privacy policy

Last updated: 13 October 2026

1. who we are and what this policy covers

tendTwo is operated by Nicola Ferendinos, a sole trader based in Sydney, New South Wales, Australia. In this Privacy Policy, "tendTwo", "we", "us" and "our" refer to Nicola Ferendinos as the operator of the app and website, and as the entity responsible for your personal information. tendTwo is an app for people aged 18 and over that helps two partners share the mental load of running a home: the recurring tasks, routines and things to remember.

This Privacy Policy explains how we collect, use, store and disclose your personal information, and how you can access it, correct it, delete it, or complain about how we have handled it. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

In this policy, the "Service" means the tendTwo mobile app (iOS and Android) and our website at tendtwo.com.au. "Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Your use of the Service is also governed by our Terms & Conditions and our End-User Licence Agreement, each of which refers back to this policy for anything to do with your personal information. This policy is available free of charge on this page, and you can request a copy in another format by emailing hello@tendtwo.com.au.

2. information we collect

Information you give us

• Account details. If you sign in with Google or Apple, we receive your name and email address from them (Apple lets you hide your email, in which case we receive a relay address). Google also passes on a link to your Google profile picture. If you sign in with email, we collect the name, email address and password you enter. Passwords are stored in hashed form by Google Firebase Authentication, and we never see them.
• Your household. Your home's name, your display name and colour, the name you give your partner before they join, the invite code we create for them, and the suburb you choose for weather. We store the suburb's name and its approximate map coordinates.
• What you add to your home. Tasks, routines, library items, steps, dates and times, spaces, couple-space moments and "a little something" notes, who's doing what, what's been done and when, time blocks, trackers, and the weekdays you're usually home.
• What you tell tendTwo in chat, and the notes it keeps. If you turn chat on, tendTwo reads your messages and may save short notes about you so it can help without asking twice. Notes can cover your work and interests, how you like to be spoken to, your household (for example pets, kids or a garden), and your relationship (for example things you love doing together, date-night ideas, how you like to feel appreciated, and dates that matter). We call these your "notes". See section 5.
• Information about other people. Your partner's name, the names of helpers you add who don't use the app (a parent, a cleaner), and household contacts (a name, role, phone number and note, for example your plumber). Please only add other people's details if you're entitled to.
• Your cycle, if you choose to turn on cycle awareness. See section 4.
• Your daily wrap-up answers. On weekday afternoons tendTwo may ask how your day went ("all good", "a bit much" or "heavy"). We store your answer. If it's "a bit much" or "heavy", your partner gets a gentle notification.
• A profile photo, if you choose to add one.
• Messages to us, such as support emails.

Information from your phone, with your permission

• Calendar. If you connect your calendar, tendTwo reads events on your phone's calendars, from 30 days ago to a year ahead. Events from the calendars you choose are copied into tendTwo as tasks, with their title, date, time and length. We use each event's organiser to work out whose event it is. Once you've connected, tendTwo re-syncs about once a day when you open the app. Event locations and notes aren't copied. Synced events are shared with your partner like any other task.

  tendTwo only reads your calendar. It never adds, changes or deletes your events. On Android, the system's calendar permission prompt also mentions changing events. That's only because Android groups reading and changing calendars into one permission, and the calendar tool tendTwo uses asks for both before it will read anything. tendTwo never uses the ability to change events.

• Microphone and speech recognition. If you speak instead of typing, your phone's own speech recognition turns your voice into text. That's Apple's service on iPhone, and on Android usually Google's. That service may process your audio on its own servers under its own privacy terms. tendTwo only receives the resulting text. We never receive or store recordings.
• Camera and photos. Only the photo you choose for your profile is uploaded.
• Notifications. If you allow notifications, we store a push token that lets us send them to your device.

Information collected automatically

• Crash reports. If the app crashes, Google Firebase Crashlytics collects technical details such as the error, device model, operating system, app version and an installation identifier. We don't attach your name, email or account to crash reports.
• App integrity checks. When the app connects to our servers, it may ask Apple (App Attest) or Google (Play Integrity) to confirm it's a genuine copy of tendTwo.
• Network information. Like any internet service, our providers receive your device's IP address when the app connects. That includes Google, whose font service the app downloads its fonts from, and our weather provider (section 7).
• Server logs. Our servers keep operational logs for troubleshooting. These can include the titles of tasks created through chat.

What we don't collect

We don't collect your precise (GPS) location, your phone's contacts or address book, voice recordings, payment details, or any analytics or advertising identifiers.

Our website

tendtwo.com.au has no sign-up forms, cookies or analytics. Its pages are served by Google Firebase Hosting, which logs visitors' IP addresses for a limited period. The fonts are loaded from Google Fonts, which receives your IP address.

How we hold your information

Your account is held in Google Firebase Authentication. Your household's data is held in Google Cloud Firestore and Cloud Storage. Both are protected by encryption in transit and at rest, access controls, and database security rules. Our server code runs on Google Cloud Functions in Sydney, but the database itself is in the United States (section 8).

Anonymity and pseudonymity

You can contact us with general enquiries anonymously or under a pseudonym. In the app you can use any display name you like, and Sign in with Apple lets you hide your email address. We can't provide the Service without an account, though.

3. how we use your information

We collect, hold and use your personal information to:

• provide the Service: share your home's tasks and routines with your partner, build each day's plan, and keep track of what's done;
• send the notifications you allow, such as reminders, morning and evening summaries, weather-based nudges and updates from your partner. You control these in the app;
• run tendTwo's chat and AI-written date ideas, only if you've turned chat on (section 5);
• show local weather and time weather-based nudges for the suburb you chose;
• tailor tendTwo's nudges to your cycle, if you turn that on (section 4);
• keep the Service secure and working, including preventing misuse and fixing crashes;
• respond to your requests, questions and complaints; and
• comply with our legal obligations.

We don't use your information for advertising, and we don't build profiles of you for anyone else.

4. sensitive information: your cycle

Information about your menstrual cycle is health information, which is "sensitive information" under the Privacy Act. We only collect it with your consent. Cycle awareness is optional, and everything else in tendTwo works without it.

If you turn it on, we store:

• the start date of your most recent period;
• your typical cycle and period length;
• the period dates you log, for roughly your last 12 cycles;
• whether you share with your partner; and
• which cycle reminders you've dismissed.

We use it to:

• show your cycle screen and forecast;
• soften tendTwo's own nudges to you during harder phases; and
• only if you switch on "share with" your partner, show them a short heads-up card in the app and send them a notification when your period starts or your luteal phase begins (plus up to two gentle reminders during it). Those notifications name the phase (for example, that your period is starting), so they may appear on your partner's lock screen.

The cycle feature never sends your cycle data to Anthropic, and tendTwo's chat doesn't ask about your cycle. If you mention it in a chat anyway, that message goes to Anthropic like anything else you type (section 5), but tendTwo is instructed not to keep it in your notes. We never use cycle data for advertising, and we don't disclose it to anyone other than the service providers who store and deliver it for us.

Your cycle data is hidden from your partner in the app unless you share it. It is stored with your member profile in your household's database, though, and your partner's account can technically access that. See section 6.

Stopping. Everything is in the app, under your profile, then cycle awareness:

• switch sharing with your partner off at any time;
• switch cycle awareness off. tendTwo stops using your cycle completely: no cycle reminders, no heads-up to your partner, and no softened nudges. Your logged history is kept (shown greyed) in case you switch it back on; or
• delete my cycle history at any time. Every period you've logged and your cycle lengths are deleted for good, and cycle awareness switches off.

Deleting your account also erases your cycle data.

5. AI chat and Anthropic

Chat is optional, and it's your choice

tendTwo's chat runs on Claude, an AI model made by Anthropic, PBC, a company based in the United States. The chat covers planning your day by talking or by voice, the "about you" chat, building routines and planning your library. Anthropic processes this information on our behalf, as our service provider.

Each person decides for themselves. Before your first chat, tendTwo asks whether you want to turn chat on. It tells you that chat is powered by Anthropic and what is sent.

• If you say no, tendTwo works by hand, and nothing about you goes to Anthropic. You can still add and share tasks and routines, use your daily plan, sync your calendar and get every nudge, because none of those use AI.
• What needs chat: planning by talking, adding things by voice, the "about you" chat, and the date ideas written for you two.
• Changing your mind: you can turn chat on or off at any time in your profile.

Your choice is saved on your own member profile, and only you can change it. Your partner can't switch chat on or off for you.

What's sent to Anthropic when you chat

Your phone never talks to Anthropic directly. Messages go through our server, which adds the context below.

• what you type or say in the chat, plus up to 20 earlier messages from today's conversation, so it can understand short replies. Anything you type is sent as you typed it;
• first names only: yours, your partner's, and those of any helpers you've added, so it can say who's doing what;
• your notes: what tendTwo has learned about you, your relationship and how your home runs (see below);
• the tasks, routines, library items and spaces you can see. That includes today's plan and, when you plan your library, dated items for the next eight weeks, such as calendar events you've synced (their titles and dates); and
• when you plan your day, a short weather outlook for your area, such as the chance of rain.

Never sent: your email address, your account details, your suburb or home coordinates, your profile photo, your household contacts, or the data stored by the cycle feature. Your partner's private items are never included in your chats, and yours are never included in theirs.

Weekly date ideas

If your household has a couple space and both of you have turned chat on, once a week (early on Monday mornings) our server sends Anthropic:

• both partners' first names;
• both partners' notes about themselves and your relationship; and
• the titles of recent couple-space moments you can both see.

Anthropic uses these to write fresh date ideas and small gestures for you both. If either of you has chat off, this doesn't run, and tendTwo shows its built-in ideas instead.

Why

So tendTwo can understand what you ask and reply, turn what you say into tasks, routines and reminders in your home, remember things about you so it doesn't ask twice, and suggest date ideas.

How Anthropic handles it

• Under Anthropic's commercial terms, Anthropic may not train its models on what we send.
• Anthropic automatically deletes what we send, and its replies, within 30 days. The exceptions are content its automated safety systems flag as possibly breaching its usage policy, which can be kept for up to 2 years, and anything the law requires it to keep longer.
• Anthropic stores this data in the United States, and may process requests in other countries where it runs its infrastructure.

This reflects Anthropic's published terms as at October 2026.

Turning chat off

When you turn chat off, nothing new about you goes to Anthropic, and you're left out of the weekly date ideas. Your notes stay in your profile in case you turn chat back on. Email us if you'd like them deleted. Leaving your household or deleting your account also deletes them.

Your notes

Your notes are stored in your household's database, linked to your account, and change as tendTwo learns. You can tell tendTwo what's changed in the "about you" chat (in your profile). You can also email us at any time to get a copy, correct something, or have them deleted. Your partner's app doesn't show your notes, but your partner's account can technically access them (section 6).

AI can be wrong

Replies and suggestions are generated automatically and can be wrong, incomplete or out of date. Check anything important. Our Terms & Conditions say more.

6. your household: what your partner can see

tendTwo is built for two people sharing one home, and being in a household together means sharing a lot.

Shared with your partner

• everything in the home's shared spaces: tasks, routines, library items, steps, who's doing what, what's been done and when, and the balance between you;
• couple-space moments, and calendar events you sync;
• household contacts and helpers, and the home's name and suburb;
• your display name, colour, profile photo, and the weekdays you're usually home;
• your daily wrap-up answer, as a notification, when it's "a bit much" or "heavy"; and
• your cycle, but only if you switch sharing on (section 4).

Hidden from your partner in the app

• items in your private spaces;
• "a little something" notes you write for your partner;
• your cycle, unless you share it;
• your notes (what tendTwo has learned about you); and
• your chat conversations. These are kept only on your phone, only for the current day, and aren't stored on our servers. If you've turned chat on, they're sent to Anthropic as described in section 5.

Your private items and "a little something" notes are also never included when your partner chats with tendTwo.

An honest caveat: hidden isn't locked

Apart from your chat conversations, which stay on your phone, the things in the second list are hidden by the app, not locked away from your partner. They're stored in the same household database, which both members' accounts can access. Some of them, including your private items and your member profile with your cycle settings, are downloaded to your partner's phone in the background so the app works smoothly. Someone with technical skills using your partner's account or phone could read them.

Please keep this in mind when deciding what to add. tendTwo isn't the place for something that must stay secret from your partner.

Leaving or deleting

If you leave a household, or delete your account while your partner stays, your member profile, your notes and your profile photo are deleted. Your private spaces and private items go with you too: everything in your private spaces, and any "a little something" notes you wrote. Things you shared stay with the home and your partner. Section 11 and our account deletion page explain exactly what's removed.

7. who we share your information with

We share personal information only in these situations:

• Your partner, as described in section 6.
• Service providers that process information on our behalf, under terms that limit how they can use it:

• Legal reasons. Where required or authorised by law, or where we reasonably believe disclosure is necessary to comply with a legal obligation, respond to valid requests from public authorities, enforce our agreements, or protect someone's safety.
• Business transfers. If we're involved in a merger, acquisition, financing or sale of assets, your personal information may be transferred as part of that transaction. We'll notify you before your personal information becomes subject to a different privacy policy.
• With your consent, for any other purpose you agree to.

We do not sell your personal information, and we don't share it with advertisers.

8. overseas disclosure

Some of the recipients above are outside Australia:

• United States. Google stores our household database (Cloud Firestore, in Google's United States multi-region) and sign-in records (Firebase Authentication). If you turn chat on, Anthropic stores and processes chat content (section 5).
• Switzerland, Europe and North America. Open-Meteo is operated from Switzerland and runs servers in Europe and North America.
• Wherever Google and Apple operate. Push notifications, crash reports, app integrity checks and speech recognition run on Google's and Apple's global infrastructure, and may be processed in any country where those companies operate.

Our server code runs in Sydney, Australia. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, including through the terms we have with Google and Anthropic. We remain accountable under Australian privacy law for how those recipients handle your information. You can ask us at any time where your information is held.

9. how long we keep your information

We keep personal information only for as long as we need it for the purposes in this policy. In practice:

• your account, household and profile data are kept while your account is active, and deleted as described in section 11;
• chat conversations are kept on your phone for the current day only, and each day starts fresh. Anthropic deletes what it receives within 30 days (section 5);
• Google keeps crash reports for 90 days;
• our weather provider deletes its logs after 90 days;
• push tokens are kept until you sign out or delete your account;
• if you signed in while tendTwo was invite-only and weren't on the list yet, we keep your name and email on our waitlist until you delete your account or ask us to remove them;
• server logs are kept for a limited period for troubleshooting;
• we don't keep backups of the household database, so when something is deleted it's gone for good. Google's sign-in service finishes erasing a deleted account's records from its own systems within 180 days; and
• we may keep limited information for longer where the law requires it, or where it's reasonably needed to resolve a dispute or enforce our agreements. When information is no longer needed, we delete or de-identify it.

10. security and data breaches

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include encryption in transit and at rest, access controls, and database security rules that restrict each household's data to the members of that household. No method of transmission or storage is completely secure, so we can't guarantee absolute security, but we work to keep our protections current.

If we suspect a data breach involving personal information, we will assess it promptly, within 30 days at most. If a breach is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, as the Notifiable Data Breaches scheme requires.

11. your rights: access, correction, deletion and complaints

Access and correction

You can ask us for a copy of the personal information we hold about you, including your notes, and ask us to correct anything that's inaccurate, out of date, incomplete or misleading. You can change your name, photo, colour and anything in your home yourself in the app. For anything else, email hello@tendtwo.com.au. There is no charge for making a request, and we'll respond within 30 days. If we refuse access or correction (which we can only do on limited legal grounds), we'll tell you why in writing and how you can complain. If we refuse a correction, you can ask us to attach a statement to the information noting that you believe it's incorrect.

Deleting your account and data

You can delete your account at any time in the app: go to your profile (the me tab), then delete my account. If you haven't set up or joined a home yet, the same option is on the screen you see instead. If you can't use the app, email us. If you're the only member of your home, the whole home is deleted with your account. If your partner stays, your private spaces and private items go with you, and the home and its shared data stay with them.

Deleting your account removes your sign-in account, your member profile (including your cycle data), your notes, your profile photo and any waitlist entry. Because we keep no backups, deletion is final. If you ever find anything left behind, email us and we'll remove it. Our account deletion page sets out exactly what's deleted and when.

Changing your mind

• AI chat: turn it off in your profile at any time. Email us if you'd also like your notes deleted (section 5).
• Cycle: switch sharing off, switch cycle awareness off, or delete your cycle history, all in the app (section 4).
• Notifications: turn individual nudges off in your profile (the 🔔 at the top), or turn them all off in your phone's settings.
• Calendar: remove tendTwo's calendar access in your phone's settings to stop future syncs. Events already synced stay as tasks until you delete them.

Complaints

If you think we've breached the Australian Privacy Principles or mishandled your personal information, please contact us first at hello@tendtwo.com.au. We'll acknowledge your complaint, investigate it, and respond to you, normally within 30 days.

If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5288, Sydney NSW 2001

12. children

tendTwo is for adults. You must be 18 or older to use it, and we don't knowingly collect personal information from anyone under 18. If we learn that an account belongs to someone under 18, we'll close it and delete their personal information.

Many homes include children, and you may add tasks about them (a school pick-up, a dentist visit). Please keep details about children to what's needed to run the home.

13. cookies, analytics and other sites

The tendTwo app contains no analytics or advertising tools, and our website sets no cookies. The Service may link to websites we don't operate, such as our providers' terms. We're not responsible for their privacy practices, and we encourage you to read the privacy policy of any site you visit.

14. changes to this policy

We may update this Privacy Policy from time to time, for example when we add a feature or change a provider. If we make material changes, we'll tell you by email or with a clear notice in the app before the change takes effect, and update the "Last updated" date at the top of this page. The current version is always on this page.

15. contact us

Nicola Ferendinos
Operator of tendTwo
Parcel Locker 10298 63685
26 Brookhollow Avenue
Norwest NSW 2153
Australia

• Privacy questions, requests and complaints: hello@tendtwo.com.au
• Legal notices: hello@tendtwo.com.au. Our postal address is a parcel locker, which can't receive letters, so please send notices by email.