Privacy Notice

Integrated Software Solutions ("we", "us") is the data controller for the personal data processed through Tended, a personal life administrator application and website (the "Service"). This Notice explains what we collect, why, and the rights you have.

• Account data: your name, email address, password, and authentication identifiers.
• Life data you provide: details about your home, vehicles, health, money, family, pets and documents that you enter, choose during onboarding, or describe to the assistant, plus the tasks, dates and reminders generated from them.
• Documents you upload: licenses, policies, statements, notices and similar files, and the dates and obligations we extract from them.
• Household sharing data: the email addresses of people you invite and the access you grant them.
• Usage data: how you use the Service, diagnostic and error logs, device identifiers, and IP address.
• Notification data: your reminder settings, push notification tokens, and the delivery history of reminders we send you.

• To provide the Service — building your plan, generating reminders, scanning documents, answering questions about your plan and documents, syncing your calendar, and managing your subscription. (Contract performance)
• To keep the Service secure — preventing fraud and abuse, and protecting your data. (Legitimate interests)
• To improve the Service — understanding how features are used and fixing problems. (Legitimate interests)
• To send you reminders and service messages — email and push notifications about deadlines you asked us to track. (Contract performance; push notifications rely on your consent)
• To comply with law — for example, tax and accounting records. (Legal obligation)

We do not sell your personal data, and we do not use your documents or life data to advertise to you.

Some features send the content you submit — such as an uploaded document, a life change you describe, or a question about your plan — to third-party AI providers so the Service can generate the result you asked for. We only send what is needed for that request, and we instruct providers not to use it to train their models. You are responsible for the content you choose to submit, and AI output may be inaccurate.

We share personal data only with:

• Service providers (subprocessors) that help us run the Service — hosting and database providers, our AI providers, push notification delivery, and email delivery. They process data only on our instructions.
• Paddle.com, our reseller and the Merchant of Record for all orders. Paddle handles payments, subscription management, tax compliance, invoicing and refunds, and receives the billing data needed to do that. Paddle's own privacy notice applies to its processing.
• Professional advisers — lawyers, accountants, insurers — where reasonably needed.
• Authorities where we are required or permitted by law to disclose data.

If you use household sharing, the people you invite can see the tasks and areas you chose to share with them.

We keep your account and plan data while your account is active. When you delete your account, we delete or anonymize your plan data, documents and reminders within 90 days, except where we must keep it longer — for example, billing records that tax law requires us to retain, or records needed for a legal claim. Push tokens and delivery logs are removed sooner once they are no longer needed.

Depending on where you live, you have rights over your personal data, including the rights to access it, correct it, delete it, restrict or object to its processing, obtain a portable copy, and withdraw consent (for example, for push notifications) at any time. You can exercise most of these rights directly in the Service — exporting your plan, deleting documents, and deleting your account — or by contacting us. We respond within one month. If you are in the UK or EEA, you also have the right to complain to your local supervisory authority.

Our service providers may process data in countries other than yours. Where personal data leaves the UK or EEA, we rely on appropriate safeguards, such as the European Commission's standard contractual clauses or an adequacy decision.

We use appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and row-level security so your data is only accessible to you and the household members you invite. No system is perfectly secure, and we encourage you to use a strong, unique password.

The Service uses only essential cookies and similar storage: a session cookie or local storage entry that keeps you signed in. We do not use advertising or third-party analytics cookies. You can clear or block these in your browser settings, though signing out may stop the Service from working.

We may update this Notice as the Service evolves, and we will post the updated version here. To exercise your rights or ask a privacy question, contact us through the app or by post to Integrated Software Solutions.