your family’s information, and what we do with it
privacy policy.
Effective 11 September 2026. Last updated 13 September 2026.
About this policy
tend & tally is a family planner for a screen in your kitchen. It is operated by TEND & TALLY, a business registered in Australia.
This policy explains what personal information we collect, why we collect it, who else can see it, and how you can reach us about it. It is written to the Australian Privacy Principles in the Privacy Act 1988 (Cth).
It applies to this website and to the tend & tally app. It does not apply to Google, Apple or any other service you choose to connect, which have their own policies.
The short version
- We sell a family planner for one yearly price. We do not sell advertising.
- We do not sell or rent your information, and we do not use your family's information to train AI models.
- Your family's information is stored in Australia.
- You can ask for a copy of your information, or ask us to delete it, at any time.
The rest of this page is the detail behind those four lines.
What we collect
We collect only what the planner needs to work.
- Your account. The email address you sign up with, and a one-way hash of your password — we never store the password itself. If you set a parent PIN, we store a one-way hash of that too.
- What your family puts in the planner. Calendar events, to-dos, chores, stars and rewards, meals and recipes, shopping lists, birthdays, member names and profile pictures. A parent enters the children's details; children do not have their own accounts.
- Calendars you connect. If you connect Google Calendar or Apple iCloud, we read the events in the calendars you pick and write back the events your family creates here.
- Photos you upload for the screensaver slideshow.
- Technical information. The requests your devices make, the time they were made and the network address they came from, kept in short-lived server logs so we can run the service and spot abuse.
- Subscription records. Whether your family's subscription is active, and when it renews.
If you join the waitlist before the planner opens, we collect your email address and nothing else. That is a separate record from an account, and it has its own section below.
We do not collect your location, your contacts, or anything from your device beyond the above.
How we collect it
Almost all of it comes straight from you, as you use the planner. Calendar information comes from Google or Apple, and only after you sign in there and grant permission. Technical information is recorded automatically by our servers.
You can use a child profile without giving us anything at all; only the parent who sets the family up needs an account.
Why we use it
- To show your family's week on the wall, and to keep it in step with the calendars you connect.
- To send the emails the service needs: address verification, password resets and subscription receipts.
- To keep the service working and secure, including rate limiting and fraud prevention.
- To answer you when you ask us for help.
- To meet our legal obligations.
We do not use your family's information for advertising, profiling, credit assessment, or to train AI models.
If you connect a Google account
Connecting Google Calendar is optional, and the planner works without it.
When you connect, Google shows you a consent screen listing what we are asking for: permission to see the list of calendars on your account, and to see and change the events in the calendars you choose. That is so the planner can show your events on the family's screen, and so events your family creates here appear in your Google Calendar.
We store the calendar entries we need to show and to sync — title, time, place, notes, recurrence and which calendar each came from — and we store the access token Google gives us, encrypted.
tend & tally's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
That means we use Google user data only to provide the features described here, we do not transfer it to anyone else except as needed to run the service, to comply with the law, or with your consent, and we never sell it or use it for advertising. No human at our end reads your calendar except where you have asked us for help with a specific problem, or where the law requires it.
You can disconnect the account in Settings at any time, which deletes the stored token and stops the sync. You can also revoke our access from your Google account permissions page.
If you connect an iCloud calendar
Apple has no equivalent one-click connection, so iCloud calendars use an app-specific password that you create in your Apple account and paste into the planner. We store it encrypted and use it only to read and write the calendars you choose.
You can revoke that password at any time from your Apple account, which immediately ends our access.
Where your information is held
Your family's planner data — the database, the uploaded photos and the backups — is held in Australia, and the backups are not copied to another country.
Some of our suppliers are overseas companies, so the following are likely overseas recipients: Cloudflare, which serves this website from data centres around the world, including in the United States; Kit, which holds waitlist email addresses in the United States; and our payment provider, which may process billing information in the United States, the United Kingdom or the European Union. Our email supplier is Microsoft, with the message data kept in Australia.
How we protect it
- Everything travels over an encrypted connection (TLS), and is encrypted where it is stored.
- The credentials for connected calendars, and your household's own written notes, are encrypted with keys held in a managed key vault that our application cannot export.
- Each family's rows are separated inside the database, so one family's session cannot read another's.
- Parent-only screens are enforced on the server, not merely hidden in the app.
No service can promise perfect security. If a data breach happens and it is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
How long we keep it
We keep your family's information while your account is open, because it is the planner. If you close your account, or ask us to delete it, we delete the family's data within 30 days, and it ages out of our encrypted backups within a further 7 days.
Short-lived server logs are kept for up to 30 days. We keep the records of payments for as long as tax law requires, which is generally five years; those are subscription and invoice records, not your family's planner contents.
Children's information
The planner is built for a whole household, so it holds information about children: a first name, a picture, birthdays, chores and the stars they have earned. A parent enters all of it, and a parent can change or remove any of it at any time.
Children do not have their own accounts, we do not ask children for an email address or a phone number, and we do not show advertising to anyone.
If you believe a child's information is in the planner and should not be, email us and we will remove it.
Seeing, correcting and deleting your information
Most of it you can see and change directly in the app, which is the fastest route.
For anything else — a copy of everything we hold, a correction, or deletion of the whole family — email [email protected]. We will ask you to confirm who you are, and we will answer within 30 days. We do not charge for this.
If we cannot give you access or make a correction, we will tell you why in writing, and how to complain about that decision.
If you join the waitlist
The waitlist is not a tend & tally account, and joining it does not create one. It is a list of people who asked to be told when the planner opens.
We collect one thing: your email address. We also record which link brought you here — an email, a social post, a printed card — so we know what is working. That is a label on the signup, not a record of your browsing, and it says nothing about who you are.
We use the address to tell you when the planner opens and to send news about it now and then. Nothing else. We do not sell or rent it and we never pass it to anyone for their own marketing.
We send one email first to check the address is yours. You are on the list only after you click the link in it, so nobody can put your address on our list but you.
The list runs on Kit, which stores the address in the United States. Kit handles it for us under contract and may not use it for its own purposes. Australian privacy law treats this as sending your information overseas, which is why we say so here, before you join, rather than afterwards.
Every email we send to the list has an unsubscribe link. One click and we stop. You can also email us and ask us to delete the address altogether, and we will do that instead.
If you later open an account, that account is a separate record under the rest of this policy. Unsubscribing does not close an account, and closing an account does not unsubscribe you.
Emails we send
While you have an account we send service emails — address verification, password resets, receipts and important changes to the service. You cannot opt out of these while the account is open, because they are how the account works.
We only send news or launch updates if you asked for them, and every one of those has an unsubscribe link that works.
Complaints
If you think we have mishandled your personal information, email [email protected] and tell us what happened. We will acknowledge it within 5 business days and give you an answer within 30 days.
If our answer does not satisfy you, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Changes to this policy
We update this page when the service changes. The date at the top is the version you are reading. If a change matters to you, we will also tell you by email or in the app before it takes effect.
How to contact us
TEND & TALLY, Australia.
Privacy enquiries: [email protected].