Privacy policy
Tandlet is a desktop app for macOS and Windows, made by 3cme.dev ("we"). This policy explains what the Tandlet app and this website do with your information. In short: your data stays on your computer, there is no Tandlet account or Tandlet server, and we collect nothing about you.
What stays on your computer
- Your profile (the name you give and your companion), agents, conversations, workflows, runs, drafts, memories and settings are stored in a database on your computer.
- API keys and sign-in tokens are encrypted with your system's keychain (Keychain on macOS, DPAPI on Windows). They are never stored in plain text.
- Backups and exports are files you create, saved where you choose.
- We never receive any of this. Tandlet has no Tandlet server, and nothing is sent to us.
What Tandlet sends, and to whom
Tandlet only sends data to services you connect yourself, directly from your computer:
- AI providers you connect (Anthropic, OpenAI, Google Gemini, OpenRouter, or the Claude Code and Codex apps): when an agent works, Tandlet sends your messages and the context the task needs to that provider, under your own account. The provider's own privacy policy and terms apply. Local models (Ollama, LM Studio) stay on your computer.
- Tools you connect (such as GitHub, Gmail, Google Calendar, or a tool server you add): Tandlet calls them to read what an agent needs for a task you gave it.
- Downloads you start: voice models come from Hugging Face, and tool packages from their registries, once, when you choose to install them. Those services see an ordinary download request.
Agents ask for your approval before they send, post or change anything outside Tandlet.
How Tandlet uses Google data
If you choose to connect Gmail or Google Calendar, Tandlet asks Google for these read-only permissions:
gmail.readonly: to search and read messages, threads, labels and drafts in the labels you choose.calendar.readonly: to read events in the calendars you choose.
How it is used. Only to show you your mail and events in Tandlet, and to let your agents read them when they work on a task you gave them. Tandlet never sends mail, changes labels or edits your calendar.
Where it is kept. On your computer only. Your Google sign-in token is encrypted with your system's keychain.
Who it is shared with. Only the AI provider you connected, when an agent reads a message or event for your task, sent directly from your computer. We never receive it, sell it, or use it for advertising, and we do not use it to develop, improve or train AI or machine-learning models. No person at 3cme.dev reads it.
Tandlet's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Removing access. Disconnect Gmail or Calendar in Tandlet, which deletes the stored token, or remove Tandlet's access at any time on your Google Account permissions page.
Voice
Dictation and Live conversation run on your computer. Tandlet never records or keeps audio, and no audio leaves your computer.
Crash reports
If you turn on "Keep crash reports" (off by default), Tandlet keeps a small record on your computer when part of it stops: the app version, your system, which part stopped, why, and code locations. It holds no messages or content, and file paths are trimmed. Nothing is sent automatically; you can copy a report and send it to us yourself if you want help.
No analytics, no ads
The app has no analytics, tracking or advertising.
Deleting your data
"Delete all my data" in Tandlet's settings removes everything Tandlet stored, including keys and downloaded voice models. Uninstalling Tandlet removes the app.
This website
This site uses no cookies and no analytics. It is hosted on Vercel, which handles requests to it as described in Vercel's privacy policy.
Children
Tandlet is not meant for children under 16.
Changes
If this policy changes, we update it here and change the date above.
Contact
Questions about privacy: indratc18@gmail.com.