Privacy Policy — TenderNest

Information We Collect

Account information: your name, email address, and password (stored as a secure hash — never plain text)
Age confirmation: our updated registration asks you to declare that you are at least 13 years old instead of entering your date of birth. We record when you make this declaration. This is a self-declaration, not independent verification of your age
Dates of birth from older app versions: we may still hold a date of birth you previously provided, and older versions may still submit one when you register or update your profile
Profile: an optional avatar image you choose to upload
Content you create: text notes, photos, and voice recordings you send or receive
Connection data: which other users you are connected with inside the app
Billing information: if you subscribe to a paid plan or buy a message pack, our payment processor Stripe handles your payment details directly. We only receive a Stripe customer reference and your subscription status — we never see or store your card details

How We Use Your Information

Solely to provide and operate TenderNest
To record your declaration that you meet our minimum age requirement, or assess that requirement using a date of birth supplied through an older app version
To deliver notes and media between you and users you are connected with
To send password reset emails — the only transactional email we send
To process payments and manage subscriptions, if you choose to purchase a paid plan or message pack

We do not use your data for advertising, profiling, or analytics sold to third parties, and we have no purpose for your data beyond running the app.

Data Sharing

We do not sell or rent your personal data, and we do not share it with advertisers, analytics platforms, or data brokers. If you make a purchase, the payment details needed to complete it (such as your name, email, and card information) are shared directly with our payment processor, Stripe — we never see or store your full card details ourselves. The only other exception is if we are required to disclose information by a valid legal order or applicable law.

Data Storage & Security

Your data is stored on secured servers
Passwords are hashed and never stored or transmitted in plain text
Media files (photos and voice notes) are stored in access-controlled storage
Your age-confirmation record is kept for the lifetime of your account and removed when your account is deleted. Dates of birth supplied through older app versions currently remain part of your account record unless removed earlier or your account is deleted. You can contact us to request their removal

Cookies and Local Storage

We use a small number of cookies and similar browser storage, and only where they are needed to run the service. We do not use cookies for advertising, analytics, or tracking you across other websites, and none of our storage is shared with ad networks or data brokers. Our pages load their fonts, styles, and scripts only from our own servers, so visiting the site does not hand your details to any third party.

Session cookie: keeps you signed in and keeps your place as you move between pages. It is set by our own servers, readable only by us, and cleared when you sign out or after a period of inactivity.
Security cookie: a token that protects forms and requests against cross-site request forgery. It holds no information about you.
Local storage in the web app: the app keeps a few small preferences in your browser (for example, remembering that you dismissed an announcement) and a short-lived copy of your own profile so the app loads faster. This never leaves your device and is cleared when you sign out.

All of these are strictly necessary for the app to work, so under UK law (the Privacy and Electronic Communications Regulations) we are not required to ask for your consent and we do not show a cookie banner. You can still block or delete cookies in your browser settings, but the app will not work correctly without the session cookie. If you make a purchase you are taken to Stripe's checkout, which sets its own cookies under Stripe's privacy policy.

Push Notifications

If you grant permission, we use your device's push notification token to deliver in-app alerts such as new notes, connection requests, and nudges. This token is stored securely and used solely to deliver notifications to your device. You can revoke notification permission at any time through your device settings, or manage notification preferences within the app.

Your Rights & Data Deletion

You can delete individual notes and media from within the app at any time
You can delete your account and all associated data from within the app
You can also request full data deletion by contacting us at info@tendernestapp.com

Upon deletion, your data is permanently removed from our systems.

Children's Privacy

TenderNest is for people aged 13 and over. Children under 13 must not create an account or use the service. If you are under 18, our Terms of Service also require your parent or guardian's permission. If you believe an account belongs to someone under 13, please contact info@tendernestapp.com so we can investigate and remove accounts and associated personal data where we establish that the user is under 13.

Contact

If you have any questions about this Privacy Policy, please contact us at info@tendernestapp.com.