Privacy Policy

Effective date: August 31, 2026
Version: 2.1

Tendle is an app made and operated by Inner Dialogue LLC (“Inner Dialogue,” “we,” “us,” or “our”). This policy explains what information we collect when you use the Tendle app or our website at tendleapp.com (including the waitlist), how we use it, who we share it with, and the choices you have.

Tendle is a space for your personal thoughts. We wrote this policy to be read, not skimmed past. If you’re going to trust us with what’s on your mind, you deserve to know exactly what happens to it.

Privacy at a glance

We never sell your data, and your personal data is never used for advertising. There are no ad networks, ad trackers, or data brokers anywhere in Tendle. When we advertise Tendle on other platforms, we measure it only through Apple’s anonymous attribution technology, which shares nothing about you (see Section 7).
Your thoughts are never used to train AI models. Not by us, and we don’t permit our AI providers to train on them either. We do review AI responses for quality and safety, always detached from your identity.
AI processing is how Tendle works. The thoughts you share are processed by our AI service provider (Anthropic) to create your ritual. They are sent without your name, email, or any account identifier attached.
We keep a record of your rituals, including the thought you shared, securely stored with your account, until you delete your account.
Our analytics never contain what you write. We track things like “a ritual was completed,” never the content of it.
You can delete your account, and everything with it, directly in the app.
Tendle is not therapy and is not a substitute for professional care. If you’re in crisis, please reach out to the resources in the “Tendle is not therapy” section below.

1. Information you share with us

Account information. Signing in with Apple or Google is required to use Tendle. Depending on the provider you choose and your settings, we receive your name and email address (with Sign in with Apple, you can use Apple’s private relay so we never see your real email). We use your first name to greet you and your email to identify your account and respond to your requests.

Your thoughts. The heart of Tendle is the ritual: you share a difficult thought, by typing or speaking, and may add a short clarification. This is deeply personal content, and we treat it with the highest level of care (see Section 3).

Your library. The affirmation cards you keep, the collections you create and name, and your favorites. Collection names are written by you, so they can be personal too (like “Grief” or “Work stress”) and we treat them with care.

Your focus areas. During onboarding you select goals, the patterns you’d like to work on, and your prior experience with affirmations, all from fixed lists of options. We store which options you selected so Tendle can be more relevant to you.

Why you left, if you choose to tell us. When you delete your account we ask an optional question about why you’re leaving, and for some answers you can add a short note in your own words. We keep what you say so we can make Tendle better, stored on its own with nothing that links it to you, your account, or anything else in this policy. It is never sent to our analytics provider.

2. Information created and collected automatically

Your ritual record. When you complete a ritual, we securely store a record of it with your account: the thought you shared, your clarification, the AI’s reflection, the release line, affirmation, and card title it created, related processing notes, and whether the session was routed to support resources (see Section 3). To be clear, this record remains after your ritual ends. It is stored securely, accessible only under strict controls, and deleted when you delete your account. We keep it to run the service reliably, to support the safety features described in Section 3, and to review how the AI responds so we can hold it to our quality and safety standards. When we review AI responses, we work with the record detached from your identity: we are checking what the AI said, not who you are.

Practice activity. When you complete rituals (timestamps and your device’s timezone), so we can show your streaks and forest.

Usage and device information. We collect content-free app events (for example, “ritual started” or “subscription purchased”) along with basic device context such as your device model and OS version. We also collect simple measures of your practice, such as how many rituals you’ve completed and whether reminders are on, along with technical diagnostics about how the app behaves, such as crashes and freezes. None of this includes anything you write or say. You can turn this off at any time; see Section 9.

Subscription information. Your subscription status and plan, processed through Apple and our subscription manager (RevenueCat), which uses an Apple device identifier (IDFV) to manage purchases reliably. We never see your payment card details since Apple handles all payment.

IP address. Like any internet service, our servers see your IP address when the app connects. We use it only to protect the service from abuse, and we keep it for no more than 24 hours.

What we deliberately don’t collect: your location, contacts, photos, calendar, browsing history, or Apple Health data. We don’t use the advertising identifier (IDFA), and we never show the app-tracking prompt because we don’t track you across other apps or websites.

3. Your thoughts are sensitive, and we treat them that way

What you share in Tendle can reveal things about your emotional and mental wellbeing. Even though Tendle doesn’t connect to Apple Health or collect medical records, we treat the thoughts you share, and anything derived from them, as sensitive, health-revealing information. That means:

It is processed only to provide Tendle to you, keep the service safe, check the quality and safety of the AI’s responses, and meet legal obligations, always with your consent, which you can withdraw at any time by deleting your account.
It is never used for advertising or marketing, never sold, and never used to train AI models.
It is never included in analytics.
Access within Inner Dialogue is restricted to what’s strictly necessary, such as fulfilling a data request you make, investigating abuse, or responding to a safety or legal issue.

Safety routing. If something you share suggests you may be in crisis or facing a medical or safety emergency, Tendle pauses the ritual and shows support resources instead. Your ritual record notes when this happened, so we can make sure this safety feature works well. These safety notes are held to the same protections as everything else in this section.

4. How we use your information

We use your information to: provide the ritual experience and your library; keep your account and progress in sync; operate your subscription and free sessions; keep Tendle safe and prevent abuse and fraud; understand overall usage so we can improve the app (using content-free analytics only); review the AI’s responses, with your identity detached, to make sure they meet our quality and safety standards; provide support when you contact us; and comply with law.

We do not use your information for targeted advertising, we do not sell it or share it for advertising purposes, and we do not use the content you share to train AI models.

5. How AI processing works

When you go through a ritual, the words you share are sent securely to our servers and then to our AI service provider, Anthropic, which generates the reflection and your ritual script. Here’s what that means in practice:

Anthropic receives the text of your ritual conversation. It never receives your name, email, account ID, or IP address.
Anthropic does not use data sent through its service to train its AI models, and we have a data processing agreement with them.
Anthropic retains API data only temporarily under its standard commercial terms before it is deleted from their systems.

When you play an affirmation aloud, the text of that affirmation is sent to our voice provider, ElevenLabs, to generate the audio. Only the affirmation is sent, never your original thought and never any identifier. ElevenLabs does not train on this content, and we have a data processing agreement with them.

As technology evolves, some AI processing may happen directly on your device rather than through a provider. Either way, your ritual records are handled exactly as described in this policy.

6. Voice and dictation

If you speak your thought instead of typing it, transcription normally happens entirely on your device. Your voice never leaves it, no audio recording is kept, and only the transcribed text is used. On a small number of devices and languages where on-device transcription isn’t available, Apple’s speech recognition servers process the audio under Apple’s privacy terms. When you finish speaking and pause, your transcribed thought is submitted to begin the ritual.

7. Who we share information with

We share information only with the service providers below, each of which is contractually required to protect your data with the same or equal protection as described in this policy, and only to provide their service to us:

Anthropic: AI processing that creates your ritual.
- What they receive: The text of your ritual conversation, with no identifiers.
ElevenLabs: Voice audio for spoken affirmations.
- What they receive: Affirmation text only, never your thought, with no identifiers.
Supabase: Secure hosting and databases for your account and data.
- What they receive: The stored data described in this policy.
RevenueCat: Subscription management.
- What they receive: Account ID, purchase status, Apple device identifier (IDFV).
PostHog: Product analytics.
- What they receive: Content-free app events, usage counts and settings, device context, and app stability diagnostics.
Apple: Sign in, payments, and (conditionally) dictation.
- What they receive: Per Apple’s own terms.
Google: Sign in with Google.
- What they receive: Your Google sign-in; Google provides us your name and email.

We may also disclose information if required by law (such as a valid legal request), to protect the safety of a person, or as part of a business transition such as a merger or acquisition, in which case this policy would continue to apply to your data.

We never share your personal data with advertising networks, attribution companies, or data brokers.

How we advertise. Like most apps, we run ads on other platforms so people can find Tendle. To know whether those ads work, we rely on Apple’s privacy-preserving attribution technology (AdAttributionKit / SKAdNetwork): when an ad leads someone to install Tendle, Apple’s operating system (not Tendle) sends the ad platform an anonymous, aggregated signal, which may include a coarse indication such as whether a subscription began. It contains no name, no email, no device identifier, and nothing about what anyone does in Tendle. No personal data ever leaves our systems for advertising.

8. How long we keep things, and how deletion works

Ritual records, saved cards, collections, and account data: kept until you delete your account.
Deleted cards: disappear from your library right away; the underlying record is fully erased when you delete your account.
IP addresses: no more than 24 hours.
Affirmation audio: the spoken version of an affirmation is cleared from our storage within 14 days of no longer being needed by any account.
Aggregate statistics: we keep content-free, aggregated usage statistics (like daily totals) to run the service.
Why you left: kept without a time limit, so we can learn from it. It carries no link to you or your account.

Deleting your account. You can delete your account any time in the app (Settings → Account). This permanently deletes your account and all data associated with it from our systems: your ritual records, library, progress, and profile. It also clears the copy held on your phone: your saved affirmations, your collections, your forest, and any affirmation audio stored on the device are removed as part of deleting your account. A few honest caveats:

To prevent abuse of free sessions, we keep a coded record that a free trial was used with your Apple purchase. It cannot identify you and contains none of your content.
Copies held briefly by our AI and voice providers age out under their standard retention schedules described above.
If you told us why you were leaving, we keep that answer as described in Section 1, with nothing linking it to you.
Your app preferences (things like appearance, sound, and reminder settings) stay on your phone until you delete the app.

Signing out. Signing out clears the same on-device copy that deletion does: your library, your collections, your forest, and stored affirmation audio are removed from the phone. Nothing is lost, because your practice lives with your account and comes back when you sign in again. This is deliberate, so that signing out on a shared or borrowed phone doesn’t leave your affirmations behind on it.

9. Your rights and choices

Wherever you live, we extend the same core rights to you:

Access / export: ask us for a copy of the data we hold about you.
Correction: ask us to fix inaccurate information.
Deletion: delete your account in-app, or ask us and we’ll do it.
Withdraw consent: stop using the ritual feature at any time, or delete your account to withdraw consent entirely.
Turn off analytics: stop sharing the usage and diagnostic information described in Section 2 at any time, in Settings under Privacy and data. Tendle keeps working exactly the same way.
Portability: receive your data in a usable format.

To exercise any of these, email privacy@tendleapp.com or use the in-app options. We’ll respond within the timeframe required by your local law (typically 30 to 45 days) and will verify your identity through your account email. You can use an authorized agent where your local law provides for one. If we decline a request, you may appeal by replying to our decision, and we’ll have someone different review it. We will never treat you differently for exercising your privacy rights.

We honor “Do Not Track” in the simplest way possible: the app contains no cross-site or cross-app tracking to opt out of.

10. California residents

The California Consumer Privacy Act (CCPA/CPRA) gives you specific rights, all of which are covered in Section 9: to know, access, correct, delete, and port your data, and to opt out of sale or sharing.

In the last 12 months we have collected these categories of personal information: identifiers (name, email, account and device IDs); sensitive personal information (the thoughts and related content described in Sections 1 through 3, which reveal information about mental health); audio/electronic information (transient dictation, if used); commercial information (subscription history); internet activity (content-free app usage); and inferences generated to provide the service (the AI’s ritual outputs and safety routing). Sources: you, your device, and our sign-in and subscription partners. Purposes and recipients are as described in Sections 4 and 7.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising (as those terms are defined in California law). This includes the personal information of anyone under 16. We use and disclose sensitive personal information only for the purposes California law permits without a right to limit (providing the service you asked for, security, and legal compliance), so no “Limit the Use of My Sensitive Personal Information” option is required.

11. Consumer health data (Washington and Nevada residents)

Some of what Tendle handles, including the thoughts you share, safety routing, and content that reveals your emotional state, is “consumer health data” under Washington’s My Health My Data Act and Nevada law. For those laws, here is the required summary:

Categories collected and why: emotional and mental-wellness content you share in rituals, the AI outputs and safety indicators derived from it, your selected focus areas, and practice activity. These are collected solely to provide the Tendle service to you, keep it safe, maintain the quality and safety of the AI’s responses, and meet legal obligations, as described in Sections 1 through 4.
Sources: you, and processing of what you share.
Categories shared and with whom: ritual conversation text with our AI processing provider (Anthropic); affirmation text with our voice provider (ElevenLabs); stored data with our hosting provider (Supabase). All of them act as our processors under contract. We share consumer health data with no other third parties and no affiliates.
We do not sell consumer health data, and we do not share it for advertising.
Your rights: access, withdraw consent, and delete, exercised in-app or via privacy@tendleapp.com as described in Section 9, including the right to appeal.

12. Other US states

If you live in a state with a comprehensive privacy law (such as Colorado, Connecticut, Virginia, Texas, Oregon, and others), you have the rights described in Section 9, including the right to appeal a declined request. These laws treat mental-health-related data as sensitive data requiring your consent, which is why Tendle asks for your consent and processes it only as this policy describes. We do not sell personal data or process it for targeted advertising, so no opt-out is needed; we honor that standard universally rather than by geography.

13. European Economic Area, United Kingdom, and Switzerland

If you use Tendle from the EEA, UK, or Switzerland, Inner Dialogue LLC is the data controller. Our legal bases are: your explicit consent for processing the health-revealing content described in Section 3 (Articles 6(1)(a) and 9(2)(a) GDPR), which you may withdraw at any time; performance of our contract with you for your account, library, and subscription; legitimate interests for security, abuse prevention, and content-free analytics; and legal obligation where laws require.

Your data is processed in the United States. Where GDPR requires safeguards for that transfer, we rely on Standard Contractual Clauses with our processors and, where applicable, the EU-US Data Privacy Framework.

You have the rights of access, rectification, erasure, restriction, objection, and portability (Section 9), and the right to lodge a complaint with your local supervisory authority. Tendle’s AI creates reflections and affirmations from what you share. This is profiling in a technical sense, but it makes no decisions with legal or similarly significant effects about you; it only shapes the content of your ritual.

14. Our website and waitlist

This policy also covers tendleapp.com. The website’s data story is short:

The waitlist. If you join, we collect your email address and basic signup records (when you signed up, whether you confirmed, and your subscription status) so we can send you launch news and closely related Tendle updates. We use Zoho Campaigns to store the waitlist and send these emails, and we keep email open tracking turned off. Every email includes an unsubscribe link. When you unsubscribe, your address goes on a suppression list so we never email it again, and you can ask us to delete it entirely at privacy@tendleapp.com. We never use your email for third-party marketing or anything unrelated to Tendle.

The website itself. Our site is hosted by Framer, whose built-in, cookieless analytics shows us aggregate numbers like page views, referral sources, and approximate country, never individual profiles. Like any website, basic technical information (such as IP address and browser type) is processed to keep the site secure and prevent spam. The site uses no advertising cookies, tracking pixels, or cross-site tracking.

15. Children

Tendle, including our website and waitlist, is for people who are at least 13 years old, or the minimum age required in their country to consent to the processing of their data. We don’t knowingly collect personal information from children under 13; if we learn we have, we’ll delete it. If you believe a child under 13 is using Tendle, please contact us at privacy@tendleapp.com.

16. Tendle is not therapy

Tendle is a self-guided wellness practice. It is not therapy, medical care, or a substitute for professional help, and its AI is not a therapist or a licensed professional. Please talk to a doctor or mental health professional about decisions concerning your health.

If you are in crisis or thinking about harming yourself, please reach out now:

988 Suicide & Crisis Lifeline: call or text 988 (US)
Crisis Text Line: text HOME to 741741
Emergency services: call 911

Tendle’s safety features try to recognize when someone may need support, but they cannot catch everything. Tendle is not an emergency service.

17. Security

We protect your data with encryption in transit and at rest, strict access controls on our systems, and hardened protection for data stored on your device. The optional Face ID app lock uses Apple’s on-device authentication, so Tendle never sees or stores your biometric data. No system is perfectly secure, but if a breach ever affects your data, we will notify you as the law requires.

18. Changes to this policy

When we make material changes, we’ll notify you in the app before they take effect and, where the law requires it, ask for your consent. The effective date at the top always tells you the current version. We review this policy at least once a year.

19. Contact us

Inner Dialogue LLC
2108 N St, Ste N
Sacramento, CA 95816
United States

Privacy requests: privacy@tendleapp.com
General support: support@tendleapp.com