Privacy & data

The short, honest version

Last updated: May 2026

This is built privacy-first. Most of what you do here stays on your phone. The parts that need to leave only do so when you send me a message — and only what’s needed for me to reply.

What stays on this device

Your goals and goal-detail
Your journal entries (private by default — you choose which to share with Tammy)
Your tasks and due dates
Your memory (facts, beliefs, preferences — the notes I keep about you)
Your pre-screen answers
Your avatar and voice preference

None of this is backed up to our servers. If you delete the app, this data goes with it — that’s why “Export all my data” exists.

What gets sent to Tammy

Tammy runs on Claude, an AI model from Anthropic. To answer you, we send these things to Anthropic’s API:

Chat messages you send to Tammy (during discovery and ongoing conversations)
The goal you’re talking about (so Tammy has memory of what you’re working on)
Journal entries you’ve explicitly toggled to share
Your memory (when you import or update it; I read it during chats)
Your pre-screen answers (so Tammy knows your context)

Anthropic doesn’t train their models on your conversations. Our server passes your message to Anthropic, returns the reply, and doesn’t store the transcript. Standard server logs (request timestamp, IP address, and a randomly generated anonymous ID — see Section 06) are kept for rate-limiting and abuse prevention, but never the content of what you said.

Your data, your control

Inside the app, you can export everything — a JSON copy of every goal, journal entry, task, and memory — saved to Files, emailed, or AirDropped wherever you want it.

You can also delete everything. One tap wipes everything I hold on your device. Deletion is permanent and immediate. We don’t keep a shadow copy. Once it’s gone, it’s gone.

Children

Tammy is not for under-18s. We don’t knowingly collect data from anyone under 18. If you believe we have, contact hello@tammycoaching.com and we’ll delete it.

Where we are

Tammy Coaching Ltd. is based in Te Whanganui-a-Tara / Wellington, New Zealand. We operate under New Zealand privacy law, and offer equivalent protections to users in Australia, the UK and EU. Questions: hello@tammycoaching.com.

What our server keeps

When you redeem a beta access code, your code, your IP address, and a randomly generated anonymous ID are sent to our backend so we can verify the code is valid and hasn’t been used. We log the redemption (which code, when, from which IP, and the anonymous ID) to prevent abuse and to know which testers are active. This log is not tied to your name or email.

The same anonymous ID, your IP, and request timestamps are written to standard server logs every time the app talks to our backend (sending a message, redeeming a code, checking your tier). These logs help us keep the service running and detect abuse. They are retained for 30 days and then deleted.

We do not sell, share, or use any of this data for advertising or profiling.

Waitlist

When you join the waitlist, I collect your name and email through Kit (kit.com), my email service provider. I’ll only use this to email you when the app is live. You can unsubscribe at any time. I don’t share your email with anyone.

Tammy Coaching · Beta