Privacy policy

Tentative helps you keep track of plans you might go to: you capture an invitation, decide later, and add it to your calendar when you're ready. This policy explains what information Tentative uses, where it goes, and the choices you have.

Tentative is made by MTHRLND LLC, 730 W Theresa Ct, Glendale, WI 53209, USA ("we", "us"). Questions or requests: support@tentative.co.

The short version

• Your plans stay on your phone. We don't keep a copy of your private plans, notes or reminders on our servers.
• Capturing an invitation sends it for reading, not storage. When you capture a screenshot, photo, scan, PDF or link, or something you say or type, it's sent to an AI service to read the event details, then discarded.
• Sharing is public by link. When you choose to share a plan, the details you review are published on a page that anyone with the link can open.
• We don't sell your information or show ads, and we don't track you across other companies' apps or websites.

Your plans stay on your phone

Saved plans, groups, personal notes, reminders, archive and the original screenshots or files you captured are stored only on your device. Signing out hides them and stops their reminders on that device. It doesn't delete them, and signing back in to the same account brings them back. Tentative doesn't back them up to the cloud. If you delete the app or lose your phone, they're gone.

Your account

To use Tentative you create an account with your email address and either a password or a sign-in link we email to you. We store:

• your email address and, if you set one, your password (stored only in hashed form)
• the first name, and last name if you give it, that Tentative uses to greet you
• sign-in records our authentication service keeps to run and secure accounts, such as when you signed in and the device's IP address

We send account emails, such as sign-in links and password resets, only to the address on your account.

Capturing an invitation

When you capture a screenshot, photo, document scan, PDF, link, something shared from another app, or something you say or type, Tentative sends it to our capture service, which passes it to an AI model to read the event's title, dates, times and place. You review the result before anything is saved.

• Which AI services: OpenAI and Anthropic. We send the content under their API terms, which don't allow them to use it to train their models. They may keep it for a limited period for safety and abuse monitoring.
• What's sent: the image, the PDF (with its file name replaced), the text of the web page, or the words you said or typed. For a link, our service fetches the page; if the site blocks that, your phone reads the page in a private view and sends its text. Nothing else from your phone is included.
• What we keep: we don't store the content you capture. We keep a count of captures per account to apply usage limits, and technical records of each request (such as which model answered, how long it took and whether it failed) without the content or the event details.

Taking a photo or a scan uses your camera, and choosing a picture uses your photo library, only when you start that action.

When you add a plan by voice, your phone's own speech recognition (Apple's or Google's) turns your words into text. Tentative never records or keeps the audio. The text is sent for reading like a screenshot, and kept only with your draft on your device.

Sharing a plan

Sharing is always your choice. Before you share, Tentative shows exactly what will be published: the event details and, if you add one, a cover picture. Your personal notes, reminders, the original capture and your account details are never published.

• Who can see it: anyone who has the link. Links are unlisted, and the pages ask search engines not to index them.
• Host updates: if you offer updates, people who saved your plan with updates on are linked to it, so your later changes and cancellations reach their copies.
• Saves: when someone saves a shared plan, we record that their account saved it, so each account is counted once. Counts are internal; we don't show them publicly.
• How long it stays up: a shared page stays available until you stop sharing or every event it shows has ended. After that the link stops working, and its cover picture is deleted. When a host cancels an event that others saved with updates, the cancelled version stays visible through the event's last day, and for at least 24 hours, so people who saved it learn of the cancellation.
• People who open your link see the page without an account. If they save it, the copy on their phone is theirs: stopping sharing doesn't remove copies people already saved.

Reminders, calendar and notifications

• Reminders are scheduled on your phone. Turning on notifications lets Tentative show them.
• Calendar: when you add a plan to your calendar, Tentative hands the event to your phone's calendar once. It doesn't read your calendar or track the entry afterwards.
• Host-change alerts: if you saved a shared plan with updates and allow notifications, your phone registers a notification token with Apple or Google, and we keep it with your account so a host's changes or cancellation can reach you. Signing out removes it. The alert passes through Apple's or Google's notification service and contains the plan's title and what changed.

Analytics and crash reports

We use PostHog to understand how Tentative is used and to fix problems. It receives:

• the names of actions, such as "plan saved" or "signed in", with simple details like how many plans were saved or which capture type was used
• daily counts of what's in your account, such as how many plans, groups and reminders you have and how much space they use
• an identifier for your account (not your email address or name)
• crash and error reports, including the device model and operating system version
• your phone's time zone and language settings
• an approximate location, down to city and postal code, worked out from your device's IP address when the information arrives. PostHog then discards the IP address and doesn't store it.

PostHog receives no plan details, notes, captured content, links or sign-in codes. We don't record your screen or sessions.

Who processes information for us

These services may process information in the United States and other countries. We don't sell or rent personal information to anyone, or share it for advertising.

How long we keep information

• Account information: until your account is deleted.
• Shared plans: until the link ends, as described above.
• Captured content: not stored by us. The AI services' limited retention is described above.
• Deleted accounts: a record of the account's random identifier and when it was deleted, so your other phones know to remove its plans.

Deleting your account

You can delete your account in the app: open My account and tap Delete account. You need to be online. Deleting your account:

• deletes your email address, name and password
• deletes your shared plans and their cover pictures, so your links stop working and people who follow your plans stop getting your updates. They keep their own copies, and nothing is marked cancelled for them.
• removes your plans, groups, drafts and reminders from this phone, and from your other phones the next time they're online
• doesn't change calendar entries you added

If you cancelled a shared plan, people who followed it can still see the cancellation for the time described in Sharing a plan. It's deleted when that time ends.

Analytics and crash reports already sent to PostHog aren't deleted. They carry only the random identifier for your account, never your email address or name.

If you can't use the app, email privacy@tentative.co from the address on your account, and we'll delete your account within 30 days.

Your choices and rights

You can delete your account in the app at any time. You can also access, correct or delete your account information by contacting us. Depending on where you live, you may also have the right to object to or restrict processing, to receive a copy of your information, or to complain to a data protection authority. We'll respond within the time the law requires.

You can turn off camera, photo, notification and calendar access at any time in your phone's settings. Tentative keeps working, without the features that need them.

Children

Tentative isn't intended for children under 13, and we don't knowingly collect their information. If you believe a child has created an account, contact us and we'll delete it.

Security

Information sent between the app and our services is encrypted in transit. Access to our databases is restricted to the person's own account through access rules. No service is perfectly secure, but we work to protect your information and to collect as little as Tentative needs.

Changes to this policy

If we change this policy, we'll update the effective date above. If the change is significant, we'll tell you in the app before it takes effect.