Twofold Privacy Policy

This policy explains how Vailgrid handles data for the Twofold Android app and supplements the shared Vailgrid Privacy Policy.

Accounts and Relationship Data

Twofold uses Supabase in Seoul, South Korea for email authentication, couple pairing, shared calendars, questions, albums, and private media storage. Supabase processes your account email, your Terms acceptance version/time, and the content you enter. Optional compatibility profiles include birth dates, birth times when known, and calendar preferences that you enter for relationship features. These profiles stay in the account that entered them and are not shared through the partner album or used as advertising inputs. Compatibility interpretations are for entertainment. When account email delivery is configured, confirmation and password-reset messages are sent through the configured email provider. The app keeps a local encrypted checkpoint for edits awaiting upload. Connected content is shared with your partner only as described in the app; private entries and drafts are not intentionally shared.

Photos, Exports, and Device Copies

Photos and videos you choose to add are stored in private Supabase Storage. Exports, downloads, cached media, and files already saved on another device may remain outside Twofold's control. Protect exports that contain personal memories.

Safety Reports and Blocks

When you report a connected partner, Twofold stores your account identifier, the reported account identifier, the reason you select, and the time of the report. A report about a shared memory also stores its identifier and a limited excerpt of its title and body for review. Reports are restricted to authorized safety operators. Blocking ends the connection and records the two account identifiers so the same accounts cannot pair again while the block remains. Contact support for help with a block. See the Twofold Terms of Use for content rules.

Advertising

Eligible free users may see Google AdMob banners on Home after the consent flow permits requests. Requests are non-personalized. Unknown eligibility or consent and ages under 16 suppress requests; eligible teens receive age-restricted treatment. Advertising eligibility stores only an age band, separately from optional compatibility birth profiles. You can update it and revisit consent in Advertising privacy. The SDK may process identifiers, device information, ad interactions, diagnostics, and IP addresses that can indicate approximate location for advertising, measurement, and fraud prevention. This is separate from Firebase Analytics, which is disabled. No memories, answers, photos, partner details, or health information are sent as targeting parameters.

Existing purchase records

New in-app purchases are unavailable in the ads-only release. Google Play handles any existing subscriptions. Our server verifies purchase tokens and stores product, status, expiry, and purchaser association. Coverage for a partner is derived from the current pairing. A minimal ownership record is retained after account deletion to prevent reusing a receipt on another account. It contains no album content. See the subscription terms.

Notifications, widgets, and calendars

Local reminders and widget settings stay on your device. Widgets hide relationship details by default. Optional partner-update notifications use Firebase Cloud Messaging without Firebase Analytics. When you opt in, we store a device delivery token, session association, language, and selected notification categories. Deliveries are queued durably, checked against current sharing access, and contain generic update text rather than memories or answers. Logout, deletion, and loss of pairing access revoke routes and pending deliveries. A notification already displayed may remain until dismissed.

Optional calendar sync writes only the plans you select into a dedicated Twofold device calendar. It does not import other events or modify other calendars. Your calendar provider may synchronize those entries to its own service according to your device settings. Permission denial leaves app plans available without calendar sync.

Movie exports

Movies are encoded locally from the accessible photos and videos you explicitly select. Originals are preserved. Partner-private media and unrevealed answers are excluded. Temporary export copies stay in app storage; sharing sends the resulting MP4 to the destination you choose. Recipients and other apps may retain their own copies.

Retention and Deletion

You can request account deletion in Settings. Deletion freezes access, removes the account and its private server data, and clears managed data on the requesting device after confirmation. The remaining partner keeps read-only copies of memories that were published and shared with them, including their associated media. These copies may still contain identifying details and are not automatically redacted. Other devices, user-selected source files, and exported copies are not remotely erased.

Follow the Twofold account-deletion instructionsfor the in-app steps or a request without app access.

Contact

For privacy questions, contact [email protected]. For help, visit Twofold Support.