Privacy Policy
In short: the WhatsApp chat you upload is used only to generate your deck and is never stored. We keep your Google account details, the decks you choose to save, and a record of any purchases. We don't sell your data or use it for advertising.
This policy explains what information TwoUs ("we", "us") collects when you use our website at twous.app or our Android app, how we use it, and the choices you have. TwoUs is not affiliated with WhatsApp or Meta.
1. Information we collect
- Google account details — your name, email address and profile picture, when you sign in with Google.
- Chat content you upload — the text of a WhatsApp chat export you choose to upload, including the messages and the names of the people in it. See section 3 for exactly how this is handled.
- Decks you save — the cards, relationship aura, statistics, poem, letter and toast generated for you, plus the nicknames shown on them.
- Purchase history — if you buy deck credits in the Android app: which bundle you bought, the order ID, the price, the purchase token and the credits added to your account.
- Usage events — app activity such as screens reached, decks created and errors, linked to your account or a random session ID, used to understand and improve the product.
- Web analytics — on the website only, and only if you consent, Google Analytics measures traffic and feature usage using cookies.
2. How we use it
- To sign you in and keep your saved decks in your account.
- To generate your deck from the chat you upload.
- To verify purchases with Google Play and add the credits you bought.
- To understand how the product is used, fix problems, and prevent abuse.
We do not use your information for advertising, and we do not sell or rent it to anyone.
3. How your chat is processed
Your chat export is read on your device. To generate a deck, the message text — with the names as they appear, or the nicknames you set — is sent over an encrypted (TLS) connection through our server to the Google Gemini API, which produces the cards, aura, poem and letter. Once your deck is generated, the chat content is discarded. We never store your chat in a database, a file, or our logs.
Some cards quote short lines from your chat. Those quotes become part of your deck and are stored only if the deck is saved to your account.
4. Purchases
Purchases in the Android app are processed by Google Play. We never see or store your card or payment details. We receive the purchase information listed in section 1, verify it with Google Play, and record it so your credits are correct and purchases can be restored.
5. Service providers we share data with
We share data only with the providers that run the service for us:
- Google Firebase (Authentication, Firestore, Cloud Functions) — accounts, saved decks, purchase records, usage events.
- Google Gemini API — receives chat content to generate decks, as described in section 3.
- Google Play — processes and confirms purchases.
- Render — hosts our website and the server that relays requests to Gemini.
- Google Analytics — website traffic measurement, only with your consent.
We may also disclose information if required by law.
6. Shared decks
If you share a deck, anyone who has its link can view it. Links are random and not listed anywhere, but treat a shared link like the deck itself. You can stop sharing by deleting the deck.
7. Data retention
- Chat content: not retained.
- Saved decks: kept until you delete them or delete your account.
- Account records: kept while your account exists, and deleted when you delete your account.
- Purchase records: kept for accounting and tax purposes after a purchase, including after account deletion, and not used for anything else.
- Usage events: kept for up to 14 months.
8. Deleting your data
You can delete individual decks at any time, or delete your whole account and all its data. See twous.app/data-deletion for the steps, or email support.twous@gmail.com.
9. Security
All data is sent over HTTPS/TLS and stored by Google with encryption at rest. Access to stored data is restricted to your own account by security rules.
10. Your rights
Depending on where you live (for example under GDPR, UK GDPR, CCPA/CPRA or India's DPDP Act), you may have the right to access, correct, export or delete your data, to object to or restrict processing, and to withdraw consent. To exercise any of these, email support.twous@gmail.com. We respond within 30 days. You may also complain to your local data protection authority.
11. International transfers
Our providers may process data in the United States and other countries. Google and Render use standard contractual clauses for transfers from regions that require them.
12. Age requirement
TwoUs is intended for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe someone under 18 has used TwoUs, contact us and we will delete their data.
13. Changes to this policy
If we change this policy, we will update the date at the top of this page. For significant changes we will also notify you in the app.
14. Contact
TwoUs · support.twous@gmail.com