Product analytics · addition dated 9 October 2026
If you choose “Help improve Tandayo”, the app shares screen names, times, platform and random visit identifiers linked to your adult account with Premex. Authorised operators can view your account's screen journey to understand use and improve the product. Household text and child profile activity are excluded. This analysis does not retain recordings, IP addresses, full URLs or advertising identifiers.
The choice is optional, off by default and does not affect app functionality. You can opt in during registration or in Settings. Turn it off there at any time to delete collected screen history from the live database. Account deletion also removes it. Data is retained for at most 90 days on Premex infrastructure. Backups follow the retention and restoration rules in the privacy notice. Consent is the legal basis for the screen journey. Contact dpo@premex.se about your rights or an erasure request.
When you opt in, we combine the screen journey with limited milestones from existing account records, such as registration and household creation, within the same 90-day period and for the same product improvement purpose. Opting out also stops this combination. Ordinary account administration and household functional history are unaffected. Household text and child profiles are excluded from product analytics.
On the public website we count delivered pages by day, page and broad referral category. These totals use no cookie, visitor identifier or account link. Reloads and bots may count. The app's small event queue exists only in memory and disappears when it closes; no separate tracking identifier is saved in browser storage.
Tandayo privacy notice
Effective 24 September 2026.
Who is responsible?
Premex AB (559253-4134), Jerikovägen 12, 141 32 Huddinge, Sweden, is responsible for personal data processed in Tandayo at tandayo.com. Contact contact@premex.se or our data protection contact dpo@premex.se.
What we process and why
We process your email address, password hash, account identifiers and session tokens to create and secure your account and provide the service under our agreement with you. Email and a password are required to create an account. Passwords are not stored as plain text.
We store household membership, roles, profile names, optional profile PIN hashes, time zones, tasks, instructions, recurrence rules, assignments, progress and activity history to provide shared planning and synchronisation. Household members can see shared household information. Choose profile names and task descriptions with this sharing in mind. Do not add health information or other sensitive personal information to task descriptions.
Profiles may describe people, including children, who do not have an account. Their information may be supplied by a household account holder. Tandayo is intended for household members from age six. Accounts are intended for adults aged 18 or over; children use profiles managed by a responsible adult. Use a nickname where possible, and do not enter birth dates, health information or location data. For essential ordinary household coordination, we rely on our legitimate interest and the household members’ interest in a shared plan. We balance that limited purpose against each person’s rights, with particular protection for children. This does not authorise sensitive information, surveillance or unrelated profiling. You can object and ask us to remove information without having an account. A caregiver role in the app does not itself verify legal guardianship or parental consent.
We process invitation addresses and invitation tokens to deliver and redeem household invitations. Invitations sent by email use Twilio SendGrid, with email open and click tracking disabled in our integration. We process messages you email us or send through Premex Support to answer questions and privacy requests, based on our legitimate interest in helping users. Support stores a separate browser identifier and the messages you submit in a private GitHub repository accessible to authorised support staff. Your app credentials and household data are not attached automatically. Only include information needed for your question. Security and operational records are used to protect the service and investigate faults, based on our legitimate interest in operating a secure service; this interest must be balanced against the rights of the people concerned, especially children.
Optional push notifications use a device registration token or browser push subscription linked to your account and session. We use these to deliver generic assignment, review and reminder messages when you enable notifications. Task titles, descriptions and review notes are not included in push messages. Android and iOS use Google Firebase Cloud Messaging; iOS delivery also uses Apple Push Notification service. Browser delivery uses your browser’s push provider. Providers receive the delivery identifier and technical connection information. Turning notifications off stops Tandayo delivery; signing out removes that session’s backend registration. This does not delete provider installation identifiers. Contact dpo@premex.se with deletion requests.
The current app has no advertising or analytics SDK, and does not request your location, contacts, camera or photo library. We do not sell personal data or use task data for advertising. We do not make decisions with legal or similarly significant effects solely by automated processing.
Storage, recipients and transfers
The backend runs on Premex-operated infrastructure. Data is transmitted using HTTPS. The Android, iOS and browser apps keep local household data and pending changes for offline use. Android protects saved session credentials with Android-backed encryption; iOS uses Keychain. The browser app uses storage in your browser profile, so use your own profile on shared computers. This is not end-to-end encryption of household data.
Authorised operators and service providers may process information needed to host, secure or support the service. Twilio SendGrid handles invitation delivery and GitHub handles support messages through Premex Support. These providers may process data in the United States and other countries outside the EEA. Their published transfer frameworks include the EU–US Data Privacy Framework where applicable and standard contractual clauses. See Twilio’s data protection addendum and GitHub’s privacy statement. SendGrid is not covered by Twilio’s binding corporate rules. Push providers may also process information outside the EEA. See Firebase privacy and security and Apple privacy information. Firebase retains installation identifiers until an API deletion request, followed by removal from live and backup systems within 180 days; turning off Tandayo notifications does not make that request. Contact dpo@premex.se for information about the safeguards relevant to your data or to request a copy.
Deleting your account and retention
Use Settings → Delete account in the Android, iOS or browser app, or delete your account on the website. Re-enter your account email and password. Review the affected households and type DELETE to confirm. Signing out or uninstalling is not account deletion.
Confirmed deletion removes your live account credentials and direct profile identity. If other account holders remain, their household, tasks and progress remain; your identifiers are removed from attribution. Shared task descriptions may still contain personal information: contact dpo@premex.se for individual review. If a remaining account must become caregiver, the proposed successor is shown before confirmation. If no other account remains, the entire household, managed profiles, tasks and history are deleted.
The deleting app clears its saved household data and pending changes. Other devices lose server access when they next contact the service. A disconnected device cannot be remotely wiped while offline; clear its app storage to remove its local copy.
| Information | Retention |
|---|---|
| Account and household information, including history | Kept for household use until removed through the applicable deletion process; inactivity alone does not automatically delete an account. |
| Deleted credentials and direct profile identity | Removed from the live database when deletion completes. |
| Shared tasks and progress belonging to remaining household members | Kept for their household use, with the departing person's identifiers removed. |
| Premex-operated database backups and local pre-deployment dumps | Expire within 30 days. |
| Minimal deletion receipts and replay markers | Kept for up to 45 days to prevent deleted data from reappearing after restoration. They contain identifiers and deletion times, not passwords or email addresses. |
| Tandayo backend security/operational logs | Kept for at most seven days. |
Restoring an older database must apply the latest independent deletion journal before the service accepts requests. The limits above describe Tandayo's own backend and backups, not every email provider's records. Our correspondence policy is to review and remove resolved support and email correspondence within 12 months unless a specific legal obligation or dispute requires longer retention. This is a manual process; closing a support case is not deletion. Contact dpo@premex.se to request earlier erasure. SendGrid’s published policy says message bodies are held for delivery, most event data expires within 37 days and some pseudonymised security event data can remain for up to a year. Its standard addendum provides for deletion of remaining SendGrid backup content one year after contract termination. See Twilio’s retention information. Provider backups and legal/security records can outlive deletion from the active support or email system.
Your rights
Contact dpo@premex.se to request access, correction, deletion, restriction or portability where applicable, or to object to processing based on legitimate interests. We may need proportionate information to verify your identity. We normally respond within one month; where the law permits an extension, we explain why. You may complain to the Swedish Authority for Privacy Protection, IMY, at https://www.imy.se, or to your local supervisory authority.
For children
Tandayo helps people at home share everyday tasks. An adult can add a profile for you. Your household can see its name, tasks and progress. You can use a nickname. Do not put secrets, health details or your location in a task.
We do not use your tasks for adverts or sell your information. If something about you is wrong or you do not want it in the app, tell a trusted adult or email dpo@premex.se. You can ask us yourself. You do not need your own account to ask about your information. We may ask enough questions to make sure we are helping the right person.
Changes
We will date changes to this notice and bring significant changes to users’ attention.