Tendry privacy

Information you choose to keep

Tendry stores the dog profiles, optional birthdays and homecoming dates, routines, appointments, care records, health details, practice records, memories and notes you enter. Your caregiver display name and an identifier associate records with the person who recorded them. You can use a display name that does not reveal your full name.

This information powers your daily plan, history, appointment reminders and guidance suggestions. Optional dog birthdays, time since adding the dog to Tendry, an explicit practice focus and recent practice records help choose general guidance. Time since adding a dog does not establish when the dog joined your home.

Free-form notes may contain personal information you choose to include. Avoid including information you do not want stored or shared.

Photos you choose

Tendry receives only items you select in Apple’s photo picker. It saves a smaller JPEG without the original location and camera metadata; the original is unchanged. Profile and memory photos belong to the household’s care, so household members can see them. A photo’s visible content can still reveal people or places.

Where your information is kept

Care on this iPhone

You can start with care saved on your device. Signing in preserves this separate history; it does not upload or merge it automatically. Device backups and file destinations follow your Apple settings and the services you choose.

Your Tendry account

Tendry uses Supabase for sign-in and shared care, with its backend in Canada. Your email identifies your account; your display name labels care records. Your household owns its dogs and their shared care and photos. Household members can see and update that care. Invite only people you trust.

A downloaded copy and pending changes remain on each signed-in device for offline use. Changes send automatically after reconnection. Conflicting edits may require review; recovery copies preserve local information. Signing out locks this account’s local care and pending changes instead of deleting them.

Earlier histories and copy receipts

Earlier device-only and iCloud care can be brought across through a reviewed import. The source remains separate. Tendry no longer uses CloudKit as its shared-care backend.

Copy receipts, account permission ledgers and import progress let Tendry recover interrupted operations without repeating them. Receipts can remain after care is removed so an old import does not recreate it automatically. Local recovery copies can include care text and photos; they are accessible only in the matching account context.

Notifications and outside links

If you enable appointment reminders and allow notifications, Tendry schedules local notifications through iOS. The appointment title may appear on your lock screen according to your notification settings. You can turn reminders off in Tendry or change notification permissions in iPhone Settings.

Opening a linked training source takes you to another organisation’s website, which has its own privacy practices.

Exports, imports and sharing choices

An export includes all dogs and households currently accessible in Tendry, their care history, names and notes, including saved appointment-note versions. Choose the destination carefully. The exported JSON file is not password-protected by Tendry.

Import creates a separate copy. Deleting or changing one copy does not update other exported or imported copies. Records retain their original author names and identifiers. Tendry also records the importing caregiver’s identifier to allow that person to edit or remove records in their independent copy.

Manage household members in Settings → Household and sharing. Removing a member ends server access; cached care closes when their device next connects. Removal cannot erase information someone has exported or otherwise kept.

Keeping and deleting records

Tendry keeps saved records so you can refer to them later. Undoing a care activity marks it retracted so it no longer counts as completed care. Its stored content can remain internally to reconcile that correction, but retracted activities are excluded from care-history exports.

To delete an individual saved activity, open its details in Journey, choose Remove this record and confirm Remove record. This deletes the activity from the active household store.

Appointment note edits are stored as separate versions with the author and time. Concurrent versions remain available for review. Choosing, combining or clearing the current note retains earlier versions. Removing an appointment deletes its note versions from the active store. A care record created when an appointment was marked attended retains its own copy of the notes until that record is removed.

Your dog → Delete this dog’s data removes that dog’s profile, activities, routines, appointments and appointment-note versions from the active household store. Repeat for each dog whose information you want to remove.

Account care and earlier device-only or iCloud histories are separate. Deletion applies to the history currently open. Shared deletions reach the server after connection; photo files are removed by retryable cleanup. Deletion does not erase independent exports, recovery copies or Apple backups.

Settings → Manage care data stays available after the last dog is removed. Device-only histories let you clear the future display name or delete an empty local household. Account names are updated through the verified account profile.

To delete your Tendry account, open Settings → Account → Delete your Tendry account. Review the households you leave and those removed with you. Transfer ownership first if another caregiver depends on a household where you are the only owner. Account deletion removes your sign-in, private transfers and sole-caregiver households. History retained by other households keeps the caregiver names already recorded.

Photo cleanup and account closure can take several minutes. The app confirms completion and can resume checking an interrupted request. A minimal deletion reference and receipt hash remain without the deleted email or care text. Tendry cannot delete your Apple Account. Read the in-app deletion steps.

Support messages

Support is handled by Nicolaas Earley using Gmail. Gmail is provided by Google and is subject to Google’s own privacy and service practices. If you choose to contact support, your message and any attachments are received so your question can be answered. Support correspondence is kept only as needed for that purpose, for up to one year from receipt.

To request deletion of earlier support correspondence, email nicolaasearley@gmail.com from the address you used, where possible, and identify the message or approximate date. Nicolaas Earley manually locates and deletes the relevant support correspondence. He may need to confirm which correspondence belongs to you before removing it. This process concerns email you sent to support; it does not delete care saved in Tendry or your Apple Account.

The contact link in Tendry opens your email app. It does not send your care history automatically. Do not send passwords, verification codes or Apple Account credentials.

Advertising, analytics and platform services

The current app does not include advertising, cross-app tracking, an advertising identifier integration or a third-party analytics SDK. It does not request access to your location, contacts, camera, microphone or health records.

If you participate in TestFlight, Apple provides the testing and feedback service. Feedback you submit there and beta diagnostic information may be available through Apple’s developer tools. Do not include private care records in feedback unless you choose to share them.

This website’s static pages do not use cookies, analytics scripts, web forms or browser storage. A website’s host and network providers process technical connection information to deliver its pages; their handling depends on the hosting configuration.

Changes and questions

This page will be updated when Tendry’s data practices change. You can contact nicolaasearley@gmail.com about this policy or your information.