Effective 22 October 2026

Privacy Policy

Tandem is a Mac app where people and their AI agents build software together. Your work stays on your Mac. This page says plainly what we do and do not collect.

The short version

• Your projects and your project memory live on your Mac.
• When you share a project with teammates, what is shared is encrypted on your Mac before it is sent. We cannot read it.
• What Tandem remembers about you personally is never shared with teammates.
• We do not run ads, sell your data, or use analytics or tracking in the app.
• AI work runs through your own AI tools and subscriptions. Tandem does not resell or proxy model usage.

What we receive when you sign in

You sign in with Google. We ask only for the basic sign-in information: your name, email address and profile picture (the openid, email and profile permissions). We do not ask for access to your Gmail, Drive, Calendar, contacts or any other Google data.

We use this to recognise you, to show your name and picture to teammates on shared projects, and to keep your account secure. Sign-in is handled by Supabase Authentication.

What is stored on your Mac

• Your projects, their code folders, and the sessions and tasks you run.
• The project memory: decisions, owners and open questions Tandem and your agents record about each project.
• Your personal memory: how you like to work, learned from your own sessions and instructions. It stays on your Macs and is never shared with teammates. If you choose to sync your own Macs, it is encrypted end to end first.
• Usage figures (cost and tokens per task), kept in a local ledger on your Mac.
• Your sign-in session, kept in the macOS Keychain, and any API keys you add for AI providers (also in the Keychain or in that tool's own folder).

What is stored on our server

Team features use a hosted database (Supabase). It holds:

• Your profile: your email, name and picture from Google.
• Your devices: a name for each Mac you sign in on, its app version and when it was last seen.
• Project memberships: which projects you belong to and the members of each, plus invite records (we keep only a fingerprint of an invite secret).
• Encrypted events: the changes teammates share, encrypted with AES-256-GCM using a per-project key. That key lives only on members' Macs and is never sent to the server, so the server stores the events but cannot read them. A project's invite link carries the key after the #, which is not sent to any server.

Access to every table is limited by row-level security, so you can only see your own rows and projects you belong to.

Your AI tools

When an agent works for you, Tandem hands the task to the AI tool you already use (for example Claude Code, Codex, Gemini CLI, GitHub Copilot, OpenCode or a local model through Ollama). Your prompts and project content go to that provider under your own account and its own terms and privacy policy. Tandem does not resell, proxy or see that traffic on a server of ours. Tandem also makes a small call to a model through your own signed-in tools to extract memory facts from conversations. Check each provider's policy for how it treats your data.

The app also contacts Anthropic and OpenAI directly, with a key you provide, only to check that an API key you add is valid.

Analytics and tracking

The app has no analytics, crash reporting or advertising code, and the website does not use cookies or analytics. The only outside request the website makes is to load its fonts from Google Fonts. We do not sell your data and we do not show ads.

Sharing

We share data only with the service providers needed to run Tandem: Supabase (hosting, database and sign-in) and Google (sign-in). We do not sell personal data or share it for advertising. We may disclose information if the law requires it, though for encrypted project events we have nothing readable to hand over.

Google user data

Tandem's use of information received from Google follows the Google API Services User Data Policy, including the Limited Use requirements. We use your Google name, email and picture only to provide sign-in and identify you and your teammates, and we do not transfer it to others or use it for advertising.

Your choices: access and deletion

• Memory: you can see what Tandem remembers about you in the app's About you view. An export or delete my memory option for that view is being built and will be available there.
• Project data on your Mac: delete a project or the Tandem folder and its local data goes with it.
• Leaving a project: you can leave a project, or a project owner can remove you, from the People panel.
• Your account: to delete your account and the profile, device and membership records tied to it, email [email protected] from the address you signed in with. Events you shared with a team are encrypted and belong to that team's project, so they remain for the other members until the project is removed.
• You can also revoke Tandem's access at any time in your Google Account permissions.

Security

Team data is end-to-end encrypted, the database enforces row-level security, and sign-in sessions are kept in the Keychain. No system is perfectly secure, so keep your Mac and your Google account protected.

Children

Tandem is not meant for children under 13 (or the age required in your country), and we do not knowingly collect their data.

Changes

If we change this policy in a way that matters, we will update the date at the top and tell you in the app.

Contact

Questions or requests: [email protected]