Yoha

Privacy Policy

Tandem

Effective Date: April 10, 2025  |  Last Updated: April 10, 2025

Introduction

Tandem ("we," "our," or "us") is operated by Shipfast, Inc with Upsilon Technologies Pvt Ltd, located at 131 Continental Dr, Suite 305, Newark, DE 19713, United States.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Tandem (the "App"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.

Information We Collect

1. Personal Information

When you register for an account, we collect:

  • Name/Nickname: The display name you choose
  • Email Address: From your sign-in authentication
  • Account Information: Profile information from authentication providers

2. Health & Fitness Data

With your explicit permission, we collect:

  • Step Count Data: Your daily step counts read from Apple HealthKit or Google Health Connect
  • Step History: Historical step data to calculate streaks, trends, and leaderboards
  • Activity Timestamps: When step data was recorded and synced

Important: We access step count data only. We do not access or store any other health data such as heart rate, sleep, weight, medical records, or any sensitive health information.

3. Social & Competition Data

We collect and store:

  • Friends List: Users you have added as friends in the App
  • Challenge Data: Competitions you participate in and their results
  • Leaderboard Rankings: Your position relative to friends based on step counts
  • Streaks & Milestones: Your consecutive activity days and achievements

4. Technical Information

We automatically collect:

  • Device Information: Device type, operating system version
  • App Usage Data: Features used, crash reports, performance metrics
  • Analytics Data: User behavior, session duration, feature engagement
  • Error Logs: Technical errors for debugging via Sentry

5. Usage and Analytics

We use third-party analytics services to understand app usage:

  • Google Analytics: User behavior, demographics, and engagement metrics
  • Sentry: Error tracking and crash reporting

How We Use Your Information

1. Core App Functionality

  • Track and display your daily step counts
  • Calculate streaks, milestones, and personal records
  • Power leaderboards and friend competitions
  • Match you with friends and display shared challenge results

2. Improving User Experience

  • Personalize your activity experience
  • Fix bugs and improve app performance
  • Analyze usage patterns to add new features

3. Analytics and Insights

  • Understand how users engage with the app
  • Measure feature adoption and user retention
  • Generate aggregated, anonymized statistics

4. Communications

  • Send important app updates and notifications
  • Respond to your support inquiries
  • Notify you of friend activity and challenge updates (if enabled)

Data Sharing and Disclosure

Information Shared with Third Parties

We may share your information with:

1. Service Providers

  • Supabase: Database and backend infrastructure
  • Google Cloud: Authentication services
  • Sentry: Error tracking and monitoring
  • Google Analytics: Usage analytics

2. Your Friends in the App

  • Your display name, step counts, and leaderboard rankings are visible to users you have added as friends
  • Challenge results and streaks are shared with participants of those challenges

3. Aggregated, Anonymized Data

  • We may share anonymized, aggregated statistics with partners
  • This data cannot be used to identify individual users

4. Legal Requirements

  • When required by law, court order, or government request
  • To protect our rights, property, or safety
  • To prevent fraud or illegal activity

We Do Not Sell Your Personal Data

While we share aggregated, anonymized statistics, we do not sell your personally identifiable information to third parties.

Health & Fitness Data Privacy

What We Access

  • We use Apple HealthKit and/or Google Health Connect to read your step count data
  • We access only step count information — no other health metrics
  • We do not access heart rate, sleep data, nutrition, medical records, or any other sensitive health information

How We Use Health Data

  • Display your daily and historical step counts
  • Calculate leaderboard rankings among your friends
  • Track streaks and personal milestones
  • Power step-based challenges and competitions

Your Control

  • You choose whether to grant step data access when prompted
  • You can revoke health data access anytime in your device settings
  • Revoking access will stop step syncing but retain previously synced data in your account

Data Security

We implement security measures to protect your information:

  • Encryption: Data is encrypted in transit (HTTPS) and at rest
  • Authentication: Secure sign-in with OAuth 2.0
  • Row-Level Security (RLS): Database policies ensure users can only access their own data
  • Access Controls: Limited employee access to user data
  • Regular Audits: Security reviews and updates

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

Your Privacy Rights

Access and Control

You have the right to:

  • Access Your Data: View all personal data we store about you
  • Update Your Information: Change your profile details in the app
  • Delete Your Account: Request deletion of your account and personal data

Account Deletion

If you delete your account:

  1. Immediate Actions: Your personal information will be marked for deletion. You will be removed from all leaderboards and challenges. You cannot access your account.
  2. 30-Day Grace Period: Your data is retained for 30 days in case of accidental deletion. You can contact us within 30 days to restore your account.
  3. After 30 Days: All personal data is permanently deleted. Anonymized activity statistics may be retained but cannot be traced back to you.

How to Delete Your Account

To delete your account:

  1. Contact us at hi@barun.aiwith subject "Account Deletion Request — Tandem"
  2. Include your registered email address
  3. We will process your request within 7 business days

Children's Privacy

Tandem is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at hi@barun.ai.

International Data Transfers

Your information may be transferred to and stored on servers located in the United States and other countries. By using the App, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

Third-Party Services

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. Please review their privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new Privacy Policy in the app
  • Updating the "Last Updated" date at the top of this policy
  • Sending you an email notification (for material changes)

Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy.

Data Retention

We retain your data for as long as:

  • Your account is active
  • Needed to provide you with services
  • Required by law or for legitimate business purposes

After account deletion, we retain data for 30 days, then permanently delete all personal information (anonymized stats may be retained).

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

  • Email: hi@barun.ai
  • Company: Shipfast, Inc with Upsilon Technologies Pvt Ltd
  • Address: 131 Continental Dr, Suite 305, Newark, DE 19713, United States

Your Consent

By using the App, you consent to this Privacy Policy and agree to its terms.

Note to Users in the European Union (GDPR)

If you are located in the EU, you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to data portability (receive your data in a machine-readable format)
  • Right to object to processing
  • Right to lodge a complaint with your local data protection authority

Note to California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

  • Right to know what personal information is collected
  • Right to know whether personal information is sold or disclosed
  • Right to opt-out of the sale of personal information
  • Right to non-discrimination for exercising your rights

To exercise these rights, contact us at hi@barun.ai.

Last Updated: April 10, 2025