Scope
This Privacy Policy applies to all mobile applications, web applications, software-as-a-service (SaaS) platforms, and related services operated by Tandem Labs, a division of Tandem (“we,” “our,” or “us”). This policy governs how we collect, store, protect, and handle data across all our consumer mobile apps and institutional SaaS products.
Strict Data Protection & Zero-Sale Guarantee
We operate on a strict data-minimization and privacy-first model:
- No Data Selling: We do not sell, rent, lease, trade, or monetize user data, institutional data, or personal information to any third party under any circumstances.
- No Third-Party Access: We do not grant third-party advertisers, data brokers, or external entities access to our databases or user records.
- No Targeted Advertising: We do not use any data to target advertisements or build behavioral profiles for commercial purposes.
Infrastructure & Data Localization (United States)
All application data, user accounts, and institutional records managed by Tandem Labs are hosted and stored exclusively within the United States using Supabase Cloud infrastructure. We enforce enterprise-grade encryption both in transit (via TLS/SSL) and at rest (via AES-256 encryption) to ensure your data remains secure and localized within US data centers.
Special Provisions for School Districts & Educational Data
When our SaaS platforms are utilized by school districts, educators, or educational institutions:
- Student Data Ownership: The school district or educational institution retains full absolute ownership of all student data, educational records, and institutional metadata inputted into our platforms.
- FERPA & COPPA Compliance: We act strictly as a “School Official” under the Family Educational Rights and Privacy Act (FERPA) with a legitimate educational interest. We comply fully with the Children’s Online Privacy Protection Act (COPPA). We only collect information strictly necessary to provide the functionality of the software.
- Data Deletion: Upon the termination of a school district’s contract or at the direct request of an authorized administrator, we will securely export and/or permanently purge all institutional and student data from our active databases and backups within 30 days.
Data We Collect
-
-
Account Information: Name, email address, school/organization affiliation, and role (admin, teacher, student, user) required for authentication and platform access.
-
Application Usage Data: Anonymized diagnostic logs and crash reports used strictly internally to debug, optimize, and maintain application performance.
-
User-Generated Content: Information, configurations, or content directly created and submitted within our apps or SaaS platforms by the user.
-
Contact & Data Rights
Users and institutional administrators may request access to, correction of, or complete deletion of their records at any time by contacting us at privacy@tandem7.com.
Questions
Questions about this policy can be sent to hello@tandem7.com.