Privacy

Your data, your control.

Last updated: 2026-06-01 · Version 1.0.0

We built Tandem North because we got tired of being the product. So we made the kind of personal AI we'd want to use ourselves — one where you stay in charge.

Here's what that means. No fine-print games.

What we see, and what we don't

When you connect an account — your inbox, calendar, work tools — Tandem North looks at it so it can help you find what matters and quiet what doesn't.

We keep these things, because the product needs them:

• Who you talk to, and how often (the shape of your relationships)
• When messages arrived and were sent
• Just enough of the content to surface what's important — usually a short snippet, never more than we need

We never keep the full bodies of your messages. We pull them live from the source when we need to and let them go when we're done.

We never look at things you've marked sensitive. If a thread is in your vulnerable category — a custody conversation, a divorce inbox, a therapist's message, anything you've flagged — we surface it to you and nothing else. We don't draft replies for it. We don't read it aloud. We don't send it to any AI. We don't expose it to any add-on. You handle it yourself, on your terms.

What we will never do

• Never sell your data. Not to advertisers, not to brokers, not to anyone. There's no business model here that depends on your data going anywhere. Ever.
• Mine you for ads. We don't run ads.
• Send anything on your behalf without you hitting Send. Tandem helps you draft. You decide what gets sent.
• Hand you off. We're independent on purpose, and we plan to stay that way. If we ever changed that, you'd be the first to know, and your data is always yours to take with you.

What you can do, anytime

• Take everything with you. One click → a complete JSON export of your data. Yours to keep, move, archive, walk away with.
• Disconnect any source. Revoke at any time. We stop fetching from it immediately and delete short-term excerpts within 24 hours.
• Flag anything sensitive. Mark a contact, an inbox, or a single thread as vulnerable in one click. Tandem then treats it that way — surface only, no automation.
• See what we've done. Your activity log shows every consent grant, every AI call, every action taken — by you or on your behalf.

Where your data lives

On Netlify's servers, encrypted at rest with a key derived just for you — your encrypted data is unreadable even to someone with another tenant's key. Your auth tokens are stored the same way.

We use Anthropic's Claude as the AI behind Tandem. Anthropic's API does not use your data to train their models (it's their default).

How Google data is handled, specifically

Tandem North's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We request these Google scopes and use them for exactly what's described above — no more:

• gmail.readonly — to read your email metadata + content so we can surface what matters in your day and help you draft thoughtful replies.
• calendar.readonly — to see your upcoming events so we know who you're meeting with.
• contacts.readonly — to enrich the People view with names, phone numbers, and other contact details you've already saved.
• openid, email, profile — to confirm which Google account you're connecting.

Specifically: we do not use your Google data for advertising, do not use it to train AI models, do not sell or transfer it for any commercial purpose, and do not share it with third parties except as strictly needed to provide the service (Anthropic's no-training API for AI features). Humans at Tandem North do not read your Google data except (a) with your explicit permission to debug a problem you've reported, (b) where required by law, or (c) to investigate abuse or violations of these terms.

When this changes

If we update this statement in a way that matters, we'll show it to you next time you log in and ask you to accept the new version. The old version is kept in your activity log so you can always see what you agreed to and when.

Built to keep, not capture

That's the whole shape of it. If something here is unclear, write us at hello@tandemnorth.ai and we'll explain it in plain language, not lawyer-speak.

— The Tandem North team