Privacy
Two people, one private space.
The most important things in your life deserve the strongest protection we can give them. Here is exactly how your data is kept, in plain language.
The short version
Tandem is a private space for exactly two people. Nothing you write, rate, or photograph is ever public, ever searchable, and ever visible to anyone outside your pair.
What we store
Your account: your email address and the name you give us.
Your check-ins: your daily ratings, notes, gratitude, memorable moments, and photos.
Your space: the questions you and your partner agree on, your goals, and your shared calendar of memories.
Who can see it
Only you and your partner. Every piece of data is locked behind sign-in, and the database itself refuses any request that isn't from one of the two of you — this is enforced by the database, not just hidden in the app.
Even between the two of you, daily ratings stay private until you've both completed a full week of check-ins. Gratitude and memories are shared from day one.
Photos live in private storage. There is no public link, no gallery, no way to reach them without being signed in as one of you.
What we never do
We never sell your data. We never show you advertising. We never share your words or photos with third parties.
Your ratings are never used to profile you, target you, or train anything outside your own space.
Community benchmarks
Sharing is opt-in and off by default. Only people who switch it on have their numbers pooled anonymously — never names, words or photos — and only they can see the comparisons. A benchmark only appears once at least 25 people have contributed, so no individual can ever be identified from it. You can stop sharing at any time.
Your day, kept as it was
When a day closes at midnight, its ratings are locked by the database and cannot be changed — not by you, not by us. Your words and photos stay editable, but the record of how the day felt is kept honest.
Your account, protected
Passwords are stored encrypted and are never visible to anyone, including us.
When you choose a password, we check it against a database of passwords known to have been leaked in breaches, and ask you to pick another if it appears. The check never reveals your password.
If you ever forget your password, only the link sent to your own email can reset it.
Leaving
Your space belongs to the two of you. If you ever want your data removed, write to us and we will delete it.