles |
|---|---|---|
| Supabase | Database and authentication | Your account, content, and cycle information. |
| Vercel | App hosting and the AI Gateway | Serves the app; routes Coach requests to the AI model. |
| Anthropic (via Vercel AI Gateway) | AI model | The activity summary described in AI processing. |
| Web push services (Apple, Google, Mozilla) | Notification delivery | The push message and your device's push endpoint, if notifications are on. |
| GitHub Actions | Scheduled job that triggers daily Coach generation | Triggers the job; does not receive your content. |
These providers are bound by their own agreements and privacy terms. We may also disclose information if required by law, to enforce our terms, or to protect the rights and safety of our users — and we'll limit any such disclosure to what is necessary.
Your data may be stored or processed on servers located outside your country. Where that happens, we rely on our providers' safeguards for international data transfers.
How long we keep your information
- We keep your account information and content for as long as your account is active.
- Completion history is retained so you can see your own history.
- If you delete your account, your data — including your content, cycle information, Coach messages, and push subscriptions — is deleted. Backups held by our providers may persist for a short period before they expire.
Your choices and rights
- Access and edit — you can view and change your content, settings, and cycle information directly in the app at any time.
- Export — you can request a copy of your data by emailing us.
- Delete — you can delete individual items in the app, or request deletion of your whole account by emailing us.
- Notifications — turn push notifications on or off in Settings → Account.
- Coach / AI — turn the daily Coach (and the AI processing it relies on) on or off in Settings → Coaching.
Depending on where you live, you may have additional rights — such as the right to access, correct, delete, or port your data, or to object to certain processing. To exercise any of these, contact us and we'll respond within the time required by applicable law. We won't discriminate against you for exercising your rights.
Security
We rely on our providers' industry-standard security, and the app restricts every record to its owning account (so one user can never read another user's data). Passwords are stored only as salted hashes. No system is perfectly secure, but we take reasonable steps to protect your information.
Children
Tendlist is not directed to children. You must be at least 13 years old to use it. We do not knowingly collect information from children under 13. If you believe a child has provided us information, contact us and we'll delete it.
Changes to this policy
We may update this policy from time to time. If we make a material change, we'll update the "Last updated" date above and, where appropriate, let you know in the app. Continuing to use Tendlist after a change means you accept the updated policy.
Contact us
Questions, requests, or concerns about your privacy? Email us at tendlistapp@gmail.com.
Tendlist is operated by Kate McGee, who is responsible for your information under this policy.