Privacy.
This page covers two things: what this website does with your visit, and what the Tandym application does with your practice’s data. Both answers are short.
This website
This site is a set of static files. It sets no cookies, runs no analytics, and embeds nothing from third parties — every request stays on this domain, and the page’s Content-Security-Policy enforces that in your browser. It is served by Cloudflare Pages, which, like any web host, receives standard connection data (such as your IP address) in order to deliver the page.
Requesting a demo takes you to an external scheduling page; anything you enter there is governed by that service’s own policy.
The application
Tandym processes assessment score-report PDFs and writes reports entirely on the computer it is installed on. Assessment and report data are never uploaded — there is no cloud component to send them to.
The application’s sole network call is a licensing handshake with our licensing server. Its payload is a strict allowlist — license key, a salted one-way machine-fingerprint hash, a platform constant, the app version, and server IDs — and never file names, paths, scores, hostnames, usernames, or report content. The allowlist is pinned by an automated test, tests/unit/test_licensing_privacy.py; if a build tried to send more, the test suite would fail.
License state is stored encrypted on the machine. When a license expires, report generation stops — templates, reports, and audit files are ordinary files on your disk and stay there.