Delete your data

Last updated 8 June 2026

Tendo has no account and no login, so there's nothing to "close" — but you can still delete the small amount of anonymous data we hold. Here's exactly how, and exactly what gets removed.

Tendo has no login

Tendo never asks you to create an account, and there is no username, password, or sign-in. When you first launch the app, it generates a random anonymous device id and stores it locally (in localStorage / your device's app storage). That id is the only thing that ties your solve scores to "you" — it is not linked to your name, your email, or any real identity, because we never had any of those.

Because of this, "deleting your data" means two things: wiping the game data stored on your own device, and asking us to delete the anonymous rows keyed to your device id on our server.

Two ways to delete

Option 1 — In the app (recommended)

1. Open Tendo.
2. Go to Settings → Privacy → Delete my data.
3. Confirm. The app immediately wipes your local game data and sends a deletion request to the Tendo Cloudflare Worker for the anonymous rows tied to your device id, plus your RevenueCat record.

This action is permanent. Once it completes, your scores, streak, and country-linkage cannot be recovered.

Option 2 — By email

If you've already uninstalled the app, or you'd rather not use the in-app option, email us:

• Write to [email protected] from any address.
• Tell us you want your Tendo data deleted. If you still have the app, including your device id (Settings shows it) helps us locate the exact rows; if you can't provide it, we'll still delete the anonymous server data we can match to your request.
• We delete the associated anonymous server data and reply to confirm when it's done.

Because we hold no name or email tied to your play, you don't need to "prove" an account — there isn't one. We simply remove the anonymous data linked to the device id you give us.

What gets deleted

When you delete, we remove the anonymous data we hold on our side:

• Solve scores — your per-puzzle solve times submitted to the leaderboard.
• Streak — your streak record and any related milestone rows.
• Country — the country code we derived from your IP at solve time (we never stored your IP, only the country).
• Purchase-linkage on our side — your RevenueCat record, which maps your anonymous device id to a Tendo Plus subscription or Streak Shield entitlement.
• Local device data — if you delete from inside the app, your on-device game state (the anonymous device id, settings, and local progress) is wiped too. If you delete by email after uninstalling, removing the app already cleared the local copy.

What we never had

To be clear about scope, Tendo never collected — and therefore cannot hold or delete — any of the following, because they were never part of the game:

• No name — we don't ask for one.
• No email — there's no sign-up, and contacting us by email is your choice.
• No precise location — only a country code derived from your IP; never GPS or a street-level location.
• No account — no login, no password, no profile to take over.

Tendo also serves no ads and uses no advertising identifiers, so there is no ad profile to erase.

About your purchase receipts

Tendo Plus (a $1.99/month subscription — an optional $14.99/year variant grants the same entitlement) and the Streak Shield ($1.99 one-time item) are billed through Apple's App Store or Google Play. We delete the purchase-linkage we hold via RevenueCat, but the underlying purchase receipts and billing records held by Apple and Google are governed by their own policies, not ours. We cannot delete those on your behalf.

• To manage or cancel a subscription, use your Apple ID or Google Play account settings.
• For receipt and billing-record retention, refer to Apple's and Google's privacy policies and account tools.

Deleting your Tendo data does not by itself cancel an active subscription at the store. If you want to stop billing, cancel it in your Apple or Google account.

Crash diagnostics

Tendo sends crash logs to Sentry to help us fix bugs. These are scrubbed of personal information and are opt-out — you can turn them off any time under Settings → Privacy → Crash reporting → Off. They are not tied to your identity and are retained only for a limited period before being discarded.

Questions or help

If anything is unclear, or your deletion doesn't seem to have gone through, email [email protected] and we'll sort it out. For the full picture of what we do and don't collect, see our Privacy Policy.

Tendo is available in English, 日本語, 繁體中文, and 简体中文. Data Controller: KKD studios. Mailing address: [to be finalized].