1. Introduction and who we are
This Privacy Policy describes how Tandem ([Entity name TBD], referred to in this policy as “Tandem”, “we”, “us”, or “our”) handles information collected through the Tandem mobile application and the website at tandemtt.vercel.app (together, the “Service”).
Tandem is operated from Trinidad and Tobago. The Service is a marketplace that connects people who need work done (“Clients”) with people who offer services (“Providers”). We provide the platform; we do not perform services and we are not a party to the engagements that Clients and Providers arrange through it.
This policy applies to information collected by the Tandem mobile app and by the marketing website at tandemtt.vercel.app, including this Privacy Policy itself, the Terms of Service, and any related pages hosted on that domain. Questions about this policy can be sent to support@tandem.tt.
2. Information we collect
(a) Information you provide
When you create an account and use Tandem, you provide us with information that includes:
- Profile information: your full name, the role you choose (Client or Provider), provider type (Individual or Business), business name (where applicable), bio, the area of Trinidad and Tobago you operate in, your service radius, the languages you speak, your years of experience, and a self-reported estimate of how many jobs you handle each month.
- Listings and portfolio: service categories, listing titles, descriptions, pricing, and the portfolio images you upload.
- Messages and quotes: the content of conversations between Clients and Providers, the structure and line items of quotes, and any attachments.
- Job and review records: the jobs you complete through Tandem, the reviews you leave and receive, and any client-feedback content tied to those jobs.
- Dispute submissions: the content of any dispute you raise or respond to through the in-app dispute system, including dispute messages.
- Reports and support correspondence: the content of any report you file about another user, and any email you send to support@tandem.tt.
(b) Information from Meta when you sign in
Tandem uses Meta (Facebook) as its sign-in provider. When you sign in, we receive authentication tokens, your Meta user identifier, the name and email address associated with your Meta account, and the URL of your Meta profile picture. We use this information to create and authenticate your Tandem account. Because Meta is currently the only way to sign in to Tandem, you cannot use the Service without completing the Meta sign-in flow.
(c) Information collected automatically
When you use the Tandem app, we automatically collect:
- Device and operating system information made available by Expo and React Native, including device type and OS version.
- IP address when your app or browser communicates with our backend.
- App-activity signals such as which screens you visit and which features you use. This data is used to operate the Service (for example, marking messages as read or surfacing profile-view counts) and is not currently sent to any third-party analytics provider.
- Push notification tokens issued by Expo Push, linked to your Tandem user record.
- Notification preferences you set in the app.
(d) Information from other users
Other users can generate information about you when they interact with you on Tandem. This includes the messages they send you, the quotes they send you, the reviews they leave for you, the contents of any dispute that names you, and the count of times your profile has been viewed.
3. How we use your information
We use the information described above to:
- Operate the marketplace — match Clients with Providers, rank and surface listings, route messages and quotes between users, and maintain the records that result (jobs, reviews, disputes).
- Send push notifications about new messages, quotes, quote acceptances and declines, job status changes, new reviews, and dispute updates, subject to your notification preferences.
- Respond to disputes raised through the in-app dispute system and enforce community standards and the Terms of Service.
- Improve the product. We do this through aggregate, internal review of usage. Tandem does not currently use any third-party analytics service. If we add one in future, we will update this policy before the change takes effect.
- Comply with legal obligations, respond to lawful requests, and enforce our agreements.
5. Sub-processors and where your data lives
Tandem is operated from Trinidad and Tobago. The cloud services we rely on to deliver the Service are operated from the United States. The current sub-processors are:
- Convex (Convex.dev, US-hosted) — backend database and file storage. Stores your user profile, provider profile (where applicable), listings, portfolio images, conversations, messages, quotes and quote line items, jobs, reviews, dispute records and dispute messages, notification records, reports, profile-view counts, and other marketplace records.
- Clerk (clerk.com, US-hosted) — authentication and session management. Stores session tokens, your user identifier, and the association between your Tandem account and your Meta account.
- Meta (Facebook, facebook.com) — OAuth sign-in provider. Meta receives your consent to sign in and returns authentication tokens, your Meta user identifier, the name and email associated with your Meta account, and your Meta profile picture URL. Meta’s own handling of your information is governed by Meta’s privacy policy.
- Expo Push (expo.dev, US-hosted) — push notification delivery. Stores the push tokens issued to your device and uses them to deliver notifications that Tandem sends.
- Vercel (vercel.com, US-hosted) — hosting for tandemtt.vercel.app, including the testimonial web form, this Privacy Policy, the Terms of Service, and related pages on that domain.
Tandem does not currently use any third-party analytics provider, payment processor, email-marketing provider, or SMS provider. If we add any such service in future, we will update this policy before the change takes effect.
Trinidad and Tobago data-protection posture
We operate from Trinidad and Tobago. Our service providers operate from the United States. Where the Trinidad and Tobago Data Protection Act 2011 applies, we comply with its requirements. Where international norms (such as the EU General Data Protection Regulation or equivalent frameworks) provide stronger user protections, we voluntarily align with them where reasonable for our scale and resources.
6. Push notifications and communication preferences
Tandem can send you push notifications for the following categories of events:
- New message in a conversation you are part of.
- New quote sent to you, or a quote you sent being accepted or declined.
- Job status updates (for example, a job marked complete).
- New review left for you.
- Dispute updates relevant to you.
You can turn push notifications off using the global Notifications toggle in the app’s Settings screen. You can also revoke push permission at the operating-system level on your device. Tandem does not run any marketing-email programme at this time. If you wish to stop receiving service emails about your account, email support@tandem.tt and we will discuss what is feasible while keeping your account functional.
7. Children
Tandem is intended for people aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18. If we learn that an account belongs to a person under 18, we will delete the account and the information associated with it. If you believe a child has provided personal information to Tandem, email support@tandem.tt and we will investigate.
8. Retention
We retain information for as long as your account is active. After your account is deleted, the following retention rules apply:
- Most account data (profile fields, listings, portfolio images, notification preferences) is deleted within 30 days of account deletion.
- Messages, quotes, job records, reviews, and dispute records may be retained for up to 24 months after account deletion in anonymised or pseudonymised form. This is so that cross-user records that involve other people’s data — such as a review you left for another user, or the other side of a dispute — remain available for dispute resolution and platform integrity. Where your name appears in such records after deletion, it is rebadged to indicate that the account no longer exists.
- Legal-hold carve-out: any data subject to active legal proceedings is retained for the duration of those proceedings, regardless of the timelines above.
9. Your rights
Subject to applicable law, you have the following rights in respect of the information Tandem holds about you:
- Access. You can request a copy of the information we hold about you by emailing support@tandem.tt. A self-serve in-app export is on our roadmap; until it ships, the email request is the way to exercise this right.
- Correction. You can edit most of your information directly in the app, through Settings and your profile screens. For fields that are not user-editable, email support@tandem.tt.
- Deletion. You can request account deletion by emailing support@tandem.tt. Instructions are also published at /data-deletion. Functional in-app deletion is on our roadmap. Section 8 describes what happens to your data after deletion.
- Restriction and objection. You can email support@tandem.tt to ask us to restrict particular processing or to object to it. We will evaluate the request under applicable law.
- Withdrawing consent. You can withdraw your consent to our processing by ceasing to use the Service and requesting account deletion.
10. Security
We use reasonable technical and organisational measures to protect the information we hold. No system is perfectly secure, and we cannot guarantee the security of information transmitted to us or stored by us.
You are responsible for keeping the credentials of your Meta account secure, because anyone who can sign in to your Meta account can sign in to your Tandem account. Do not share your Meta credentials with anyone.
11. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of the policy shows when it was last updated.
For material changes, we will provide notice in the app and by email to the address on your account at least 30 days before the change takes effect. If you keep using the Service after the notice period, the updated policy applies to you. For non-material changes (clarifications, typographical fixes, contact-information updates), the change takes effect when posted.
12. Contact us
For privacy questions or to exercise any of the rights in Section 9, email support@tandem.tt. To help us route your message, please use one of these subject lines:
- “Privacy request” — access, correction, restriction, objection.
- “Data deletion” — account deletion requests.
- “Security report” — to report a vulnerability or suspected breach.
- “General” — anything else.
Postal mail can be sent to: [Registered office address TBD].
This Privacy Policy is provided in good faith based on Tandem’s current operations as of 2026-05-21. It will be revised as the product, sub-processor list, and applicable law evolve.