Privacy policy

Tandy Messenger (web and store apps) · updated 2026-10-23

This explains what Tandy Messenger keeps, on the web and in the Google Play and App Store apps, what leaves your device and where it goes. This version is a preview: you sign in with a Google or Apple account, and only the account id, your age range, usage statistics, notifications, and what you send Tandy if you agreed reach our server, as described below.

Who we are

Tandamn, being registered as a company in Israel. Contact: tandamn.app@gmail.com.

What is kept, and where

• Only on your device: your chat with Tandy, photos you add, the name and picture you chose, and your settings, in this browser's storage.
• Your account, on our server (Cloudflare): the account id Google or Apple gives us, the account's email address, and the age range you picked (13 to 15, 16 to 17, or 18 and older). The email is seen only by the Tandamn team, to know who is asking to join and to reach you about your account; it is never shown to other people in the app or shared, and it is deleted with your account. Not the name or picture of the account.
• The Tandems you made, on our server: a copy of each Tandem you built is kept in your private folder, readable only by your account, so it waits for you when you sign in on another phone or in the store app.
• An offline copy of the app: the app's own files are saved so it opens without internet. They hold nothing about you.
• Usage statistics: the app records events (such as "screen opened", "button tapped"), never the content of messages. They are sent to our server (Cloudflare) with a random id for the device, never a name, phone number or content, kept for at most 13 months, and used only to improve the app.

Apart from what is listed here as kept on our server, we hold no copy of your data: your chat with Tandy, photos and settings cannot be recovered if the device is lost or its storage is cleared.

Tandy and AI

Tandy is an AI helper, not a person. He answers with Claude, the AI service of Anthropic, and only after you agree on the screen shown before the first time. Without your consent he runs on built-in rules on your device and nothing is sent.

• What is sent: what you write to Tandy or ask him for, and so he understands the context, your recent messages and the names in the chat where you asked (other people's messages are not sent, since they didn't agree); for building a Tandem, also the ideas gathered for it.
• Where: through our server to Anthropic. Our server does not keep the content, only how many requests were sent. Under Anthropic's terms for business customers, it does not use this to train its models.
• Stopping: any time in Settings → About → "Tandy AI". From then on nothing is sent.

What leaves your device

• Private chats and groups: messages, photos and recordings are locked on your phone (end-to-end encryption) before they pass through our server, so we can't read them either. The server keeps the locked copies, your public key, account ids and the name you chose to show in chats. Someone writing to you for the first time arrives as a request you can accept, block or report.
• A Tandem you shared by link: only when you tap "Make a link for this Tandem", the Tandem itself (its name, description and page) is kept on our server so anyone with the link can open it. Not the chat, nor what was saved in it. You can take it down any time from "Every Tandem in the app" in Settings.
• Notifications: only if you turn them on, your phone's push address (from Google, Apple or the browser) is kept on our server. A notification says only that something new is waiting, with no content or names.
• Open-Meteo: only when a Tandem asks for the weather, the place name goes to the free Open-Meteo weather service.
• Calendar and sharing: only when you tap "Add to calendar" or Share, Google Calendar, Outlook, WhatsApp or your phone's share sheet opens with the details you chose to share.

We don't sell data, show ads or use tracking cookies.

Permissions

Camera, microphone, location and notifications are asked for only when you use a feature that needs them; you can refuse or turn them off in your browser or phone settings.

Deleting

To delete your account: Settings → About → "Delete my account". The account, age range, name, your Tandems (including those you shared by link) and the locked copies of your chats are removed from our server at once.

To delete everything: Settings → About → "About the app" → Reset, or clear this site's data in your browser, or remove the app from your home screen (on iPhone, also clear the site's data in Safari).

Age

Tandy Messenger is for people 13 and older and is not directed at children. How we keep teens safe: child and teen safety.

Changes

When a server, accounts or an outside AI are added, this policy will be updated before the change takes effect, and the date above will change.