TendPrivacy Policy
Last updated: September 29, 2026
- Tend stores your tasks so it can show them to you on your devices. That's what they're for.
- Your tasks are never sold, shared for advertising, or used to train AI models.
- You can turn off anonymous usage statistics in Settings → About.
- You can delete everything at any time in Settings → Account.
- Your data is kept by Google's Firebase service, in data centres in the United States.
Who runs Tend
Tend is a personal project built and run by Borna Safai, an individual in Quebec, Canada ("I", "me"). In this policy, "you" means anyone who uses Tend at tendapp.ca or in its apps.
Person in charge of the protection of personal information
Borna Safai
Email: borna.safai@gmail.com
Write to this address with any question about this policy, to exercise your rights, or to make a complaint about how your information is handled.
What Tend collects, and why
| Information | Why |
|---|---|
| Your Google account: name, email address, profile picture and a Google account ID, received when you sign in with Google. | To create your account, sign you in, and show you which account you're signed in with. |
| What you put in Tend: tasks, notes, dates, repeat rules, projects, sections, labels, completion history and settings. | To store your lists and sync them between your devices. This is what Tend is for. |
| Device details for notifications: which kinds of device you've used Tend on and, if you turn notifications on, a notification token and a random ID for each device. | To send the reminders and daily summaries you ask for, to the devices you choose. |
| Anonymous usage statistics: counts of events such as "task created" and "task completed", plus general usage such as sessions, device type, app version and approximate country. These never include what your tasks say. | To see which features get used, so I can improve Tend. You can turn this off. |
| Technical logs: IP address, browser type and time of access, recorded by the hosting service when you visit the site. | To deliver the site and keep it secure. |
Tend collects this information directly from you, from Google when you sign in, and automatically from your device while you use Tend.
Importing from Todoist
If you import from Todoist, you paste in a Todoist API token. Tend uses it only to read your Todoist projects and tasks during that import, on your own device, and doesn't store it. What it imports is then kept like any other task in Tend.
Google user data
Tend uses Google Sign-In only to identify you. It asks Google for your basic profile (name, email address and picture) and nothing else, such as your Gmail, Drive or Calendar. Tend's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. If Tend ever asks for more access, for example to show your calendar, it will ask you first and this policy will be updated.
What Tend doesn't do
- Sell or rent your information, or share it with advertisers.
- Show ads, or use your information to profile you for advertising.
- Use your tasks to train AI or machine-learning models.
- Read your tasks. See the next section for the one exception.
Who can see your information
Your tasks are private to your account. Security rules on the database let only your signed-in account read or change them.
Tend doesn't have end-to-end encryption yet. Your information is encrypted in transit and when stored, but as the operator I can technically access the database. I don't look at your information except when you ask me to help with a problem, or when the law requires it. Only I have this access.
Tend relies on these service providers, which process information on its behalf:
- Google Firebase (Google LLC): sign-in (Firebase Authentication), storing your data (Cloud Firestore), sending notifications (Firebase Cloud Messaging and Cloud Functions), hosting the website (Firebase Hosting), and usage statistics (Google Analytics for Firebase). See Firebase's privacy information.
I may also disclose information if the law requires it, for example in response to a valid court order.
Where your information is kept
Tend's database is stored in Google data centres in the United States. Google may process some information, such as usage statistics and notification delivery, in other countries. Information kept outside Quebec and Canada is subject to the laws of the country where it's kept. Google protects it under contract, with security measures such as encryption and access controls. Before relying on Google, I weighed these safeguards and the sensitivity of the information involved.
How long it's kept
- Your account and tasks are kept until you delete them or delete your account. After that, the database's short-term version history keeps a copy for at most an hour, and then it's gone for good. Tend keeps no other backups.
- Deleted tasks leave a small marker (the task's ID and when it was deleted, not its content) so your other devices know to remove them. Markers are cleared out automatically after a while.
- Notification details for a device are removed when you turn its notifications off or sign out on it. Reminders that have already been sent are cleared out automatically.
- Usage statistics are kept by Google Analytics under its data-retention settings. They aren't linked to your name, email or what your tasks say, so they stay after you delete your account.
Your choices and rights
You can, at any time:
- See and change your information directly in Tend.
- Turn off usage statistics in Settings → About → Share anonymous usage data. The choice applies to all your devices.
- Turn off notifications in Settings → Notifications, or in your device's settings.
- Delete your tasks and projects in Settings → Account → Delete all tasks and projects.
- Delete your account in Settings → Account → Delete account. This removes your account and everything in it from Tend's database. Any remaining copy in the database's version history is gone within an hour.
Under Quebec's Act respecting the protection of personal information in the private sector and other privacy laws that apply to you, you also have the right to:
- ask whether I hold personal information about you, and get a copy of it, including in a structured, commonly used format;
- have inaccurate, incomplete or out-of-date information corrected;
- withdraw your consent to its use, and have it deleted;
- ask how your information is used, and who has it.
To exercise any of these rights, email borna.safai@gmail.com. I'll reply within 30 days. If you're not satisfied with the answer, you can complain to the Commission d'accès à l'information du Québec, or to the privacy authority where you live.
Security
Information is encrypted between your device and Google's servers, and when stored. The database only lets your signed-in account read or write your data. No system is perfectly secure, though. If a security incident involving your personal information risks causing you serious harm, I'll tell you and the Commission d'accès à l'information, as the law requires.
Cookies and local storage
Tend stores information on your device so you stay signed in, can keep working offline, and keep your preferences. Google Analytics for Firebase, which you can turn off, uses similar storage to count sessions. Tend has no advertising or tracking cookies.
Children
Tend isn't meant for children under 14, and I don't knowingly collect their information. If you think a child under 14 has an account, email me and I'll delete it.
Links to other websites
Tend can take you to other sites: Buy Me a Coffee from Settings → About, and any link you put in your own tasks. An import from Todoist also connects to Todoist's service. Those sites and services are run by other companies under their own privacy policies, and this policy doesn't cover what they do with your information.
If Tend changes hands
If I ever hand Tend over to someone else to run, your information would go with it only so it can keep working for you, under the same promises as this policy. I'll email you before that happens, so you can delete your account first if you prefer. The same applies if Tend is ever run by a company I set up.
Changes to this policy
If this policy changes, I'll update the date at the top of this page. If a change affects how your information is used in an important way, I'll also email you before it takes effect.