Privacy Policy · TailTandem

TailTandem is offered by LabsByMe LLC, a Nevada limited liability company (“TailTandem,” “we,” “us,” or “our”). This Policy explains what information the TailTandem app and related services (the “Service”) handle, why, and the choices you have.

TailTandem helps people keep pet medication records and coordinate caregiving. It is not veterinary care and not a substitute for a veterinarian. Do not put human medical information in the Service.

The short version

Your households’ records are kept on our servers, so that everyone you share a household with sees the same records, and a copy is kept on each of their phones so the app works without a connection. Information also leaves your phone when you buy something, contact us, or export it yourself.
We do not sell personal information, show ads, or use advertising, tracking, or third-party analytics SDKs.
Pet-care records can say something about the people who keep them. We treat them as confidential personal data.
You can export or delete your data in the app, and reach us at support@tailtandem.com.

1. Who is responsible

LabsByMe LLC is the controller of the personal data described in this Policy. Apple, Google, Stripe, and the other providers named below process some information under their own terms and privacy notices, which this Policy does not cover.

2. Information we handle

Information you enter. Pets’ names, species, breeds, and pictures; medication names, forms, strengths, routes, amounts, the most to give in a day as you write it, and notes; whether a medication is active, paused, or archived, and when it was paused or archived; which pets a household chose to keep active when it is over the free plan’s limit, and when that choice was made; which of your households you chose to keep on the free plan, and when, and which of them are archived because none has Premium; vaccines; schedules; the care you record — doses given or skipped, meals, walks, weights, symptoms, test results, vet visits, and appointments — with who recorded each and when; household names, the household’s time zone, and your private name for a household; and your reminder settings, such as reminder times, follow-ups, quiet hours, and sound. Your appearance and format settings stay on your phone.

Documents you upload. Photos and PDF files you add to a pet, to a record, or from the pet’s Documents screen, including a photo of a medication label or a vaccination certificate: the file itself, the title and notes you give it, the kind of file it is, its size, the name it arrived with, and which record it was added from. A document can contain veterinary health information about your pet — a laboratory report, a vaccination certificate, an invoice, discharge notes — and, wherever they appear in the document, your own name, address, or contact details, or a clinic’s and its staff’s. We do not read your documents, analyze them, index their contents, or use them to train anything. They are stored encrypted, and only people with access to that household — including anyone who joined through one of its caregiver links — can open them. The instruction at the top of this Policy applies to them too: do not put human medical information in the Service, including in a document.

Account information. Every account has a random identifier, the date it was created, and the households it belongs to. If you sign up, we also keep your email address — or, if you use Sign in with Apple, the identifier Apple gives us and the email address Apple shares, which can be a private relay address — and when you signed in. You sign in with a one-time code sent to your email address or with Apple; TailTandem has no passwords, and we never see your Apple password.

Accounts made without signing up. If you start without an account, or open a caregiver link in the app, the app creates an account for you on our servers without asking for an email address. It holds what any account holds apart from an email address: a random identifier, when it was created, its household memberships and reminder settings, and the care recorded through it. It is tied to the app on that phone and may not be recoverable if the app is deleted or the phone is lost. Section 7 says when one is deleted or, if unused, closed.

Household sharing information. For each household: its owner; the people with access and their roles (owner, admin, or member); when each person’s access starts and, if it has one, when it ends; the invitations and caregiver links its administrators have made; and which invitation or link each person joined through. For a caregiver link: its label, who created it, a one-way hash of the link (never the link itself), and when it was revoked or, if it has an end date, when it expires. Everyone who opens a caregiver link becomes a member of the household, and the care they record is attributed to their account.

Device and app information. When you save reminder settings, the time zone your phone is set to, so that quiet hours and emailed reminder times are right where you are. The household’s time zone, which is set from the phone of whoever creates the household and can be changed in the household’s settings; doses fall due by it, and a vaccine or other record planned for a day rather than a time comes due at 09:00 in it. If your phone registers for push notifications from our servers, a push token for it and how far ahead the phone has already scheduled its own reminders. The app version, platform, operating-system version, and language setting, only as part of usage information or a problem report (both below). Like any internet service, our servers and hosting provider record the IP address and time of each request in their logs; we use them only to run and secure the Service. We do not collect precise location, contacts, or advertising identifiers.

Usage information. Which screens you open and how long you spend on each (the kind of screen, such as a pet’s page, never which pet); when the app opens, comes back from the background, and goes into it; whether a sync with our servers succeeded or failed; the kind of error when the app runs into one it did not expect, never its message; changes to your appearance, clock, unit, and week-start settings; whether notifications and background refresh are allowed; and the features you use — adding a pet or a medication, saving a schedule (its kind and how it repeats), recording or undoing care (its kind and whether it was given, skipped, or ignored), starting the free trial, opening checkout, creating a caregiver link, joining a household, signing out, sending a problem report, and turning usage sharing on. Each event carries your account identifier, a random identifier for the app installation, a random identifier for the session, the app version, platform, operating-system version, and language setting, and when it happened. Usage information never includes pet names, medication names, amounts, notes, photos, documents, anything else you type, or which record an event was about. We collect it in our own database, not through a third-party analytics service.

When usage information is collected. Nothing is collected unless usage sharing is on. In the European Economic Area, the United Kingdom, and Switzerland — and wherever the app cannot tell which country you are in — sharing stays off until you say yes: we ask during setup, may ask again later if you choose Not now (never more than once a month), and you can turn it on yourself. Everywhere else, creating an account with an email address or with Apple also turns sharing on, as the sign-in screen says, unless you have already turned it off; using TailTandem without signing up, including through a caregiver link, does not. The app works out your country from your App Store country or your device’s region setting, never from your IP address. You can turn sharing on or off at any time under Settings › Account and data › Share usage data; turning it off also discards whatever has not been sent yet.

Purchase information. When you buy Premium, Stripe, our payment processor, takes the payment on a checkout page it hosts and collects your payment details and email address under its own terms and privacy notice. We give Stripe the identifiers of the household and of your account so the payment can be matched to them. We keep the subscription’s identifier and status, which household it is for, when the current billing period ends, whether it is set to end then rather than renew, and the price, currency, and billing interval it renews at, as Stripe reports them. On our servers only, we also keep which account bought it, so that only that person can manage it and so that it stops renewing if that account is deleted. We never receive your card number. If you start the free trial, we record on your account when it began and when it ends.

Support and feedback. What you write in a problem report, the household that was open when you sent it, the optional screenshot you choose to attach, and — unless you switch them off before sending — diagnostic facts about the app and device: app version and build, platform and operating-system version, device model, language, time zone, and whether notifications and background refresh are allowed. Diagnostics never include pet, medication, dose, or note content. We also keep any emails you send us.

The Assistant tab. The Assistant tab does not currently answer requests. Nothing you type or say there is kept, sent to us, or sent to anyone else.

Reminders. Your phone schedules its own reminder notifications, and our servers can also send push notifications and, if you choose email for a reminder, emails. A reminder notification’s title names the pet and the medication, and so does an email reminder’s subject line, with the time the dose is due; a reminder never includes an amount. Because of this, a reminder can show the pet’s and the medication’s names on a locked screen, in a notification preview, or in an inbox list; your phone’s settings control whether notification previews appear on the lock screen. Push notifications pass through Expo and then Apple’s or Google’s notification service. Email reminders go to your account’s email address, and accounts made without signing up have none. We keep a record of each reminder our servers send — which reminder, to which account, by which channel, and when — for 30 days so that nobody is sent the same reminder twice.

Service emails. If your account has an email address, we email you when your free trial is about to end, when a household you own is deleted, and when your account’s deletion has been completed. If you own a household whose Premium is paid for by someone else and that person’s account is deleted, we tell you that the account paying for it was deleted and when Premium ends. For each notice we keep a short record of what kind it is, who it is for, and when it was queued and sent, so that nobody is told the same thing twice. The email address and the details the message needs, such as a household’s name or a date, are kept only until the notice is sent, or for 2 days if it cannot be sent; the rest of the record is deleted 30 days after the notice was queued.

Launch updates. If you join the launch list on our website, we keep your email address, when you joined, and which version of the sign-up wording you agreed to, and use them only to send TailTandem launch and product updates. To limit repeated sign-ups we keep a one-way hash of your IP address for about a day. To leave the list, email support@tailtandem.com.

We do not knowingly collect information from children (Section 9), human health information, government identifiers, financial account credentials, or biometric data.

3. Where your information lives

On your device. The app keeps a copy of the households you can open on your phone so it works without a connection, and care you record without a connection waits there until it can be sent. Signing out removes that copy from the phone, including anything not yet sent and any documents the phone had downloaded. Deleting the app, or your device’s own backups, follow your device’s behavior, not ours.

On our servers. Every household — its pets, records, people, and settings — is stored on our servers, so that its members’ phones can show the same records. That includes a household only you use. Changes to pets, medications, schedules, and people are made on our servers directly, so they need a connection. Our servers run on Supabase’s cloud infrastructure in the United States. Accounts, purchase records, problem reports, usage information, and the records of reminders and service emails we send are also kept on our servers. Our website and its launch list are hosted by Cloudflare.

Files on our servers. Pictures and documents belonging to a household are kept in private file storage in the United States, separate from the records that point at them. Nothing in that storage is public or reachable by a guessable address: every read is authorized against the same household membership as the record it belongs to. Problem-report screenshots are kept in a separate private store that only we can read. Supabase provides this storage as our processor, under contract and on our instructions.

4. How we use information

To run the Service you asked for: keeping your households’ records and sharing them with the people who have access, scheduling notifications, sending email reminders you turned on, and honoring Premium and the free trial.
To secure the Service and prevent abuse: authenticating sign-ins, authorizing access to a household, limiting how many problem reports an account can send, recording who created each invitation and when access was revoked, and investigating incidents.
To process purchases, taxes, refunds, and disputes, and to keep the records the law requires.
To answer support requests and review problem reports.
While usage sharing is on, to understand how the app is used and to improve it: which features are used, where people stop, what fails, and how many people a change reaches. We look at this in aggregate and by install, never by reading anyone’s records.
To send required service messages: sign-in codes; security messages; payment receipts and other billing emails, which Stripe sends for us; a notice before your free trial ends; confirmation when a household you own or your account is deleted; and a notice to a household’s owner when the account paying for its Premium is deleted. We do not send marketing email unless you ask for it, and you can stop it at any time.
To meet legal obligations and to establish, exercise, or defend legal claims.

Where the law of the European Economic Area or the United Kingdom applies, our legal bases are performance of our contract with you, our legitimate interests in a secure and reliable service, compliance with legal obligations, and your consent. Consent is our basis for usage information, which in those places, and in Switzerland, we collect only after you say yes. You may withdraw consent at any time without affecting earlier processing or unrelated features.

We do not use your pet-care records, notes, photos, documents, or support messages for analytics, advertising, or to train models.

With your household. Everyone with access to a household — its owner, its admins, and its members, including anyone who joined through a caregiver link — sees all of its pets, their medications, schedules, records, and documents, and who recorded what. Members’ phones also receive the household’s Premium status, including when it renews or ends and at what price; the app shows the renewal date and price only to owners and admins. People who share a household with you can see whether you signed up, when your free trial began and ends, and whether you have asked to delete your account, and after you leave they can still see this while they can see something you recorded or made there. Your private name for a household, your reminder settings, your email address, and which account pays for a household’s Premium stay private. If you pay for Premium on a household you do not own and delete your account, its owner is told that the account paying for it was deleted and when Premium ends.
With service providers. Companies that host our servers, database, file storage, and website, deliver email and push notifications, and process payments. Supabase hosts the backend and the private storage that holds your pictures and documents; Supabase and our email delivery provider send sign-in codes, email reminders, and service emails; Expo relays push notifications to Apple’s and Google’s notification services for phones that have registered for them; Stripe processes payments; Cloudflare hosts our website and its launch list. A service provider may hold a document only to store and serve it back to you; none of them is permitted to read it for any purpose of their own.
With Apple and Google. For Sign in with Apple, app downloads, and notification delivery, as their own terms describe.
For legal reasons. When required by law or a valid legal request, or when reasonably necessary to protect the rights, safety, or security of TailTandem, our users, or others. We do not send pet information to veterinarians, clinics, poison-control services, or emergency services on our own.
In a business change. If LabsByMe is involved in a merger, financing, reorganization, or sale, information may transfer with it under this Policy.
At your direction. When you export, share, or send information yourself.

We do not sell personal information, share it for cross-context behavioral advertising, or give it to data brokers.

6. Caregiver links

A household owner or admin can create a caregiver link that lets someone help without signing up. Opening the link in the app creates an account for that person on that phone (Section 2) and makes them a member of the household: they see all of its pets and records, including records made before they joined and pets added later, and they can record, correct, and undo care, but they cannot manage the household. Whoever holds the link can use it until it is revoked or expires, so treat it like a key. Revoking a link can also end the access of the people who joined through it, and an owner or admin can end any member’s access. Ending access takes effect on our servers and on phones when they next check in, but it cannot erase what a person has already seen, copied, or forwarded.

7. How long we keep information

The copy on your phone: until you sign out or delete the app.
Household records on our servers: while the household exists. Deleting a pet or a household starts deletion of its records, which completes within 30 days. Deleting a medication deletes its schedules and history. Backup copies are kept for a short, fixed period and then overwritten; they are used only to restore service after a failure, never to bring back records you deleted.
Pictures and documents: with whatever they belong to. Deleting a document removes its file as well as the row that points at it. Deleting the record a document was added through takes that document with it; a document you added from the pet’s Documents screen belongs to the pet and stays until the pet does. Deleting a pet, a household, or your account removes their files too, and a nightly sweep removes any left behind by a document, pet, or household that is already gone, the next night or the one after.
Accounts: if you signed up and ask to delete your account, it is deleted, and its data deleted or de-identified, within 33 days of your request; signing in again before then cancels the request. The households you own are deleted with everything in them, after their Premium subscriptions are cancelled; Premium you pay for on a household you do not own stops renewing; and your account is closed, including your sign-in and the email address or Apple identity it uses. Care you recorded in a household that continues to exist stays in its history, attributed to “Former caregiver” rather than to you.
Accounts made without signing up, deleted on request: deleted as soon as you ask, in the same way: Premium on the households it owns is cancelled first, Premium it pays for on someone else’s household stops renewing, and then its households are deleted and the account is closed. It cannot be restored. Its problem reports are removed by the next nightly sweep, and any files left behind the next night or the one after.
Accounts made without signing up: closed after 90 days in which they have had no current access to any household, recorded no care, and not otherwise changed, unless they own a household. Closing one deletes its memberships, reminder settings, push registrations, usage information, and problem reports; care it recorded stays with the household, attributed to “Former caregiver”.
Everything else: we keep information only as long as the purpose it was collected for requires, and delete it when that purpose ends or you ask us to, whichever comes first, unless the law requires us to keep it longer.
Purchase records: our copy of a subscription, including which account bought it, is deleted with its household. Payment records held in our Stripe account are kept as long as the law requires for tax, accounting, and dispute purposes, typically seven years.
Reminder records: the record of each reminder our servers sent is deleted after 30 days.
Service-email records: the email address and message details are deleted once the notice is sent, or after 2 days if it cannot be sent; the rest of the record is deleted 30 days after the notice was queued.
Problem reports and screenshots: deleted 90 days after the report is closed, and no later than 180 days after it was sent, unless a legal hold applies. When the account that sent a report is closed, the report and its screenshot are deleted that night or the next.
Usage information: individual events are deleted after 13 months, and all of an account’s events are deleted when the account is closed. Totals that no longer identify an install or an account may be kept.
Support email: as long as needed to help you and to keep a record of what was agreed.

8. Your choices and rights

You can do these in the app without asking us: edit or delete pets, medications, and records; export all of your data; leave or delete a household; revoke a caregiver link; turn usage sharing on or off; sign out; and delete your account under Settings › Account and data.

The export is one machine-readable file with your account, your reminder settings, and every household you can open; documents are listed in it, not attached. When you are online, it also includes what only our servers keep about you: your usage information, your problem reports (a screenshot is named, not attached), and the record of reminders our servers sent you. If those cannot be fetched, the file says so.

Depending on where you live, you may also have the right to access, correct, delete, or receive a copy of your personal data; to restrict or object to our processing; to withdraw consent; to opt out of sales, sharing, targeted advertising, or profiling (we do none of these); to appeal a decision we make about a request; and to complain to a privacy regulator. To exercise a right, email support@tailtandem.com. We will verify that the request comes from you, respond within the time the law allows, and never ask for more than we need. Where a household includes other people, we balance your rights with theirs; an export or deletion never exposes another household’s data or rewrites a dose record.

We honor legally recognized browser and device opt-out signals, such as Global Privacy Control, where they apply.

9. Children

The Service is for adults. It is not directed to children under 13, or under the higher age at which your country requires a parent’s permission for services like this. If we learn that we have collected a child’s personal data without the permission the law requires, we will delete it.

10. Security

We use encryption in transit and at rest, access controls that limit who and what can read a household’s records, least-privilege access for our own staff, logging, and regular updates. No system is perfectly secure. Keep your device and sign-in method secure, review who has access to your households, and tell us at support@tailtandem.com if you suspect unauthorized access.

11. International transfers

LabsByMe LLC is in the United States, and your information is processed there. If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum, together with appropriate additional measures, for transfers of your data to the United States.

12. Region-specific information

European Economic Area and United Kingdom. You may complain to the data protection authority where you live or work, or to the UK Information Commissioner’s Office.
Canada. You may complain to the Office of the Privacy Commissioner of Canada or your provincial authority, including Quebec’s Commission d’accès à l’information.
Australia and New Zealand. You may complain to us and to the Office of the Australian Information Commissioner or the New Zealand Office of the Privacy Commissioner.
United States. Residents of states with privacy laws have the rights described in Section 8. We do not sell or share personal information as those laws define it, and we do not use sensitive personal information to infer characteristics about you. You may use an authorized agent to make a request; we will ask for proof of the agent’s authority.

13. Changes to this Policy

We may update this Policy. We will change the dates above, and if a change materially affects how we handle your information we will tell you in the app or by email before it takes effect. We will not use an update to justify a materially different use of information already collected without asking you first.

14. Contact us

LabsByMe LLC TailTandem Email: support@tailtandem.com Web: https://tailtandem.com

For a suspected medication error, extra dose, adverse reaction, or any urgent animal-care issue, contact a veterinarian, emergency veterinary clinic, or animal poison-control service immediately. TailTandem support cannot assess or treat the situation.