Proof of consent

To create an account or sign in, a person enters their email address on Tend’s sign-in page and taps Send code. Tend then sends a single 6-digit verification code to that address via email.

Sign-in is email-only. Tend does not send SMS verification or one-time password codes.

• ·Daily check-in reminders via SMS — optional. Users must navigate to Settings → SMS Reminders, enter their mobile number, check the explicit consent box, and tap Enable SMS reminders. Message frequency is at most once per day, and only on days the user has not already checked in.
• ·No marketing messages. Tend never sends promotional, advertising, or third-party content.
• ·No sign-in codes via SMS. Authentication is email-only.

Before enabling SMS reminders, the user sees a description of the service in Settings → SMS Reminders:

“Get a daily check-in reminder by text. We’ll skip the message if you’ve already checked in.”

The user must then enter their mobile number and check a required checkbox showing this exact text before the submit button is enabled:

“I agree to receive text message reminders from Tend. Message & data rates may apply. Reply STOP at any time to unsubscribe.”

The Enable SMS reminders button remains disabled until both the phone number field is filled and the consent checkbox is checked. Opt-in is therefore always an explicit, affirmative act.

Tend uses Supabase Auth to manage accounts. Account creation records:

• ·The verified email address.
• ·Account creation timestamp (auth.users.created_at).
• ·Most recent sign-in timestamp (auth.users.last_sign_in_at).

When a user enables SMS reminders, the following are stored in the profiles table:

• ·The mobile phone number (phone).
• ·An opt-in boolean (sms_opt_in: true).
• ·Timestamp of opt-in (sms_opt_in_at).

Disabling SMS reminders sets sms_opt_in to false and clears sms_opt_in_at.

• ·Stop SMS reminders: open Settings → SMS Reminders and tap Turn off SMS reminders. The opt-in record is cleared and messages stop immediately.
• ·Reply STOP: texting STOP to any message from Tend immediately opts out. No further messages will be sent.
• ·Delete account and all data: email the address below and we will remove the account, all entries, photos, pending items, summaries, and SMS opt-in records.

Consent records (timestamps of verification, sign-in events, and opt-in flags) are retained for the lifetime of the account. On account deletion, all user data is removed; consent records are retained in an audit log for up to 12 months thereafter as required to demonstrate prior opt-in to providers and regulators.

Questions about how we collect or record consent? Email hello@tendjournal.app.