Privacy Policy

1. About the app

WeTwo is an app for two people (a couple): a shared calendar, tasks, wish list, lists and a savings jar. The app is in closed beta testing (TestFlight); features and this policy may change. This policy explains what data we process and why.

2. Data we process

• Account: email address and password (stored on the server only as a hash; we cannot see it) and an account identifier.
• Profile: the name you enter, your colour and couple dates (relationship start, wedding, anniversaries).
• Your content: calendar events, tasks and folders, wishes (title, price, link, photo), lists, savings goals and contributions (amounts, comments), settings.
• Photos: wish photos you take with the camera or pick from your library. The app does not get access to your whole photo library: the system picker passes only the photo you selected.
• Feedback screenshots: up to three photos you choose to attach to a feedback message. They are compressed on the device (metadata and geotags are removed), kept on the server only until they are forwarded to the operator via Telegram and deleted right after that; if forwarding fails, they are deleted within 7 days.
• On-device technical data: appearance and notification settings, the sign-in session (in the system Keychain).

We do not collect: location, contacts, browsing history, advertising identifier, health data, payment data. The app contains no advertising or tracking across apps and websites. It has its own anonymous statistics — see 2a.

2a. Anonymous statistics and crash reports

By default the app sends anonymous statistics to our server (Supabase): which screens are opened and which actions are performed (without content), technical details (app version, iOS, device model, language), crash reports and a random device identifier. The identifier is not linked to your account, email or name and is not used for tracking across apps and websites. We do not collect titles, texts, names, amounts or other content of your records. Data is kept for up to 180 days. You can turn collection off at any time: More → Settings → "Anonymous statistics and crash reports"; turning it off deletes the unsent queue. If you choose to send feedback from the app (a separate action, not controlled by the switch), we receive your message, your account identifier, device model, iOS and app versions, language and theme, and, optionally, a contact for a reply, plus screenshots if you attached any; this information is linked to your account.

3. Why we use it

Only to make the app work: sign-in, storing your records, showing them to you and your partner, syncing between your devices, local reminders. We do not sell data or share it with advertisers or data brokers.

4. Who can see your data

• You.
• Your partner — only what is recorded as shared / "for both". Personal entries and entries marked hidden (for example a hidden task) are not shown to the partner.
• Infrastructure provider — Supabase, Inc. (database and storage; processes data on our behalf). Servers are located in the Oceania — Sydney (Australia) region. Data is transferred over HTTPS.
• Telegram — messenger (Telegram FZ-LLC and affiliates): only if you send feedback yourself, its type, text, device model and iOS version, and any screenshots you attached are forwarded to the operator's private bot so we can respond quickly. Your email, account ID and other details are not forwarded to Telegram. Please do not put passwords, card numbers or other secrets in feedback or attach screenshots of them.
• We do not disclose data to third parties except where required by law.

5. Where and how long data is kept

Data is kept on Supabase servers and on your phone for as long as you have an account. The on-device copy is erased when you sign out. After you delete your account (see §6) your data is deleted; the provider's technical backups may be kept for a limited time, as set by the provider.

6. Deleting your account and data

You can delete your account in the app: More → Settings → Delete account (confirmed with Face ID / passcode). This will:

• delete your profile, email and sign-in, your personal records and your files (photos);
• if you were paired, shared events, tasks and wishes remain with your partner as their own records, so they lose nothing; the on-screen text at deletion explains this.
• The action is irreversible. If deletion in the app fails, write to support@wetwo.app.

You can also disconnect the pair: shared records are copied to both people as personal ones and the link ends.

7. Your rights

You can access your data (it is visible in the app), correct it (edit in the app), delete it (delete records or the whole account), and revoke camera/notification permissions in iOS Settings. If you are in the EU/UK — GDPR rights (access, portability, restriction, objection, complaint to a supervisory authority); in Russia — rights under Federal Law 152-FZ; in California — CCPA/CPRA. To make a request, write to support@wetwo.app; we will respond within a reasonable time, normally up to 30 days. Legal bases (GDPR): performance of the contract (providing the app) and your consent through device permissions.

8. Children

The app is not intended for people under 16. We do not knowingly collect children's data; if you believe a child created an account, contact us and we will delete it.

9. Security

HTTPS connections; record access is restricted by database policies (RLS) at the couple level; passwords are hashed; the session is in the Keychain. No system is perfectly secure and we cannot guarantee against a breach. There is no end-to-end encryption yet (planned, not promised).

10. Transfer of data abroad

The operator is based in Russia and the Supabase servers are in Australia. Your data is therefore transferred from Russia (and from the country where you use the app) to Australia and stored there. The transfer uses a secure connection. By using the app you agree to this. If you do not agree, do not use the app or delete your account (§6).

11. Changes

We may update this policy and will tell you about material changes in the app. The date of the latest version is at the top.

12. Contact

support@wetwo.app. We do not publish a postal address; for any request, including data deletion, write by email.