Tandeo
English

Privacy Policy

Effective 1 November 2026. Applies to the Tandeo app (App Store name "Health Sync: Tandeo") and this website.

Short version: Tandeo moves your health data between Google Health and Apple Health directly on your iPhone or iPad. We run no servers that receive it, there is no Tandeo account, and we do not use your data for advertising, sale or AI training. The app sends anonymous usage events and crash reports to Google Firebase, never containing health data, and you can turn that off.

Who we are

Tandeo is published by Minima Apps Ltd, a company registered in the United Kingdom (company number 12717365). For privacy questions write to tunds@minimaapps.co.uk.

Google API Services User Data Policy

Tandeo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What Tandeo accesses

From Google Health

When you connect, Tandeo asks Google for permission to read and write the data types you choose to sync. Fitbit data is available through Google Health. Tandeo requests these OAuth scopes (all under https://www.googleapis.com/auth/):

  • googlehealth.activity_and_fitness.readonly and .writeonly: to read steps, distance, active energy and workouts from Google Health, and to write workouts from Apple Health to Google Health.
  • googlehealth.health_metrics_and_measurements.readonly and .writeonly: to read heart rate, resting heart rate, heart rate variability, blood oxygen, weight and body fat, and to write weight and body fat to Google Health.
  • googlehealth.sleep.readonly and .writeonly: to read sleep and sleep stages from Google Health, and to write sleep from Apple Health to Google Health.

Tandeo uses this data only to provide the sync you ask for. You can grant only some scopes; features that need a scope you did not grant are unavailable.

From Apple Health

With your permission through Apple's HealthKit prompts, Tandeo reads and writes the Apple Health data types you choose to sync. HealthKit data is never used for advertising or data mining, and is not shared with third parties, except that data you choose to sync from Apple Health is written to Google Health at your direction.

Where your data goes

  • On your device. All syncing happens on your iPhone or iPad. Tandeo talks to Google's servers and to Apple Health directly from the device.
  • Your health data is not sent to us. Tandeo has no developer servers that receive your health data, your Google data or your tokens. We cannot see them.
  • Tokens in the Keychain. Your Google sign-in tokens are stored in the iOS Keychain on your device.
  • No account. Tandeo does not ask you to create an account with us.
  • No analytics on your health data. Health values, Google Health data and HealthKit data never go to analytics. See "Analytics and crash reports" below.

Analytics and crash reports

Tandeo uses Google Firebase Analytics and Firebase Crashlytics (provided by Google) to understand how the app is used and to fix crashes. This is the only information the app sends to a service we use.

  • What is collected: anonymous app-usage events, such as screens viewed, sync started, completed or failed (with counts and error types), paywall views and purchases, and onboarding steps, plus crash reports.
  • Identifiers: Firebase uses an app instance ID to tell installs apart. Collection of the advertising identifier (IDFA) and the vendor identifier (IDFV) is disabled.
  • What is never included: no health data values, no Google account identifiers and no HealthKit data are ever sent to analytics. Data received from Google Health APIs is never used for analytics.
  • Retention: follows Firebase defaults: user-level Analytics data is targeted to be kept for 2 months, and Crashlytics data for 90 days.
  • Your choice: turn this off in the app under Settings, then "Share anonymous usage data".
  • Google processes this data under its own terms: see Firebase privacy and security.

What we do not do

  • We do not show ads, and we do not sell, rent or trade your data.
  • We do not use your data, including data from Google APIs, to develop, improve or train generative AI or machine learning models.
  • We do not read your health data or Google Health data, because we never receive it.
  • We do not use your data, or any analytics data, for advertising, creditworthiness, or any purpose other than providing the sync feature you see in the app.

Purchases

Subscriptions and the Lifetime purchase are processed by Apple. We do not receive your payment details. Apple may share purchase status with the app so it can unlock features.

Revoking access and deleting data

  • In Tandeo, choose Disconnect to sign out of Google Health and remove the stored tokens from your device.
  • You can also revoke Tandeo's access at any time on your Google Account permissions page: myaccount.google.com/connections.
  • In the Health app, you can change or remove Tandeo's permissions under Sharing, then Apps.
  • Data already written to Apple Health or Google Health belongs to those services; delete it there if you want it gone. Deleting Tandeo removes everything it stores on your device.

Children

Tandeo is not directed at children under 13 (or the age required in your country), and we do not knowingly collect information from children. Because we receive no data, we hold nothing to delete.

Website

This website sets no cookies and uses no advertising trackers. It uses Cloudflare Web Analytics, a cookieless, privacy-first service that counts page views without tracking individuals; the app analytics above are separate and apply to the app only. Our host, Cloudflare, may process standard technical request logs to deliver and protect the site.

Changes

If we change how Tandeo handles data, we will update this page and its effective date, and ask again for any new permission we need.

Contact

Minima Apps Ltd, United Kingdom. tunds@minimaapps.co.uk

Tandeo is not affiliated with, endorsed by or sponsored by Google, Fitbit or Apple.