Legal
Privacy Policy
Last updated: October 2026 · applies from Tend 1.1
The short version: Everything you enter in Tend stays on your phone. There's no account, and we have no copy. AI features are optional. When they're on, only the text a feature needs is sent to Anthropic's Claude, after names and identifiers are removed, and photos are never sent. We don't sell your data, show ads, or track you.
We built Tend for caregivers on hard days. This page says exactly where your family's health information goes. US residents should also read our Consumer Health Data Privacy Policy.
What stays on your phone
Everything you enter is stored only on your phone, using Apple's on-device storage and its encryption:
- the care profile and conditions
- medications, schedules and reminders
- instructions, including the text of documents you upload
- symptom logs, wound checks and wound photos
- your own wellbeing check-ins
Tend keeps backup copies on the phone so an app update can't lose your data. Your phone's own iCloud or computer backup may include Tend's data like any other app's, under Apple's privacy policy.
There's no Tend account and no Tend server holding your care plan. Deleting the app deletes all of it. We can't recover it, because we never had it.
AI features
AI features read uploaded documents into a care plan, write the morning briefing and caregiver tips, and check symptom entries against your care team's warning signs. They're optional: you choose during setup, and you can turn them off any time in Settings. With AI off, nothing is sent anywhere. Schedules, reminders, logs, the medication list and the appointment summary keep working.
| Feature | What is sent |
|---|---|
| Reading instructions | The document's text |
| Daily briefing | Conditions or procedure, day count, number of tasks today, and summaries of active instructions |
| Symptom check | Today's entry including your notes, a numeric summary of the last 14 days, the care team's warning signs, and instruction summaries |
| Caregiver tips | Conditions or procedure, day count, instruction summaries and warning signs |
Before anything is sent, Tend removes identifiers it can recognize:
- the name of the person you care for
- email addresses and phone numbers
- labeled record numbers, such as MRN, NHS, Medicare, patient and insurance IDs
- Social Security numbers and labeled dates of birth
- street addresses and UK postcodes
Care team members are described by specialty. Redaction is automatic and can't catch everything printed on a page, so leave out pages you don't want analyzed. Wound photos are never sent.
How it travels. Requests pass through a small relay we run on Cloudflare, which only forwards them to Anthropic and doesn't store or log what you send.
Anthropic processes the text to produce the answer under its commercial terms. It doesn't use it to train models, and it keeps it only for a limited period. See anthropic.com/privacy.
Who else handles your data
We use these providers only to run Tend:
| Provider | What for | What they receive |
|---|---|---|
| Anthropic | AI features, when on | The text described under AI features |
| Cloudflare | Relay for AI requests | The same text, in transit only |
| TelemetryDeck | Anonymous usage statistics, only if you turn them on | Counts of features used and errors. Never names, notes, symptoms, medications, documents or anything you type. |
We don't sell personal data, share it for advertising, or use it to track you across apps or websites.
How long we keep it
Your care plan stays on your phone until you delete it or delete the app. We don't keep it at all. Anthropic keeps AI requests only for the limited period its terms describe.
Your choices and rights
In the app you can:
- Correct anything by editing it.
- Delete any record, or delete the app to remove everything.
- Export an appointment summary as a PDF or text.
- Turn off AI or usage statistics in Settings.
Depending on where you live, you may also have the right to know what we hold, to get a copy, to correct or delete it, and to appeal if we refuse a request. Because your care plan stays on your phone, we usually hold nothing about you. Email hello@commongenelabs.com with "Privacy request" in the subject and we'll answer within 45 days. If we refuse, reply to appeal and we'll respond within 45 days.
If you're in the EU or UK, AI processing relies on your explicit consent, which you give by turning AI on and withdraw by turning it off. You can also complain to your data protection authority.
Children
Tend is for adults organizing care. A parent or guardian may keep a care plan for their child. Tend is not directed at children under 13, and we don't knowingly collect information from them.
Security
All traffic is encrypted. On the phone, data is protected by iOS data protection, and wound photos are locked until the phone is unlocked. Our AI key never ships in the app.
Changes to this policy
We'll update this page when our practices change and change the date at the top. Before Tend offers accounts or sharing, we'll update this policy and ask for your agreement in the app before anything leaves your phone.
Contact
Questions about this policy or how Tend handles data: hello@commongenelabs.com. Common Gene Labs, commongenelabs.com.