Tandem Account Privacy Notice

Who operates Tandem Account

Tandem Account is operated by Tandem Coaching Partners, LLC. Privacy questions and requests can be sent to info@tandemcoach.co.

Information we process

• Sign-in information. Google Identity Platform and Firebase Authentication provide a stable Firebase user identifier, verified email address and verification status, authentication time, and sign-in method. The Tandem Account backend does not read your name or profile image from the sign-in token.
• Session-security information. We use an essential, signed, HTTP-only session cookie and short-lived anti-forgery values to keep your session secure. The Tandem session is configured to expire after 12 hours; pre-sign-in anti-forgery values expire within 10 minutes.
• Identity connection and access information. The service checks your Firebase project and user identifiers against Tandem's person registry, which holds Tandem's record of each person. With each check it sends a one-way SHA-256 hash of the normalized verified email, not the email address itself. Your sign-in is connected to your Tandem record when that verified email belongs to exactly one record, or when Tandem staff connect it; if more than one record uses the email, nothing is connected until staff resolve it. Connection decisions, status, access metadata, and security/audit receipts may be retained.
• Your Tandem record. Once your sign-in is connected to your Tandem record, your account page shows the name on that record and the email addresses it holds. Addresses other than the one you signed in with are shown partly hidden. If you change your name there, we keep the previous name, when it changed and who changed it, so a mistake can be undone. You can also add an email address or choose which one is primary: Tandem emails a sign-in link to that address, and nothing changes until you open it in the browser where you are signed in. Opening it also lets that address sign in to Tandem Account. If the address is already on another Tandem record, nothing changes and Tandem staff review the two records. Earlier addresses stay on your record, and each change is kept with when it happened, a one-way fingerprint of the addresses involved, and who made it.
• Optional passkey information. If you add a passkey, we store the credential identifier, public key, user handle, authenticator characteristics, signature counter, and created or last-used times. Passkey challenges expire after 5 minutes and are consumed once. We never receive or store your biometric data or the passkey's private key.
• Service and security records. Our hosting and security providers may process request metadata such as IP address, browser or device information, timestamps, and error or abuse signals needed to operate and protect the service.

How we use the information

• Authenticate you and maintain your signed-in session.
• Prevent fraud, replay, unauthorized access, and duplicate identity creation.
• Connect your sign-in to your existing Tandem record as described above, and check current access separately from authentication.
• Show your Tandem record on your account page and let you correct your name and manage your email addresses.
• Sign you in to other Tandem apps you use. Each receives your verified email and your Tandem record number, and the name on your record if the app asks for it.
• Operate, troubleshoot, audit, and secure Tandem Account.

We do not use Tandem Account information for advertising, sell it, or use Google sign-in alone to grant courses or tools. Tandem Account does not extract or store a Google OAuth access token.

Service providers and internal sharing

Google Cloud and Firebase provide authentication, hosting, application runtime, and passkey data storage. Tandem's person registry runs on Tandem's private network in Google Cloud and receives the identity lookup described above. EmailIt delivers the sign-in and address-confirmation emails Tandem sends: it receives the email address and the message, with open and click tracking turned off. Tandem's own systems that use your record receive changes to it, such as a corrected name or a new primary address; Tandem staff update billing and course platforms to a new primary address. We disclose information when required by law or when necessary to protect the service and its users.

Retention

Short-lived session and challenge data expire as described above. Passkey public-key records are retained while the credential remains active. Identity bindings and append-only security or decision receipts are retained as needed to preserve account integrity, investigate misuse, resolve disputes, and meet legal obligations; a binding can be disabled without erasing the historical security receipt. We do not claim a fixed retention period where one has not yet been established.

Your choices

• You can sign out to clear the Tandem session and can revoke Google access from your Google Account.
• You may contact info@tandemcoach.co to request access, correction, or deletion of personal information, subject to identity verification and applicable legal or security-retention requirements.
• Google sign-in is not the only recovery path; secure email-link sign-in is also available.
• You can correct your name on your account page at any time. Tandem keeps your earlier names so staff can undo a change made by mistake.
• You can add an email address or choose your primary address on your account page. Earlier addresses stay on your record so payments and course records still find you.

Security and changes

We use HTTPS, signed and HTTP-only cookies, revocation checks, bounded service identities, and explicit identity decisions. No online service can guarantee absolute security. We will update this notice when Tandem Account's material data practices change and will revise the effective date above.