Privacy Policy
Effective date: [EFFECTIVE DATE]
Tandem connects your smartwatch and your phone, even across Apple and Android. We built it so your messages and health data travel only between your own devices, encrypted end to end. This policy explains what we collect, why, and the choices you have.
1. Who we are
Tandem is provided by [COMPANY LEGAL NAME], [REGISTERED ADDRESS], company number [COMPANY NUMBER] (“we”, “us”). We are the data controller (“data fiduciary” under Indian law) for the limited personal data described here.
- Privacy contact: [PRIVACY EMAIL]
- Data Protection Officer: [DPO NAME AND EMAIL]
- EU representative: [EU REPRESENTATIVE] · UK representative: [UK REPRESENTATIVE]
- India Grievance Officer: [INDIA GRIEVANCE OFFICER]
2. The short version
- Notification content, message replies and health data stay on your devices. Our servers only relay encrypted data they cannot read.
- We do not sell or rent personal data, and we never use health data for advertising.
- We use a small amount of account and device data to pair your devices, deliver alerts when they are apart, and manage your subscription.
- You can download or delete everything from Settings › Privacy and data at any time.
3. What we collect and why
| Data | Examples | Why we use it | Legal basis (EU/UK) | Kept for |
|---|---|---|---|---|
| Device and pairing data | Device type, model, OS and app version, random device ID, public encryption keys | Pair your watch and phone, keep the connection working | Contract | Until you unpair or delete your account |
| Push tokens | Apple or Google push token, stored encrypted | Wake your watch or phone when they are apart | Contract | Until replaced or deleted |
| Encrypted relay messages | Notifications, replies, status updates in encrypted form | Deliver them when your devices are not near each other | Contract | Up to 24 hours, then deleted |
| Subscription status | Plan, renewal date, store transaction ID (no card details) | Unlock paid features | Contract | While subscribed, then as tax law requires |
| Support requests | Email, message, optional diagnostics you attach | Answer you | Contract / legitimate interest | 2 years |
| Diagnostics (optional) | Crash reports, performance data, feature usage counts — never message or health content | Fix bugs, improve reliability | Consent | 13 months |
| Security logs | Hashed IP address, time, event type | Protect accounts and investigate abuse | Legitimate interest | 1 year |
Data that stays on your devices and that we never receive in readable form: notification and message content, contacts, calendar, location, photos from the camera remote, and all health and fitness data (see our Consumer Health Data Privacy Policy).
4. Permissions the apps ask for
Each permission is optional unless a feature needs it, and each is explained on screen before you choose. Examples: Bluetooth / Nearby devices (connect watch and phone), Notification access (show your phone’s alerts on the watch), Health / Health Connect (sync health data), Contacts (caller names), Calendar (next event), Location (find my watch, weather), Phone (answer or decline calls from the watch), Camera (camera remote). You can turn any of them off in your phone’s settings.
5. Sharing
We share personal data only with:
- Service providers that host our servers and send push messages (for example cloud hosting, Apple Push Notification service, Firebase Cloud Messaging, crash reporting). They act on our instructions under written contracts. Push providers only see encrypted content.
- Apple and Google for in-app purchases, under their own privacy policies.
- Authorities when the law requires it, and only what is required.
- A buyer of our business, who must honour this policy.
We do not sell personal data or share it for cross-context behavioural advertising.
6. International transfers
We store data in the region nearest you (European Union for EU, UK and nearby users; India for Indian and nearby users). When data must move between countries, we use legally recognised safeguards such as the EU Standard Contractual Clauses.
7. Security
End-to-end encryption between your devices, keys kept in your device’s secure hardware, encryption in transit and at rest on our servers, least-privilege access, regular security testing. If a breach affects your data, we will tell the relevant regulator within 72 hours and you without undue delay.
8. Your rights
Depending on where you live you may: access, correct, delete or export your data; object to or restrict processing; withdraw consent at any time (as easily as you gave it); nominate someone to exercise your rights (India); opt out of sale, sharing and targeted advertising (US states — we do none of these); and not be discriminated against for using your rights.
Use Settings › Privacy and data in the app, or email [PRIVACY EMAIL]. We reply within 30 days. You can also complain to your data protection authority (for example your EU supervisory authority, the UK ICO, or the Data Protection Board of India).
9. Children
Tandem is not for people under 16. We do not knowingly collect data from them. If you believe a child has used Tandem, contact us and we will delete the data.
10. Changes
We will tell you in the app before material changes take effect. The effective date at the top shows the latest version.
11. Contact
[COMPANY LEGAL NAME], [REGISTERED ADDRESS] · [PRIVACY EMAIL]