Who we are
Tend is operated by CLERKHERO LLC (“Tend,” “we,” or “us”). This policy covers the Tend iPhone app and tendhealth.app. Contact us at support@tendhealth.app. Our Health Data Privacy Policy provides more detail about health-related information.
Your journal stays on your device
The app stores information you enter in its local storage on your iPhone. This includes your name if provided, medicine and shot records, schedules, injection sites, weight, symptoms, check-ins, notes, meals, food feedback, saved foods, goals, water, and manually entered activity. Food preferences and the context used to rank your food picks are also stored locally.
We do not upload that journal to a Tend cloud-sync service. Your device’s backup settings may include app data. Anyone with access to your unlocked device, backups, or exported files may be able to access it. Tend does not currently connect to Apple Health or automatically collect health measurements.
Community is separate from your private journal. Anything you choose to publish in a Community post or comment goes online and can be read by other people, including any health information you type there. Logging a journal entry does not automatically publish it to Community.
When you use online features
Your online account
Food search, Community, and optional polls use an anonymous Firebase account and use Firebase App Check for device verification. “Anonymous” means you do not provide an email to sign in; it does not mean that online requests cannot be linked to that account. Requests include an account token and device-verification token.
The account has a persistent user ID used for authentication, linking your online contributions, account deletion, usage limits, and abuse prevention. A Community display name is a nickname, not a verified identity. Your online account is separate from your local journal.
Food search and discovery
Search terms, selected food or recipe identifiers, and relevant search filters go to Tend’s US backend and the fatsecret Platform API to return results. Recipe discovery may request results when its screen opens. Your full journal, medicine records, private notes, food feedback, and weight are not sent for these requests. Food ranking based on your journal happens on your device. Image providers receive ordinary network information when the app loads their images.
Providers receive network information such as IP addresses. Tend caches food and recipe query text with public results in server memory for up to one hour to make searches faster and limit API use. These shared cache entries do not include your account ID. Avoid entering personal details in food searches. We do not build a persistent per-account food-search history. Security and usage records include anonymous or hashed identifiers, request timing and counts, verification information, and operational errors.
Community posts, comments, and profiles
When you participate, Tend stores your display name and profile settings, post titles and text, selected topics, comments, reactions, timestamps, and the account ID associated with those actions in Google Cloud Firestore on our US backend. We also store content reports, including the reported item and reporting account, and your blocked-member list to operate the feed and its safety controls.
Posts, comments, display names, and displayed interaction counts are visible to other Community users. Readers can copy or share public content outside Tend. Do not include contact details, another person’s private information, or health details you want to keep private. Using a nickname does not make information you publish confidential.
Your blocked-member list and identity as a reporter are not displayed publicly. Blocking hides that member’s posts and comments from your feed; it does not make your own posts private or remove the member for everyone. Reports are stored for moderation. Automated checks may prevent some submissions, but content is not guaranteed to be reviewed before it appears. See our Community safety and reporting instructions.
Optional community polls
Voting is optional and requires your agreement in the app. We store your selected answer and poll identifier with your anonymous account on our US backend. Other users see combined results only after at least ten participants. Your journal is not uploaded with a vote. Polls do not publish individual answers to your Community profile. You can change or remove an answer.
Purchases
Apple handles Tend Plus payments. The app uses Apple’s purchase records to check whether Plus is active. We do not receive your full payment-card details. Apple handles its own data under its privacy policy.
Support and the website
If you email us, we receive your email address, message, and any attachments you choose to include. We use them to answer your request and resolve problems. Please do not send private journal exports or sensitive health details unless they are needed and you choose to share them.
Vercel hosts this website and processes normal connection and security information, including IP address, browser information, requested URL, and request time. This website does not use advertising pixels, an email signup form, or an optional analytics service. We do not set marketing cookies. Infrastructure providers may use necessary security technologies.
The private Community publishing dashboard uses Firebase Authentication to verify authorized publishers by email. It sets necessary sign-in and session cookies and records which publisher created or removed managed profiles, posts, and replies. These records help secure the dashboard and support Community moderation.
Why we use information and who receives it
We use information to provide requested features, secure the service, prevent abuse, display Community contributions, handle reports and blocks, manage access to paid features, answer support requests, and meet legal obligations. We do not sell personal information or use your journal for targeted advertising. The current app does not send product-analytics events or run session replay.
- Google Firebase and Google Cloud: anonymous authentication, app verification, backend hosting, usage limits, Community and optional poll storage, content reports, blocked-member preferences, and service diagnostics.
- fatsecret and image hosts: nutrition and recipe lookup, search filters, selected identifiers, and requested images. We do not send them your journal.
- Apple: App Store purchases, device services, and backups you choose to use.
- Vercel: website delivery and security.
- Email service providers: delivery and storage of messages you send to support.
We may disclose information if required by law, to address fraud or a security threat, or in a business transfer subject to applicable privacy protections. We do not share your local journal with these parties through a cloud journal service.
How long information is kept
Your local records remain until you delete them. Exported files and backups are separate copies you control. Anonymous online identity records remain until that account is deleted. Community profile content, posts, comments, reactions, reports you submit, and blocked-member preferences remain until account deletion, unless removed earlier for moderation or in response to a supported request. Poll answers remain until you remove them or delete the online account; deletion also adjusts the combined totals.
Account deletion removes your profile content and your posts and comments from the active service, clears your reactions, submitted reports and block preferences, and removes your poll answers before deleting the Firebase authentication account. Deleted records may be replaced by markers that retain record or account identifiers without the original content to prevent in-flight requests from restoring data. Other people’s contributions, reports they submit, and copies they have saved or shared are not all removed by deleting your account. We cannot recall copies outside Tend.
Backend usage-limit records are scheduled to expire seven days after their latest update; infrastructure cleanup may take additional time. Shared food-query and result caches expire within one hour; they cannot be selected for deletion by account because they have no account ID. Service logs, support correspondence, and legally required records are retained as needed for support, security, and legal obligations under our providers’ retention settings. Contact us to request deletion of support correspondence.
Your choices and rights
- Read, correct, or export records: use the app’s journal and export controls.
- Erase local records: go to You → Erase all journal data.
- Delete your online account and Community data: go to You → Privacy & about → Food search & privacy → Delete online account (called “Delete search account” in older versions). This removes the online account used by food search, Community, and polls. Confirm and allow the request to finish while connected to the internet. This does not erase the local journal or cancel a subscription. Delete the online account before erasing local data or uninstalling Tend if you want to remove both. If the control is missing or the request fails, contact support.
- Report content or block a member: use the Community item’s menu. See the step-by-step instructions.
- Stop reminders: change Tend’s reminders or your iPhone notification settings.
- Manage subscriptions: use Apple’s subscription settings. Deleting data does not cancel billing.
Resuming an online feature after account deletion may create a new anonymous account. It does not restore the deleted account or its contributions. You can keep using local journal features without posting to Community or voting in polls.
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your information; withdraw consent; restrict or object to processing; and appeal a decision about a request. Email support@tendhealth.app. We may ask for enough information to verify your request, but do not send your journal as proof. With anonymous accounts, in-app controls are usually the most reliable way to identify and delete the correct account. We will not discriminate against you for exercising applicable rights. You may also contact your local privacy regulator.
Security, location, and children
We use platform storage protections, authenticated online requests, and access controls, but no system is completely secure. Online services may process information in the United States and other countries where our providers operate. Where required, applicable contractual or other legal safeguards govern international processing.
Tend is intended for adults 18 and older, not children. If you believe a child has provided personal information to our online services, contact us so we can investigate and take appropriate action.
Changes to this policy
We will update this page when our practices change and revise the effective date. For material changes, we will provide additional notice or seek consent where required. New cloud-sync, analytics, or health integrations would require an updated disclosure; this policy does not imply those features are active.