Privacy Policy

Tandem by lalo-app · Last updated: October 8, 2026

In short: Tandem reads your product catalog to build “Pairs well with” and “Similar products” recommendations and writes them back into your own Shopify store. It does not access your customers. Your catalog is only held in memory while recommendations are calculated. The app never changes your products.

1. Who we are and our role

Tandem is a Shopify app made by lalo-app (“we”, “us”). For data about your store that the app processes on your behalf, you, the merchant, are the controller and we act as your processor. This policy explains what the app accesses, why, where it is kept and for how long. Contact: support@lalo-app.com.

2. What the app accesses

When you install Tandem, it needs the following permissions:

Read products (read_products). This covers product and variant data such as titles, types, tags, vendors, options, prices, availability, images, collections and short text product metafields (for example, your own category labels). The app uses it to understand your catalog and to choose recommendations.
Its own records in your store (read_metaobjects, write_metaobjects). Tandem writes the finished recommendations into app-owned entries in your store, and keeps its settings in app-owned metafields. Your theme blocks read the recommendations from there.

Two permissions are optional. You grant them only if you switch the related feature on in Tandem → Data & exchange, and you can revoke them at any time:

Orders (read_orders). On the Pro plan, this powers “Bought together”, which puts products that are bought in the same orders first, and the revenue of recommended products on the Analytics screen. Before Shopify asks you for this permission, Tandem shows you exactly what it reads and keeps, and you choose yes or no. The app reads the products in your orders, their quantities and amounts, the order date and whether the order was cancelled or a test. It does not read names, emails, phone numbers, addresses or any other customer details. Which products are bought together is computed in memory and not stored; for Analytics, Tandem keeps daily counters per product (see below). Single orders are never stored.
Inventory (read_inventory). This powers the “show from N in stock” threshold. The app reads stock quantities only.

Tandem does not access customer records, checkouts, payment information or staff accounts. It does not collect personal data about your customers.

3. Where data is kept

In your Shopify store: settings, rules, promo campaigns, your product edits and the finished recommendations. They are stored as app-owned data that only Tandem can change.
On our server:
- the store identifier and access token issued by Shopify, so we can read your catalog and write recommendations;
- your catalog, held in memory only while recommendations are calculated. It is never written to disk;
- for the Analytics screen: daily counters per product — how often a recommendation block was seen, a card was clicked or added to the cart and, if you allowed access to orders, how many orders, units and how much revenue came from recommended products. No customer or visitor data is part of these counters.
Hosting: our server is in France (European Union) and is operated for us by Contabo GmbH. All connections are encrypted (HTTPS). Data on the server's disk is not separately encrypted; access to the server is limited to us and protected by key-based login and a firewall.

4. Shared anonymous statistics

To make proposals better for every store, Tandem can count what merchants decide about its proposed pairings. The option is called “Help improve Tandem”. It is on by default, and you can switch it off at any time in Data & exchange.

What is counted: category pairs from Shopify's public product taxonomy, each with a decision. For example: “Bicycles → Bicycle lights: accepted”.
What is never included: products, product titles, prices, sales, customers, and any identifier of your store. Our server keeps only running totals.
Counted once: each store counts a pair once. Your store remembers what it reported, in its own app data, so a changed decision moves the total instead of adding to it.
Minimum of five stores: a total influences proposals only after decisions from at least five different stores. This means a single store's choices cannot be seen through it.
Switching it off takes your store's decisions back out of the totals.

These totals do not relate to an identified or identifiable person, and they are not personal data. We collect them on the basis of our legitimate interest in improving the service. You can object by switching the option off.

5. Who else sees the data

Shopify hosts your store and processes billing for paid plans. We never see your payment details.
Contabo GmbH provides the server infrastructure. It does not use the data for its own purposes.
Email: messages you send to support@lalo-app.com pass through Cloudflare Email Routing to our mailbox. We use them only to answer you.

We do not sell your data, do not use it for advertising and do not share it with anyone else.

6. How long we keep it

Analytics counters are kept for up to 400 days, then deleted automatically.
When you uninstall Tandem, the access token and your store's analytics counters are deleted right away. Shopify removes the app's data from your store (settings and recommendations) automatically.
Data erasure request: when Shopify sends one for your store (48 hours after uninstall), anything that is still left on our side is erased.
Anonymous statistics: totals contain nothing that identifies your store, so they are kept.

7. Your customers

Tandem holds no personal data about your customers, so requests to access or erase customer data that Shopify forwards to us are answered automatically. There is nothing to return or delete.

The recommendation blocks on your storefront do not set cookies and do not track visitors. They send two kinds of requests, both to your own store: to its cart, when a shopper adds products, and anonymous daily counters (a block was seen, a card was clicked or added — no visitor identifier) through your store's app proxy, which Shopify forwards to Tandem for the Analytics screen. When a visitor declines analytics in your store's cookie banner (Shopify's Customer Privacy API), the counters from that visit are not sent.

8. Your rights

You can ask us to access, correct, export or delete the data we hold about your store by writing to support@lalo-app.com. We also process data requests that Shopify forwards to us under GDPR and similar laws. If you are in the EU, you may lodge a complaint with your local data protection authority.

9. Cookies in the app

Tandem runs inside your Shopify admin and authenticates you with Shopify's session tokens. We do not use advertising or analytics cookies and do not track you across sites.

10. Changes

If the way we handle data changes, we will update this page and the date at the top. Material changes will also be announced inside the app.

11. Contact

Questions about privacy: support@lalo-app.com.