Tend

Privacy Notice

Last updated: October 4, 2026

Who we are

Tend is operated by [LEGAL ENTITY NAME] ("we", "us"). For the purposes of data protection law, we are the data controller of the personal data described in this notice.

What we collect

  • Account details: name, email address, and login credentials.
  • Content you enter: notes about people you care for, names, households and family roles, follow-up promises, and messages you choose to record.
  • Support messages you send us.
  • Usage and device data: pages visited, device type, and IP address.

How we use it

  • To create and maintain your account (performance of our contract with you).
  • To provide the service: organizing your notes by person and household, and generating follow-up suggestions you approve before anything is sent.
  • To keep the service secure and prevent fraud (legitimate interests).
  • To improve the product and respond to support requests (legitimate interests).
  • To meet legal obligations where required.

How Tend uses AI

Notes you write are processed by an AI model provided by Google (Gemini), via Lovable AI. Tend uses it to recognise the people, households and follow-ups mentioned in a note, and to flag notes that may be sensitive so they can be handled with extra care. Suggestions are shown to you for review; nothing is sent on your behalf without your approval.

Your notes are not used to train AI models.

Service providers

  • Hosting and database — Supabase: stores your account details, notes, people, households, tends and usage logs.
  • Payments — Paddle: as Merchant of Record, handles your name, email, billing address and payment details to process purchases, subscriptions, tax and invoices. Tend never sees your full card details.
  • AI processing — Google (Gemini), via Lovable AI: receives the text of notes you write in order to return people, households, follow-ups and sensitivity flags.

Information about minors

Tend is used by adult ministry leaders to record notes about the people in their care, including young people under 18. Minors do not create Tend accounts and cannot sign in.

Leaders are responsible for following their church's child-safety, safeguarding and consent policies when recording information about a young person, and for respecting any contact consent recorded by a parent or guardian.

A parent, guardian, or the young person can ask for that young person's records to be deleted by contacting the church leader who uses Tend, or by emailing privacy@tendhq.io with the young person's name and church. We will work with the church to verify the request and delete the records.

Who we share it with

  • The service providers listed above, only to operate Tend.
  • Our online reseller Paddle.com, which is the Merchant of Record for purchases, to process payments, manage subscriptions, handle tax compliance, and issue invoices.
  • Professional advisers (legal, accounting) where needed.
  • Authorities where required by law.

We do not sell your personal data, and we do not share your notes with advertisers.

How long we keep it

We keep your data for as long as your account is active. When data is no longer needed, it is deleted or anonymised. You can delete your account at any time, which removes your notes, people, and households.

When a person, household or leader is deleted, we keep a protected copy for 30 days so it can be restored if it was removed by mistake. Only Tend staff can see or restore these copies, and every restore is logged. After 30 days the copy is permanently erased.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or transfer your personal data, to object to certain processing, and to withdraw consent where processing is based on consent. You also have the right to complain to your local data protection authority. We respond to requests within one month.

To exercise any of these rights, email us at privacy@tendhq.io.

International transfers

Your data may be processed outside your country. Where it is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

Security

We use appropriate technical and organisational measures, including encryption in transit and encryption at rest, and row-level access controls, so that your notes are visible only to you and the team members you explicitly invite.

Cookies

We use essential cookies and storage to keep you signed in and remember your preferences. We do not use advertising or marketing cookies. You can clear cookies in your browser settings at any time.