01
What we record
Everything below is either something you typed, something you switched on, or a plain count of how the app is used. Nothing else is collected quietly in the background.
Your accountAn email address verified by code, a first name, a date of birth, and a password stored encrypted and never readable by us. If you choose to, a verified phone number so you can recover your account.
What you createMemories, photos, plans, dates, the words you leave each other, goals and time capsules. This content is readable only by you and, if you are paired, by your other half.
Your locationOnly if you turn sharing on. It is visible to your other half alone, disappears the moment you turn the switch off, and expires by itself after twenty four hours. The app never follows you in the background without your knowledge.
Your notification addressOnly if you accept notifications. It is removed when you sign out or turn them off.
Your subscriptionWhich plan is active and when it expires. We never see your payment details. Apple handles the payment and tells us only whether it went through.
The links you pasteWhen you use link import, the link and the public page behind it are read by a language model in order to turn them into plans. We keep the plans, we do not keep the page.
How the app is usedWhich screens open and which features are used: the name of the action, the moment, your app version, tied to your account identifier so that we count people rather than taps. Never what you write, never a photo, never a place. It tells us where people get stuck, nothing more.
02
Where your data lives
On Appwrite Cloud servers hosted in Frankfurt, Germany, inside the European Union. Photos are stored in a private space: no public address can reach them.
A few of the services listed further down sit in the United States, and only they receive anything outside the Union. Never your content, only what their job needs.
03
Who can read what
Every piece of data carries its own permissions, checked by the server rather than hidden by a screen. What you share is readable by your couple only, what you keep to yourself by you alone. Anything you mark as yours stays yours: it follows you when you pair up, and it follows you if you part.
04
If you part
Breaking up destroys nothing. Each of you leaves with what was private, and the shared life stays in the couple you both left, kept for one year in case you come back, then erased for good. Come back within the year and we ask you first: pick your story up where it stopped, or start fresh. Starting fresh erases the old one immediately.
05
Deleting your account
From the app: Settings, then “Delete my account”. Deletion is immediate and final. Account, reviews, photos and location included. If you were paired, the couple you shared is destroyed with it, and your other half leaves with what was theirs alone.
06
The services that help us
None of these services receives more than its own function strictly requires, and none of them is allowed to use it for anything else.
Appwrite CloudHosts your account and your content.
European Union
ExpoCarries push notifications to your phone.
European Union
Apple Maps or Google MapsDraw the map underneath.
European Union
OpenStreetMap NominatimFinds the addresses you type.
European Union
Google PlacesFinds the real places around you for the discovery deck: name, address, rating, photos. It receives the approximate position you are searching from, never your account.
European Union
OpenAgendaLists the public events around you for the same deck. It receives the area you are looking at, never your account.
European Union
TicketmasterLists ticketed events around you for the same deck. It receives the area you are looking at, never your account.
United States
AppleTakes the payment for a subscription. We receive the outcome, never the card.
European Union
RevenueCatChecks that a purchase is genuine. It receives your account identifier and the state of your subscription, nothing else.
United States
AnthropicThe language model that reads a link you paste and turns it into plans. It receives the link and the public page, never your account or your content.
United States
ApifyReads certain public pages that refuse to be read directly. It receives the link alone.
Region not stated
TwilioSends the verification code when you add a phone number. It receives that number alone.
United States
PostHogCounts how the app is used. It receives your account identifier and the names of what you do in the app, never your content.
European Union
07
Age
2Gether is for people aged 14 and over. We ask for your date of birth when you sign up, and an account below that age is not created.
08
Writing to us
For any question or request about your data, a copy, a correction, an erasure, write to contact@to2gether.app and a real person will answer.