Privacy Policy

TwoHearts (“we”, “us”) is a mobile app that helps couples plan adventures together, capture memories, and share a private space. This policy explains what data we collect, why we collect it, who we share it with, and the choices you have.

We aim to collect as little as possible and to be plain-spoken about what we do with it. If something here is unclear, email us at support@twohearts.com.

1. Information we collect

Account information

• Your email address and password (handled by Firebase Authentication).
• Your name, your partner’s name, the city you live in, and your “together since” date — whatever you choose to share during onboarding.
• An optional profile photo.

Content you create

• Bucket list items, descriptions, locations, and the categories you tag them with.
• Memories you complete, including ratings, notes, and any photos you attach.
• Items you save in the Private Space (these are still stored on our servers; the on-device passcode/biometric lock only controls access within the app).
• Feedback you submit through the in-app feedback form.

Subscription information

• Your subscription status, plan (monthly or yearly), and renewal/expiry dates.
• Apple or Google handles the payment itself — we never see your card or bank details.

AI date-idea prompts

• When you use the “scratch” or discovery feature, your selected vibe, duration, budget, currency, and home city are sent to Anthropic so an idea can be generated.
• We do not send your name, email, partner’s name, or any free-text content to Anthropic.

Technical information

• Device type and operating system, anonymous installation identifiers, and crash diagnostics, used to keep the app working.
• Push notification tokens, so we can let you know when your partner adds or completes an item. You can turn notifications off at any time from Profile → Notifications, and the token for that device is removed.

2. How we use your information

• Provide the app’s core features: bucket list, memories, private space, AI suggestions.
• Sync your data between you and your partner’s devices.
• Process and manage your subscription.
• Diagnose problems, prevent abuse, and improve the product.
• Respond when you contact support or send feedback.

We do not sell your personal data. We do not use it for advertising.

3. Third-party services we rely on

TwoHearts is built on a small number of third-party services. Your data passes through these providers as needed to make the app work. Each one has its own privacy policy linked below.

• Google Firebase — authentication, database (Firestore), and cloud functions. Your account information and all content you create are stored here. Firebase privacy.
• Cloudinary — stores the photos you attach to memories and your profile picture. Cloudinary privacy.
• RevenueCat — processes and tracks your subscription status across devices. RevenueCat privacy.
• Apple App Store / Google Play — handle the actual payment for your subscription. Apple privacy · Google privacy.
• Anthropic — generates AI date ideas from the preferences you choose on the scratch screen. Anthropic privacy.

4. Sharing with other people

TwoHearts is built for couples. When you connect with a partner, the two of you share a bucket list, memories, and the Private Space — both of you can see and edit them. We never share your data with anyone else outside the providers listed above.

5. Data retention and deletion

• We keep your data for as long as your account is active.
• You can delete individual bucket-list items, memories, or photos at any time inside the app.
• To delete your entire account, open the app and go to Profile → Delete account. We immediately remove your profile, your stored photos, and the personal attribution on any items the two of you shared. Your partner’s account and your shared memories are preserved — the contributions you made are anonymized rather than wiped, so your partner keeps the history that’s meaningful to them.
• If you can’t access the app, email support@twohearts.com from the address on your account and we will remove it within 30 days.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise any of these rights, email support@twohearts.com.

7. Children

TwoHearts is not intended for anyone under 17. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. International transfers

Our providers operate globally, and your data may be processed in countries other than your own, including the United States. Where this happens we rely on appropriate safeguards (such as standard contractual clauses) put in place by those providers.

9. Security and staff access

We use the security features offered by our providers (encryption in transit and at rest, strict access controls on our infrastructure) and we do our best to keep your data safe. No system is perfectly secure; if a breach affects your data we will notify you in line with applicable law.

TwoHearts staff may access content stored on our infrastructure (including photos in our media library) when responding to support requests, investigating abuse, or troubleshooting technical issues. We do not access your content routinely or for any other purpose.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top, and for material changes we will let you know inside the app.

11. Contact

Questions, requests, or concerns? Email support@twohearts.com.