Privacy Policy

The controller of personal data is Tendask. Contact for privacy questions and exercising your rights: info@tendask.com.

Tendask is a garden-logging app that is offline-first: your data lives on your device first. It is synced to the cloud (Supabase, servers in the EU) only if you sign in with an account. Without an account it stays solely on your device.

Your precise coordinates (GPS) are never stored, not even on the device. From your current location the app derives only an approximate cell on-device (H3 system, ~1 km resolution) and immediately discards the coordinates. Only that cell is stored in the cloud. Even for weather, only the approximate centre of your cell (~1 km accuracy) is sent out, never your exact location (see §5).

• Account data (when signed in): email address (for code sign-in) or a Google account identifier (for Google sign-in). None of this exists without signing in.
• Garden content: tasks, areas, plants, notes, reminders, notification settings. Without an account this stays on the device. When signed in it syncs to the cloud.
• Approximate location: H3 cells (≈ 1 km and coarser), derived on-device. Precise coordinates are not stored. Weather uses only the cell centre.
• Diagnostic data (Sentry): on an error/crash, an error report, stack trace, app version and device/OS type. Used for stability, not identification.

• Providing the service (keeping your garden log, syncing across devices): contract (Art. 6(1)(b)).
• Location and notifications: consent (Art. 6(1)(a)), given via system permissions and withdrawable at any time in device or app settings.
• Diagnostics and security (fixing bugs, preventing abuse): legitimate interest (Art. 6(1)(f)).

• Supabase (backend: authentication and database). Servers in the EU (Frankfurt). Stores: email, H3 cells, garden content, notification settings. No coordinates are sent.
• Open-Meteo (weather and geocoding). Fetching weather sends only the approximate centre of your cell (~1 km), not your precise location. Searching for a place sends the typed place name. Data is used only to answer the request and is not retained by us. Open-Meteo is free and requires no account.
• OpenStreetMap / Nominatim (place name shown with the weather). We send only the approximate centre of your cell (~1 km, the same point as Open-Meteo), never your precise location. In return we get a coarse label, for example a village name. The result is stored only locally on the device. Operated by the OpenStreetMap Foundation, no account required.
• Sentry (error diagnostics). May process data outside the EU (e.g. the US) under Standard Contractual Clauses.
• Google (Google sign-in, optional). Sign-in performs a token exchange.
• Resend (email delivery: sign-in code from no-reply@tendask.com, and, if you've opted in, news or promotions from news@tendask.com). Receives the recipient address to deliver the message.

Account and garden data are kept while your account exists. Deleting your account (see §7) irreversibly deletes cloud data (cascade delete). Local data remains on the device until you sign out or remove the app. Diagnostic data is retained for a limited period per Sentry's policy.

Under the GDPR you have the right to access, rectification, erasure, restriction and portability of your data, and to object to processing. Directly available in the app:

• Data export (Settings → export): all your data in a JSON file.
• Account deletion (Settings → delete account): irreversible deletion of cloud data + wiping the local database.

For other requests email info@tendask.com. You may also lodge a complaint with the Slovenian Information Commissioner (ip-rs.si) or your local supervisory authority.

The app is not intended for, and does not target, children under 16.

We may update this policy. We will announce material changes in the app or on this page. The latest published version with its effective date always applies.

If you give us separate consent at sign-up or later in the app's Settings, we occasionally send you email about new app features or promotional offers, for example Tendask+. The legal basis is consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time in the app's Settings, or by clicking the unsubscribe link in any such email. This is separate from messages needed to run your account, such as the sign-in code, which you always receive.