Effective November 5, 2026 · Version 3
TwoTrue ("we", "us") is operated by TwoTrue, LLC, 10013 NE Hazel Dell Ave #1011, Vancouver, WA 98685, United States. This policy covers twotrue.ai and our apps. It explains what we collect, why, who helps us run the service, how long we keep things, and the choices you have. Our short promises are on the Trust page; this policy is the full version. Write to hello@twotrue.ai with any privacy request or question.
Account details. Your email address, the name you give us, your time zone, the country you tell us you live in, and the time you confirmed you are 18 or older and accepted our Terms. Your password is held by Google's Identity Platform, which runs our sign-in; we never see it. If you sign in with Google, we receive your name and email address from Google.
Where you came from. When you sign up, we record what brought you to TwoTrue: the website that linked to us, or the campaign label on an ad or post link you followed (for example "instagram"). We use it only in totals, to learn which ways of finding us work, and it's included in your data export. It is a label, not tracking: we don't follow you across other websites.
About you (optional). Your birthday, which confirms you're an adult and, only if you choose, lets the people in your spaces know it's coming (the day, never the year). Your gender, if you give it, which we use only in totals across everyone.
What you write. Your answers to questions, journal entries and reflections, the answers you give while setting up (how you like to connect, handle stress, and so on), check-ins and journey notes, questions you save, and anything you share in a space with your partner. The Pause feature reviews a draft before you send it and keeps no copy of the draft.
Photos you choose to add. A profile photo, a space cover photo, and the favourite moments you add to a space, stored privately and shown only to you and the people you share that space with. For moments we also keep a larger copy so it can be printed well if you both later choose to make a book; we strip the photo's location and camera details. Deleting a photo deletes every copy.
Trusted contacts (optional). If you add a trusted contact, we keep the name and email address or phone number you give us for them. We email them to ask whether they agree to be your contact, and nothing is ever sent to them unless they accept. Only you can see your contacts.
How you use the service. Records needed to run it: which questions were shown and answered, which days you used TwoTrue, your notification settings, the number and cost of AI requests (not their content), and when you follow a link to a book or product we recommend. Our team sees these only as counts, never as what you wrote.
Server and security logs. Like every website, our servers keep logs of requests: the time, the page or action requested (with any secret codes removed), how long it took and whether it worked, and the network (IP) address and browser type that our hosting provider records. Logs never include what you wrote; error details that could carry your words are withheld by design. Request logs are kept for 30 days by Google Cloud, and a copy without content is kept for up to 400 days for trends and debugging. Your IP address is also held in memory for a short time to limit abusive traffic. We don't use crash-reporting or session-recording tools.
Payments. If you subscribe, your card is handled by Stripe and its checkout, Link; we never see or store your card number. We keep your plan, its status and renewal date, and Stripe's customer reference. Stripe is the merchant of record for subscriptions — the seller on your statement — and keeps its own records of your payments under its privacy policy.
Notifications. If you turn on alerts, your browser gives us a push address, and alerts are delivered through your browser's push service (for example Apple, Google or Mozilla). Alerts never contain what anyone wrote.
Feedback and email. Feedback you send us, support messages, and, if you join our newsletter, your email address and when you confirmed.
Analytics on our public pages. We use Google Analytics on our public pages (such as the home page, pricing and blog) to learn which pages are useful. It never runs inside the app: not in your spaces, your Personal Space, your account or onboarding. Its advertising features are off. For visitors in the EU/EEA, the UK and Switzerland, analytics cookies are off by default and nothing is measured unless you agree.
We don't use advertising trackers. Your browser also stores a few small items to keep you signed in, remember an invite or a friend's link you opened, remember which link or site brought you here until you sign up, and keep an unfinished answer on your device until you save it.
We do not sell your personal information, we don't use it for advertising, and we don't use what you write to train AI models.
Your reflections, suggestions and coach are written by Anthropic's AI through its commercial API. For each request we send only the text that request needs: your own words, your partner's words that have been revealed to you, and the question. Names are swapped for placeholders before anything is sent, and your email address and account details are never included. What you write privately reaches the AI only when it writes for you alone, never when it writes for your partner.
Anthropic's commercial terms don't allow it to train its models on this content. Anthropic doesn't keep the text of a request after answering it, except where its safety and legal policies require, and then for at most 30 days.
In the app you can see what the app has learned about you, edit your answers, export everything you wrote (as JSON or a readable page — your own words, never your partner's), switch off personalization from private answers, turn alerts and emails off, and delete your account. You can also write to us at hello@twotrue.ai.
Depending on where you live, the law may also give you rights to access, correct, delete or receive a copy of your personal information, to object to or restrict some uses, to withdraw consent, and to appeal a decision we make about a request. You can use any of them by email. We may need to verify that a request comes from you, and someone you authorize can make a request for you. We answer within the time your law requires — one month in the EU and UK — and in any case within 45 days. We'll never treat you differently for exercising a privacy right.
In answering questions about your relationship, you may choose to write about health, intimacy, faith, abuse or other sensitive matters. We don't require any of that to use TwoTrue, and when you share it we use it only to give you the features you asked for — never for advertising, and we never sell it. By writing it you're asking us to process it for you; you can delete it at any time, and deleting it withdraws that permission.
TwoTrue is open to adults everywhere. We ask which country you live in when you sign up so we can apply the rules that protect you there: the right crisis lines, your country's email rules, and the privacy rights below. TwoTrue is run from the United States, and your information is processed there and wherever our service providers operate.
EU, EEA, UK and Switzerland. TwoTrue, LLC is the controller of your information. We rely on these legal bases: performing our contract with you (running your account, your spaces and your plan); your consent (the newsletter, alerts, and any sensitive information you choose to write about — see Sensitive information — which you can withdraw at any time by deleting it or your account); and our legitimate interests in keeping the service secure, preventing abuse and understanding use in totals, which we've weighed against your rights. Your information is transferred to the United States; our service providers hold it under the European Commission's standard contractual clauses, and we'll say here which further safeguard applies to our own processing once counsel confirms it. You have the rights above, plus the right to lodge a complaint with your local data-protection authority.
Elsewhere. Where your country's law gives you rights to your personal information, you can use them by writing to hello@twotrue.ai, and we'll honour them as that law requires.
Data is encrypted in transit and at rest, photos are served through short-lived private links, and access to member content is restricted in code to the people it belongs to. You can protect your own account with two-step sign-in. No system is perfectly secure; if a breach affects you, we will tell you, and the authorities where required, as the law requires.
TwoTrue is for adults 18 and over. We don't knowingly collect data from anyone younger; if we learn we have, we delete it.
We'll post any new version here with its effective date, and tell you in the app or by email when a change is significant. Where the law requires it, we'll ask for your agreement.
TwoTrue, LLC · 10013 NE Hazel Dell Ave #1011, Vancouver, WA 98685, United States · hello@twotrue.ai