Twosday

Privacy Policy

Effective date: 3 November 2026

Twosday ("the app") is a relationship journaling app that uses AI to help couples reflect individually and communicate together: a private space for each of you, and a shared space for the conversations you have together. It is provided by Twosday App Ltd, a company registered in England and Wales (company number 17540701, registered office 128 City Road, London, EC1V 2NX) ("we", "our", "us"), which is the controller of your personal data. This policy explains what data we collect, how we use it, and your rights.

What We Collect

• Account information — your name, pronouns, an optional photo and your time zone, and either your Apple account's identifier or your email address and password (kept only as a hash). If you sign in with Apple, we also keep a token from Apple, encrypted, so we can end Twosday's access to your Apple account when you delete yours.
• What you tell Twosday about your relationship — your answers when you join: your partner's name and pronouns, when your relationship began and what you'd like more of. If you choose to answer, they also include how you describe your relationship, such as its structure, and things like a baby on the way. You can change them at any time.
• Conversation content — your messages in private sessions and in conversations with your partner, the summaries Twosday writes, the notes you keep, the threads it follows, and what it remembers about you (context documents, which give continuity across sessions).
• Audio — when you use a voice feature, your audio is streamed to Deepgram to be turned into text. We never keep the audio of a recorded conversation or a spoken answer: a recording is kept only as its summary, and a spoken answer as its words. A voice memo you add to a capture is saved with the capture, along with its transcript.
• Captures and Memory — the captures you write, with any photos or voice memo. A capture can stay private or be saved to Memory, your shared archive: the captures either of you saves there, the takeaways from the conversations you have together, and your relationship's milestones. Once you're paired, you and your partner both see Memory.
• Relationship data — the link between you and your partner, and what you tell Twosday about them (see Information About Other People).
• Device information — a token from Apple that lets us send you notifications.
• Usage and diagnostics — which features you use, through PostHog, never what you write, record or feel; and reports of errors and crashes, through Sentry. Both know you only by a random ID. You can turn usage analytics off in Settings.
• AI use — how much of Twosday's AI each person uses each day, so we can keep within our limits.
• Messages to us — what you write to support@twosday.app.
• Reports — if you report something, or something you shared is reported, we keep the report and a copy of what it's about, review it, and keep it as the record of what we decided, even after an account is deleted (see our Terms of Use).
• The waitlist — if you join it on our website: your name, your email, and whether you have a partner.

Sensitive Information

Much of what people share with Twosday is sensitive: their health and mental health, their sex life, their sexual orientation. Data protection law calls this "special category" data.

We use it only to provide Twosday to you, and only with your explicit consent. We ask for it when you join, before any question about you or your relationship. Twosday can't work without what you choose to share, so without that consent you can't use it.

You can withdraw your consent at any time by deleting your account, in Settings. We then stop using what you've shared, and delete it as described under Data Retention.

If you live in Washington or Nevada, our Consumer Health Data Privacy Policy says more about your health data.

How We Use Your Data

• To provide the service — your conversation content is sent to Anthropic's Claude API to generate AI responses, session summaries, and context documents. When you're writing a capture, our server counts its words to decide whether to offer you a prompt; that doesn't keep it or send it to Anthropic, which sees it only if you start a conversation from it.
• To maintain continuity — session summaries and context documents are stored so the AI can remember prior conversations.
• To send transactional emails — email verification and password reset codes are sent via Resend.
• To improve Twosday's AI, only if you say yes — Twosday asks you once whether what you write may be used to train and research the AI behind it, and you can change your answer at any time in Settings, under Model improvement. It's off unless you say yes. Before anything is used, your name and the details that identify you are taken out. A conversation you have with your partner counts only if you both said yes. If you turn it off, or delete your account, nothing you wrote is used from then on.

Training AI Models

What you write may be used to train large language models only if you say yes to Model improvement, and only with your name and the details that identify you taken out. Without that yes, we don't collect or use your personal data to train them. We never sell personal data. Anthropic and Deepgram, which process what you share for us, don't train their models on it.

Why We Use Your Data, and On What Basis

• Providing Twosday — your account, the AI's replies, summaries and memory, your shared space, notifications, and emails about your account: our contract with you (UK GDPR Article 6(1)(b)).
• The sensitive information you share — your explicit consent (Article 9(2)(a)), which you give when you join.
• Improving Twosday's AI, if you say yes — your consent (Article 6(1)(a)).
• Usage analytics and error reports, to fix and improve Twosday — our legitimate interest in a working, improving app (Article 6(1)(f)). You can turn usage analytics off in Settings, and object at any time.
• Keeping Twosday safe — spending limits, security, and handling reports of illegal content: our legitimate interests (Article 6(1)(f)), and legal obligations such as the Online Safety Act (Article 6(1)(c)).
• The waitlist — your consent when you join. You can ask us to remove you at any time.

The Privacy Boundary

Your private sessions are never shared with your partner, or used for what the two of you see together, unless you choose to keep a note for both of you. This boundary is enforced at the server level — it is not a UI-level restriction.

When you keep a note for both of you, only that note crosses the boundary: your partner's Twosday keeps it in mind, and it can shape the Themes you both see, without your name on it.

Information About Other People

You may tell Twosday about your partner, or about an ex, whether or not they use it: their name and pronouns, and anything you write about them. We use it only to help you. It stays in your private space and is never shown to them or to anyone else.

When you pair, your answers about the relationship itself become the couple's, which either of you can see and change.

If you've been written about and don't use Twosday, you can contact us to exercise your rights.

Sharing Outside Twosday

Either of you can make a picture of up to nine memories from Memory and share it outside Twosday, to Messages or Instagram for example. It can show any memory in Memory, including ones your partner saved. You choose which memories it shows, and its headline and line. The picture is made on your phone, and once you share it, it is no longer in Twosday's control.

If you ask Twosday to suggest the headline or the line, the words of the memories you chose are sent to Anthropic's Claude API to write it. The text that goes with the picture carries a link to sign up for Twosday, never a code to join your relationship.

Third-Party Services, and Where Your Data Goes

• Anthropic (Claude API), USA — processes conversation content to generate AI responses. Anthropic doesn't use what we send it to train its models, and its data retention policy applies to it. See Anthropic's privacy policy.
• Deepgram, USA — turns speech into text when you record a conversation, answer aloud in a voice session or add a voice memo, and speaks Twosday's lines aloud in voice sessions. It receives the audio, and the text of what Twosday says, which can mention what you and your partner said. We ask Deepgram not to use any of it to train its models, so it keeps it only as long as it takes to process. See Deepgram's privacy policy.
• Railway, USA — hosts our server and its database, in US East. See Railway's privacy policy.
• Resend — sends transactional emails (verification codes, password resets). See Resend's privacy policy.
• Cloudflare R2 — stores the photos and voice memos you add to captures, and our encrypted database backups, which are kept in Western Europe. See Cloudflare's privacy policy.
• PostHog, USA — product analytics: which features are used, under a random ID, never what you write, record or feel. See PostHog's privacy policy.
• Sentry, EU (Germany) — receives reports of errors and crashes, which we use to fix them. See Sentry's privacy policy.
• Apple — Sign in with Apple, and notifications: a notification's text can include your partner's name. See Apple's privacy policy.
• Google Workspace — our email, including support@twosday.app. See Google's privacy policy.

These providers handle your data only on our instructions, under contracts that require them to protect it.

Some of them process data in the United States. When your data leaves the UK, we rely on the UK's approved safeguards: the UK Extension to the EU–US Data Privacy Framework where the provider is certified under it, and otherwise the UK's International Data Transfer Addendum in our contract with the provider. You can ask us for details.

Data Storage and Security

Your data is stored in a server-side database hosted on Railway in the United States (US East); photos and voice memos are stored in Cloudflare R2. API keys and sensitive credentials are never stored on your device. Communication between the app and server uses HTTPS/WSS encryption. Passwords are hashed using argon2id and are never stored in plain text.

Data Retention

Your data is retained for as long as your account exists. When you delete your account (available in Settings), we delete your data from our database straight away, and your photos and voice memos from storage shortly after. That includes:

• Your user profile
• All private sessions and messages
• Your captures, with their photos and voice memos
• All notes, threads and your private context document
• What you made on your own: Memories, Things To Discuss, guides and recordings

One thing stays: what you made together with a partner. A relationship you're in ends as if you had left it (below), and what the two of you made together stays in your partner's archive until they delete it, as messages you sent stay with whoever received them. Your words in your conversations together stay there, and summaries keep the names they were written with; your photo, your account name and your answers about yourself don't.

If either of you ends the relationship, what you made together (your conversations together and their summaries, your Things To Discuss and guides, and the Memories of them) is kept as an archive that only the two of you can open, read-only, from your profile, and it comes back if you pair again. Each of you can delete it for yourself; it's deleted once you both have. Each of you keeps your private space, the captures you saved to Memory, and what you made on your own. Themes, Lately and Insights from your time together are deleted.

Some things last a little longer:

• our backups, kept so we can recover from a failure, hold deleted data for at most five weeks;
• the daily counts of your AI use stay for 35 days, under a code that doesn't name you;
• sign-in codes expire within 24 hours;
• error reports stay with Sentry for 90 days, and usage analytics with PostHog for up to seven years, both under a random ID;
• our server's logs, which record requests and errors but not what you write, are kept for up to 90 days;
• the waitlist keeps your details for 12 months after you join, or until you ask us to remove them.

Your Rights

• Access and a copy — see your data in the app, and ask us for a copy at support@twosday.app. We reply within one month.
• Deletion — you can delete your account and your data at any time from Settings. What you made together with a partner stays in their archive until they delete it, as above.
• Correction — change your profile and your answers in the app, or ask us about anything else.
• Portability — ask for what you gave us in a common format.
• Objection and restriction — ask us to stop or limit a use of your data, including usage analytics. You can turn usage analytics off in Settings.
• Withdrawing consent — at any time: to the sensitive information you share, by deleting your account in Settings, and to model improvement, by changing your answer in Settings.
• Complaint — to the Information Commissioner's Office, at ico.org.uk or 0303 123 1113. We'd like the chance to help first.

Twosday's AI doesn't make decisions about you with legal or similarly significant effects.

If you live in the US

You have these rights wherever you live. To use them, email support@twosday.app from the address on your account or, if you sign in with Apple, write to us in the app: Settings, then Report a concern. We answer within 45 days at the latest. If a request needs longer, we tell you why within that time, and answer within 45 more.

If we turn your request down, you can appeal: reply to our answer, or email us with "Appeal" in the subject. We answer an appeal in writing within 45 days, with our reasons. If we still say no, you can complain to your state's Attorney General, such as Connecticut's.

We don't sell personal data or use it for targeted advertising, so there's nothing to opt out of. If you live in Washington or Nevada, our Consumer Health Data Privacy Policy covers your health data.

Children

Twosday is not intended for anyone under the age of 18. We do not knowingly collect data from minors.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

Contact

Twosday App Ltd is registered with the Information Commissioner's Office, registration number ZC290570. For questions about this policy, or requests about your data, email us at support@twosday.app, or write to us at 128 City Road, London, EC1V 2NX.