Privacy Policy

1. What Tendril Collects

Tendril collects only the data necessary to provide its core features:

• Account info — email, display name, hashed password
• Check-in data — emotions, gratitude notes, need signals, reflections
• Session data — guided conversation turns, conflict resolution entries
• Relationship data — Love Maps answers, attachment style, love languages
• Memory Vault — text entries, captions, milestones
• Usage metadata — timestamps, streaks, feature usage, sentiment scores

2. How Your Data Is Protected

Your data is protected with industry-standard security measures:

• Encryption in transit — all connections use TLS/HTTPS
• Encryption at rest — your database is encrypted at the storage level
• Secure authentication — passwords are hashed with bcrypt, sessions use short-lived JWTs
• Rate limiting — login and registration endpoints are rate-limited to prevent abuse
• Strict cookies — authentication cookies use HttpOnly, Secure, and SameSite=Strict flags

3. How AI Features Use Your Data

Tendril uses AI (Claude by Anthropic) to provide relationship insights, sentiment analysis, conversation coaching, and weekly summaries. To do this:

• Your check-in data and conversation content are sent to the AI service server-side
• AI processing happens in real-time — your data is not stored by the AI provider
• AI-generated insights are stored in your account for you to review
• You can use Tendril without AI features (they are best-effort and non-blocking)

Transparency note: Because AI features require server-side access to your data, Tendril does not offer end-to-end encryption. We believe in being honest about this tradeoff rather than making misleading claims. Your data is still protected with strong security measures as described above.

4. Data Sharing

Tendril does not:

• Sell your data to third parties
• Use your data for advertising
• Share your data with anyone other than your paired partner (and only the data you choose to share)

Third-party services we use:

• Neon (PostgreSQL) — database hosting
• Vercel — application hosting
• Anthropic (Claude) — AI processing
• Stripe — payment processing (we never see your full card number)

5. Partner Sharing

Tendril is designed around private reflection before intentional sharing. Some data is shared with your partner by default (daily check-ins, guided session turns), while other data remains private until you explicitly choose to reveal it (State of Us reflections). You always control what your partner sees.

6. Data Retention & Deletion

You can delete your account at any time from Settings. Account deletion permanently removes all your personal data, check-ins, emotion entries, and session data. Shared couple data (memories, conflicts, sessions) associated with your couple record will also be removed.

7. Therapist Reports

The Therapist Report feature generates anonymized summaries of your relationship patterns. These reports are generated on-demand, displayed only to you, and are not stored permanently. You choose whether to share them with a therapist — Tendril never sends them automatically.

8. Contact

Questions about your privacy? Contact us at privacy@tendril.app