Legal

Privacy Policy

Last updated: 1 January 2025 · Effective: 1 January 2025

1. Who We Are

Tenor is developed and operated by Mauxie, an Australian sole trader based in Brisbane, Queensland, Australia (ABN: [Your ABN]). Tenor is accessible at mauxie.com.au/tenor and via the iOS application on the Apple App Store.

For privacy-related inquiries, contact us at: mhodge@mauxie.com.au

2. Data We Collect and Why

2.1 Relationship & Personal Data

To provide the core features of Tenor, we collect:

• Account information: Email address, display name, and profile picture (optional) provided at sign-up
• Partner linkage: The unique identifier connecting two accounts in a couple — no personal details are shared beyond what both partners explicitly provide
• Tasks and notes: Shared to-do items, reminders, and any text you enter into the app
• Appreciation messages: Notes and messages sent between partners within the app
• Relationship milestones: Dates, events, and achievements you choose to record
• App interaction data: Feature usage patterns used to calculate your Tenor Score and Partnership Wealth metrics, stored locally and in your private Firebase profile

Why: This data is the core of Tenor's functionality. Without it, we cannot provide task coordination, appreciation flows, or relationship metrics. This data is never used for advertising and never shared with third parties for commercial purposes.

2.2 Financial Data (Plaid & Basiq)

Tenor offers optional financial connection features to power the Partnership Wealth™ dashboard. Financial connectivity is handled by trusted, regulated third-party providers:

• Plaid Inc. (United States) — for users connecting US bank accounts
• Basiq Pty Ltd (Australia, AFSL-regulated) — for users connecting Australian bank accounts

When you connect a financial account, these providers supply Tenor with:

• Transaction history (amounts, merchant names, categories)
• Account balances
• Account names and types

We do not receive or store your bank login credentials. Authentication occurs directly with Plaid or Basiq using their secure OAuth flows. Tenor receives only read-only transaction data via secure API tokens.

Financial data is used exclusively to: display shared spending insights within your couple's Partnership Wealth dashboard; calculate contribution metrics; and surface spending pattern summaries. Financial data is never used for credit scoring, advertising, or shared with any marketing partners.

You can disconnect your financial accounts at any time from Settings → Financial Accounts. Upon disconnection, we will delete your stored transaction data within 30 days.

For Plaid's privacy policy, see: plaid.com/legal
For Basiq's privacy policy, see: basiq.io/privacy-policy

2.3 Calendar Data

Tenor can connect to your calendars to display events in the TODAY command centre and detect scheduling opportunities. Calendar access is powered by:

• Apple EventKit — for calendars stored on your device (accessed locally, data never leaves your device except as described below)
• Google Calendar REST API — for Google Calendar accounts you explicitly connect

Calendar data collected includes event titles, start/end times, location (if present), and attendees (for scheduling overlap detection). Tenor does not read the body or description of calendar events unless you explicitly share them within the app.

Calendar data is processed on-device where possible. When processed server-side (e.g. for scheduling conflict detection across both partners), it is transmitted over TLS encryption and is not persistently stored beyond the processing window.

You can revoke calendar access at any time via Settings → Integrations → Calendars or via iOS Settings → Privacy → Calendars.

2.4 AI Processing (Claude by Anthropic)

Tenor uses Claude, an AI assistant developed by Anthropic, PBC, to provide personalised insights, appreciation suggestions, conflict-prevention nudges, and intelligent recommendations.

When AI features are active, certain data is transmitted to Anthropic's API for processing:

• Anonymised or pseudonymised summaries of your app activity (e.g. task completion patterns, calendar busyness indicators)
• Relationship context signals you choose to share with AI features
• Text prompts you directly input to AI-assisted features

We do not send raw financial transaction data, full calendar event details, or direct message content to Anthropic's API. All AI prompts are constructed using aggregated, anonymised signals.

Data sent to Anthropic is governed by Anthropic's API data processing terms. Anthropic does not train their models on API data by default. For Anthropic's privacy policy, see: anthropic.com/privacy

AI features can be disabled at any time via Settings → AI Features → Disable AI Insights.

2.5 Firebase (Google)

Tenor uses Firebase, a platform provided by Google LLC, for:

• Firebase Authentication: Secure account creation and sign-in (email/password and third-party OAuth)
• Cloud Firestore: Storing your profile, shared couple data, tasks, and app state in a secure, encrypted cloud database
• Firebase Cloud Messaging (FCM): Delivering push notifications to your device

All Firebase data is stored in Google Cloud infrastructure with encryption at rest and in transit. Access to your Firestore data is controlled by Firebase Security Rules — only you and your linked partner can access your couple's data.

Firebase may collect certain device and usage analytics. You can opt out of Firebase Analytics data collection via Settings → Privacy → Analytics.

For Google's privacy policy: policies.google.com/privacy

3. Data Storage & Security

Your data is stored on Firebase/Google Cloud infrastructure hosted in the United States and/or Australia depending on your account region. We implement the following security measures:

• All data in transit is encrypted using TLS 1.2 or higher
• All data at rest is encrypted using AES-256
• Firebase Security Rules restrict database access to authenticated users and their linked partners only
• API keys and credentials are stored in iOS Keychain and Firebase environment variables — never in plain text
• Face ID / Touch ID authentication is available for app access

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We share data only in these limited circumstances:

• With your partner: Shared tasks, calendar overlaps, and Partnership Wealth data are visible to both partners in a linked couple. You control what is shared.
• Service providers: Firebase (Google), Plaid, Basiq, Anthropic — as described above and strictly necessary to operate the service
• Legal requirements: If required by Australian law, court order, or to protect the safety of our users
• Business transfer: If Mauxie is acquired or merges with another entity, your data may transfer as part of that transaction, subject to equivalent privacy protections

5. Your Rights (Australian Privacy Act & GDPR)

Under the Australian Privacy Act 1988 and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your account and all associated data
• Portability: Request your data in a machine-readable format
• Restriction: Request we limit how we process your data
• Objection: Object to certain types of processing
• Withdraw consent: For any consent-based processing (e.g. AI features, financial connections)

To exercise any of these rights, email mhodge@mauxie.com.au. We will respond within 30 days.

6. Data Retention

We retain your data for as long as your account is active. Upon account deletion:

• Profile and account data is deleted within 7 days
• Shared couple data is deleted within 30 days (or immediately if both partners delete)
• Financial transaction data is deleted within 30 days
• Anonymised, aggregated analytics (no personal identifiers) may be retained indefinitely

You can delete your account at any time from Settings → Account → Delete Account.

7. Children's Privacy

Tenor is designed for adults in romantic relationships. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has created an account, please contact us at mhodge@mauxie.com.au and we will delete the account promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-app notification and update the "Last updated" date above. Continued use of Tenor after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related questions, data requests, or complaints:

• Email: mhodge@mauxie.com.au
• General: mhodge@mauxie.com.au
• Company: Mauxie, Brisbane, Queensland, Australia

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.