Juvo is a DBA of Tandem Labs, Inc. This policy covers the waitlist email collected on this site and governs the Tandem AI service linked from it.

Privacy Policy

Last updated: 2026-09-25

Tandem AI is a voice-first AI coaching app. We take a small set of personal data, hand it to a small set of vendors who help run the service, and keep the rest under your account. This page lays out what we collect, why, who else touches it, and how you control it.

What we collect

Account info. Your email, display name, timezone, and basic profile fields you fill in.
Waitlist info. If you join a Tandem AI or Juvo waitlist before creating an account, we collect the email address you submit, when you accepted the applicable terms and email permission, and the page or campaign that led you there. Juvo is a DBA of Tandem Labs, Inc., so those waitlist submissions are held by the same company under this policy.
Voice recordings. When you talk to Tandem AI, your audio is recorded and stored so the coaching can stay coherent across conversations. This isn't optional — it's how the product works. It also outlasts your account: recordings of your coaching conversations are kept after you delete your account, de-linked from you rather than erased. Data retention sets out exactly what deletion does and doesn't remove. If you aren't willing to have your voice recorded and kept on those terms, don't use Tandem AI.
Transcripts and conversation content. Everything you say and everything Tandem AI says back is transcribed and saved alongside the audio.
How you sound when you say it. Alongside the words, we measure characteristics of your delivery: how long you take to answer, how long you speak for, how fast you're talking, and the energy and pitch variation in your voice. Coaching you honestly means noticing when a commitment sounds flat or hesitant, not only that you made it. These measurements are stored per conversation turn and follow the same retention as your recordings — including being kept, de-linked, after you delete your account — and like the recordings they aren't optional. They are not voice biometrics: we don't use them to identify or authenticate you, and we don't use them to infer health conditions.
Activity data. The goals, habits, tasks, check-ins, and other entries you create through the app.
Device tokens for push. If you allow notifications, we store the push token your browser or OS hands us so we can deliver nudges.
Phone number for SMS. If you opt into SMS, we store the phone number you give us so we can send and receive text messages on Tandem AI's behalf.
Basic technical info. Standard server logs (IP, user agent, timestamps) needed to run a web service and debug problems.

How we use it

Run the coaching service. Hold conversations, remember context, surface the right activities, send check-ins, and deliver the rest of the product to you.
Manage the waitlist. Record your request for access, avoid duplicate invitations, and email you about access or related service updates when you gave us permission.
Improve the product. Study how conversations actually go — in aggregate, and in the conversation content we retain, including after an account is deleted (Data retention) — to make Tandem AI better. We do not sell your data and we do not share it with advertisers.
Keep the service safe. Detect abuse, debug failures, respond to security issues.

Third-party processors

We rely on a set of vendors to run Tandem AI. Each of them processes only the data they need for their slice of the service. Their policies link below; you should glance through them.

Core coaching pipeline — the model and the currently-active voice providers, which process your conversation on every call:

Anthropic — the language model that powers Tandem AI's responses. Processes your transcripts and conversation context.
Deepgram — the current speech-to-text provider; turns your voice into transcripts. Processes your call audio.
ElevenLabs — the current text-to-speech provider; turns Tandem AI's text into the voice you hear.
Supabase — database, authentication, file storage. Holds your account, activity data, recordings, and transcripts.

Each stage of the pipeline is provider-swappable — the language model, the speech-to-text and text-to-speech stages, and (for some calls) a combined speech-to-speech model — and we may use an alternate provider for some voices, as a fallback, or when we change vendors. Depending on configuration that can include, for example, Cartesia or OpenAI for speech, or another large-language-model provider in place of Anthropic; whichever provider is active for your call processes the same audio or text as the one it replaces, on the same terms. We flag a material change to which vendors are in use in the "updates" section below.

Communications — used to reach you:

Email delivery (Resend or Postmark, depending on configuration) — sends transactional email (weekly digests, morning briefs, alerts). Processes your email address and the message content.
Telnyx — places and receives calls, and sends and receives SMS on Tandem AI's behalf, when calling or SMS is enabled. Processes your phone number and the message/call content.
Push notification providers (Apple Push Notification service and Google Firebase Cloud Messaging) — deliver push notifications when you opt in. Process your device push token.

Operations, billing, and analytics — some are only active in certain configurations:

Stripe — payment processing and subscription billing. Stripe handles your payment/card details directly (we don't store card numbers); we hold your subscription status. Active when billing is enabled.
PostHog — product analytics: how the app is used, so we can improve it. Processes usage events tied to a pseudonymous identifier.
Sentry — error and crash monitoring. Processes technical error data and diagnostic context (which can include an IP address).
Observability export — when it is provisioned, we may export diagnostic logs and traces to a self-hosted or third-party observability backend (e.g. Grafana Cloud / Loki) over OpenTelemetry. Only opaque identifiers and technical metadata are exported — never your conversation content.

Optional integrations you connect — only if you choose to link the account:

Google — when you connect Google, we access your Google Calendar, and (if you grant it) Gmail messages — metadata plus short content snippets (e.g. the first line of a message), which are sent to the model — and Google Fit activity data, to bring that context into your coaching.
Plaid — when you connect a financial account, Plaid links it and shares account and transaction data with us.
Strava and other health/fitness providers (Whoop, Oura, and similar) — when you connect one, we pull your activity and health metrics from it.

Connecting an integration shares data between Tandem AI and that provider under each provider's own terms; you can disconnect any of them from settings. We may add or change vendors over time. Material changes will be flagged in the "updates" section below before they take effect.

Data retention

Your account data — including voice recordings, transcripts, and the speech measurements described above — is kept for the lifetime of your account. The coaching gets better the longer Tandem AI has worked with you, so we don't time-age recordings.

Deleting your account does not delete all of it. Read the next two sections carefully; they are the part of this policy most likely to matter to you.

What deleting your account removes

Deleting your account from settings runs immediately. It erases the following from our active systems — backup copies containing them then roll off separately, on the schedule at the end of this section:

Your profile and account details — email, name, date of birth, timezone, phone number, and the rest of your profile.
Your activity data — the goals, habits, tasks, check-ins, and other entries you created, and the memory Tandem AI built from them.
Your voice note entries and their transcripts. The audio files behind them are retained — see below.
Your notification settings and push tokens, so we stop contacting you.
Your sign-in credentials, so the account cannot be accessed again.

What we keep after you delete your account

We keep your recorded audio. The audio recordings, transcripts, and speech measurements from your calls with Tandem AI are retained indefinitely, including after you close your account, and so are the audio files behind your voice notes. Deletion does not erase this content — it de-links it: your account is destroyed and the direct identifiers we hold about you are erased, so no name, email, or phone number is attached to this content any more. (That is not the same as anonymous — see below.)

We keep this content to operate and improve the coaching service and to investigate safety and abuse problems. We do not sell it, we do not share it with advertisers, and we do not use it to try to work out who you were.

We are not going to overstate what de-linking achieves. De-linked content is pseudonymous, not anonymous, for two reasons, and you should know both. First, a recording of your voice is a biometric identifier: anyone holding a separate sample of your voice could in principle match it back to you. Second, retained files are still filed internally under the anonymous account number your account used, and our deletion records keep that number as proof the deletion happened — so we could re-associate the content ourselves, even though the account and everything identifying it are gone.

That is precisely why retained content stays under the same security controls as live account data, and why we're stating it here rather than burying it.

Separately, we keep a small amount of operational data — call metadata and error logs — with the direct identifiers stripped out of it.

You agree to this retention when you accept the Terms of Service at signup; the Voice recording section there is the commitment you're making. If you are not willing to have your conversations kept on these terms, don't use Tandem AI.

Asking us to erase what we retained

Consenting to retention does not sign away your rights under privacy law. If you have a right to erasure — under GDPR in the EU/UK, the CCPA/CPRA in California, or another law that grants one — you can ask us to erase your retained conversation content too, and we will honour a valid request. Because that content is stored across several systems, erasure is carried out as a reviewed manual process rather than an instant automated deletion — we action a valid request and confirm to you once it is complete. Contact us through the website below. You can also ask us to erase specific data without deleting your whole account.

Backups roll off on our vendors' default retention schedule (currently around 7 days at Supabase).

Your rights

You can:

Access the data we hold on you.
Correct anything that's wrong.
Delete your account. This erases your profile, activity data, and voice notes; your coaching recordings, transcripts, and speech measurements are retained de-linked, as set out in Data retention. You can also ask us to erase those — see Asking us to erase what we retained.
Export a machine-readable copy of your data.

To exercise any of these, contact us at [tandemaiapp.com](https://tandemaiapp.com/).

If you live in a region with a specific privacy law (GDPR in the EU/UK, CCPA in California, and others), those rights apply to you too. Use the same website.

Children

Tandem AI is not for children. We do not knowingly collect data from anyone:

under 13 in the United States (COPPA), or
under 16 in regions where local law sets a higher minimum age (much of the EU/UK).

If you believe a minor has signed up, contact us and we'll delete the account.

Security

We use standard practices to protect your data: encrypted connections, encrypted storage at our vendors, role-based access on the database, and limited admin access. No system is perfectly secure; if we discover a breach affecting your data, we'll notify you.

International transfers

Tandem AI's vendors are primarily based in the United States. If you use the service from outside the US, your data will be transferred to and processed there.

Updates

We'll notify you in-app or by email before any material change to this policy. Non-material edits (typos, link fixes) may be made silently; the "last updated" date at the top will always reflect the most recent change.

Contact

Privacy questions: [tandemaiapp.com](https://tandemaiapp.com/).