Legal
Tandral Privacy Policy
Effective Date: 18 October 2026
Tandral is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and protect your data when you use our website and our iPhone, iPad and Android apps.
Lire cette politique en français.
Delete your Tandral account without the mobile app
You can delete your account through our website without reinstalling the mobile app:
- Sign in to Tandral.
- Open the Profile menu using your profile picture or initials.
- Choose Delete account.
- Type Delete my account, then select the matching button to confirm. Button labels follow the language selected in Tandral.
If you cannot sign in or need help with these steps, email support@tandral.com. Do not send your password, payment-card details or sensitive identity documents in your initial message.
Data deleted: deletion disables your account and starts removal of your account-owned study content, files, messages you sent, friend connections, and device notification and widget registrations. Removal runs in the background and may not finish immediately. Data retained: a record of the deleted account and certain identifiers and settings, billing records, safety reports and shared call history may remain. Section 5 explains the categories, retention criteria, and limitations for backups and copies held by other people.
Cancel your subscription separately if you want to stop future charges. Account deletion does not cancel a subscription, whether purchased on our website, the App Store or Google Play. For a website subscription, use Manage billing before deleting your account. For a mobile subscription, use Apple's or Google Play's subscription settings. If you have already deleted your account and need help with a website subscription, contact support. You can delete your account regardless of subscription status. Deletion is not automatically a refund request.
1. Information We Collect
- Account Information: When you create an account, we collect your name, email address, and other contact details. If you sign in with Google or Apple, we receive your name and email address from them (Apple may give us a private relay address instead).
- User Content: This includes documents (.docx, .pptx, PDF), URLs, text, topics, notes, handwriting, images, videos, answers and other materials you upload or create, together with study resources generated from them. It also includes study plans and calendar entries you create in Tandral.
- Messages and Study Together: If you add friends, we store your friend connections, the messages you send, and a record of your calls (who took part, when, and for how long).
- Camera and Photos: When you choose to turn on video in a study call or take a photo to add to a note, an essay or an answer, Tandral uses the device's camera after you grant the required permission. Photos you choose to upload or add to saved study content are handled as User Content. When your device offers an option to save an image to Photos, saving happens at your request and subject to the device's permissions.
- Microphone and Voice Study: Tandral uses your microphone when you join a study call, use a voice study feature or start dictation, after you grant the required permission. Calls between friends connect directly between devices or through our network provider. Tandral does not provide a recording feature for those calls. We store call participation, timing and technical diagnostics. During AI voice study, audio is sent to the AI provider used for that feature to generate a response, and conversation transcripts may be saved with your study content.
- Dictation: When you start dictating a note, a message or an answer, speech recognition turns your spoken words into text. On iPhone and iPad this uses Apple's speech-recognition service; on Android it uses the speech-recognition service configured on your device. Depending on the device, language and service, audio may be processed on the device or sent to the speech-service provider. Dictation is not guaranteed to stay on-device. Text that you save or send is handled in the same way as text you type. The speech-service provider's own privacy terms also apply to its processing.
- Usage Data: Information on how you use our services, including your interactions with the application, study sessions, and user preferences.
- Payment Information: Purchases on our website are processed by Stripe, which collects your card and billing details; we do not store card numbers. Purchases in our apps are processed by Apple or Google, and we receive a record of what you bought through our subscription provider, RevenueCat, but not your payment details.
- Device Information: When you create an account on our website, we may use a browser identifier from Fingerprint to prevent abuse of the free introductory credits. Our apps do the same with a device check instead: on iPhone and iPad, Apple's DeviceCheck service lets us record that a device has already received the introductory credits; on Android, we store a one-way hash of the app's device identifier. Neither is used for advertising. We use account, session and installation identifiers for sign-in, notifications and widgets. If you allow notifications, we store the notification token needed to send reminders and messages to your device. Notification services may also process installation identifiers and device or app-version information needed to deliver notifications.
- Support and Safety: If you contact support or report a problem or another user, we receive the information you send, such as your message, selected content or screenshots, the accounts involved and technical context. We use this to respond, investigate and keep the service safe.
- Cookies: We use cookies and similar technologies to keep you signed in, track user activity on our website, and collect data to improve our services.
2. How We Use Your Information
- Providing and Improving the Service: Customize and enhance your learning experience, convert your materials into interactive lessons, and provide tailored educational assistance.
- Educational Assistance: Transform study materials into personalized lessons, quizzes, and feedback for better learning outcomes.
- Communication: Send account and service emails, respond to support requests, and deliver reminders and message or call notifications you use. We do not use your email address to send promotional emails.
- Payment Processing: Process payments and manage subscriptions through Stripe, Apple, and Google.
- Analytics and Advertising Measurement: Analyze usage data to improve and optimize our services. On our website and in our apps we use analytics and advertising measurement tools (PostHog, Meta, TikTok and Google) to understand how people find and use Tandral, and we may share limited event information, such as an app install, a sign-up or a purchase, with Meta, TikTok and Google to measure our advertising.
- Safety and Reliability: Manage account access, prevent abuse, investigate reports and diagnose technical problems, including call-connection problems.
In our iPhone, iPad and Android apps, the measurement tools (the Meta, TikTok and Google Firebase software kits) do not read your device's advertising identifier, and we do not ask for permission to track you across other companies' apps and websites. On iPhone and iPad, the sign-up and purchase reports we send to Meta contain no email address and are marked as not permitted for tracking, so they are only used for aggregated advertising measurement. Our product analytics never records what you type.
3. Information Sharing
We do not sell or rent your personal information to third parties. We may share your information with the following entities under limited circumstances:
- Service Providers: Third-party vendors used to deliver the features you use, such as hosting and storage (Amazon Web Services and MongoDB Atlas), AI processing (which can include OpenAI, Google, Anthropic, xAI, DeepInfra or OpenRouter, depending on the feature and model), speech synthesis (Google Cloud and Amazon Polly), device speech recognition (Apple or the speech-recognition provider configured on your Android device), citation search (OpenAlex), payments (Stripe, Apple, Google and RevenueCat), email (SendGrid), call connections (Cloudflare), notifications (Apple Push Notification service and Firebase Cloud Messaging), abuse prevention (Fingerprint on our website and Apple DeviceCheck in our iPhone and iPad app), and analytics and advertising measurement (PostHog, Meta, TikTok and Google, including Firebase in our apps).
- People You Choose: Content you share with a link, send in a message, or show in a call is visible to the people you share it with.
- Legal Compliance: If required by law or to protect the rights, property, or safety of Tandral, our users, or others.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets.
4. Data Security
We use safeguards designed to protect your personal information from unauthorized access, use or disclosure. Connections to Tandral's service use encrypted transport. Stored messages and study content may be processed by Tandral and the providers needed to deliver the features you use; they are not protected by end-to-end encryption that makes them unreadable to those services. No method of transmission or storage is completely secure.
5. Data Retention and Location
We retain personal information as necessary to provide our services, comply with legal obligations, resolve disputes and enforce our agreements. After account deletion, removal of account-owned content and files runs in the background and may not finish immediately.
Account deletion does not remove every record. We retain a record of the deleted account and certain identifiers and settings; billing, payment and credit records; safety reports, including reported content; call history shared with other participants; and technical call diagnostics. These records support accounting, refunds, the handling of disputes and abuse, and the continued operation of shared history. They are not subject to the same automatic purge as your study content, and there is no single fixed retention period for all of these categories. The applicable period depends on the purpose, outstanding transactions or investigations, and legal record-keeping requirements. Contact support@tandral.com for information about records retained in your case.
Deletion does not necessarily remove copies that other people have already received or exported. Copies in backups may remain until those backups are replaced or removed; deleting an account is not an immediate erasure of every backup.
Tandral uses cloud and service providers that may process information outside your country, including in Canada, the United States and other countries where those providers operate. Processing locations depend on the feature and provider. Privacy laws and access by public authorities may differ from those in your country; we do not promise that all processing stays in Canada or on your device.
6. Your Choices and Rights
- Access and Control: You have the right to access, update, or delete your personal information at any time by logging into your account or contacting us. You can delete your account from your account settings in the app.
- Permissions: You can control camera, microphone, speech-recognition, photo and notification permissions through the options available in your device settings. Turning off a permission may make the related feature unavailable, but does not by itself delete content you previously saved or sent.
- Cookies: You can manage your cookie preferences through your browser settings.
7. Children's Privacy
Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it.
8. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on our website and updating the effective date.
9. Third-Party Services
Our application may contain links to third-party websites or services that are not owned or controlled by Tandral. We are not responsible for the privacy practices of these third-party services.
10. Use of AI Models
When you use an AI feature, the content needed for that feature is sent to the AI provider used to generate the result. This can include text, documents, images or audio, depending on the feature. Tandral does not use your content to train AI models. Processing by AI and speech-service providers, including their retention and any permitted secondary use, is subject to the applicable terms and settings for those services. Our statement about Tandral's own training practices is not a promise of zero retention or on-device processing by every provider. Do not upload material you are not authorized to share or sensitive information that is unnecessary for your studies.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us at: support@tandral.com