THE GROWTH ASSET GTD

Privacy Policy

Last updated: February 28, 2026

1. Introduction & Scope

This privacy policy describes how the instance operator handles your information when you use THE GROWTH ASSET GTD™. It applies to the managed hosted service operated by the instance operator.

Self-hosted instances: If you are using a self-hosted deployment of Tandem, this policy does not apply. The operator of that instance is responsible for their own privacy practices. the instance operator has no access to data on self-hosted instances.

2. Information We Collect

Account Information

When you sign in, we receive basic profile information from your OAuth provider: your email address and display name. We do not store OAuth tokens beyond what is needed for your active session.

Task & Productivity Data

Everything you put into THE GROWTH ASSET GTD — tasks, projects, goals, areas, notes, wiki articles, inbox items, contexts, and reviews. This is your data. We store it solely to provide the service to you.

Technical Data

Server logs may record IP addresses, user agents, and timestamps. These are retained for a limited period for security and debugging purposes.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve THE GROWTH ASSET GTD
  • Authenticate you and secure your account
  • Send service-critical communications (downtime notices, security alerts)

We do not use your information for:

  • Advertising or ad targeting
  • User profiling or behavioral analytics
  • Sale to third parties — ever

4. AI Features & Data Processing

THE GROWTH ASSET GTD includes optional AI features powered by the Anthropic API. When you use AI features, relevant task data is sent to Anthropic for processing. This data is governed by Anthropic's privacy policy.

You have full control over AI features:

  • AI features can be disabled entirely on a per-user basis
  • Granular toggles control what data AI can access
  • MCP (Model Context Protocol) integration flows through your own AI provider account

5. Data Storage & Security

Your data is stored on infrastructure operated by the instance operator. Data is encrypted in transit (TLS) and the application follows security best practices including input validation, CSRF protection, and secure session management.

Backups are encrypted and performed regularly. While we take reasonable measures to protect your data, no method of electronic storage is 100% secure.

6. Data Retention & Deletion

Your data is retained for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days.

You can export your data at any time using the built-in export functionality before deleting your account.

7. Third-Party Services

THE GROWTH ASSET GTD integrates with the following third-party services:

  • OAuth providers (Google, GitHub, Microsoft, Apple) — for authentication. These providers share your email and display name with us during sign-in.
  • Anthropic — for AI features. Task data is sent to Anthropic only when you actively use AI features.
  • Infrastructure provider — the hosting provider where THE GROWTH ASSET GTD runs. They may process data as part of providing hosting services.

8. Your Rights

You have the right to:

  • Access your data — export your tasks, projects, and other data at any time
  • Delete your data — delete your account and all associated data
  • Disable AI processing — turn off all AI features so no data is sent to external AI providers

For EU users: Under the GDPR, you have additional rights including the right to access, rectification, erasure, data portability, and the right to object to processing. To exercise these rights, contact privacy@tandemgtd.com.

9. Children's Privacy

THE GROWTH ASSET GTD is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact privacy@tandemgtd.com and we will delete it promptly.

10. Changes to This Policy

This privacy policy may be updated from time to time. Material changes will be communicated via email or in-app notification. The "Last updated" date at the top of this page indicates the most recent revision.

11. Contact

For questions about this privacy policy or how your data is handled, contact privacy@tandemgtd.com.

This policy is governed by the laws of Massachusetts, United States.