This Privacy Policy explains how Twoman ("Twoman", "we", "us", or "our") collects, uses, shares, and protects information about you when you use the Twoman mobile app and this website (together, the "Service"). Twoman is a double-dating app: you and a friend form a duo (a "2-man") and match with other duos.

1. Information we collect

Information you provide

• Account details: your email address, chosen username, and password. Passwords are stored only in hashed form by our authentication provider; we never see your plaintext password.
• Date of birth: used to confirm you are 18 or older, derive the age shown on your profile, and—if you choose identity verification—compare against the birth date verified by Stripe. We store the date you entered; we do not display it directly.
• Optional identity verification: Stripe captures and holds your government ID and selfie in its secure flow. Those images never reach TWOMAN. Stripe sends our server the verification result and verified birth date. We compare the date with the date you entered, enforce 18+, and retain the canonical verified birth date with the trust result so later profile changes cannot detach a badge from its proof. We also retain retry state and limited provider references needed to prevent replay, investigate abuse, and request vendor redaction.
• Optional contact matching: if you grant Contacts access and choose matching, the app normalizes email addresses and phone numbers on your device and uploads only SHA-256 hashes, never contact names or raw address-book values. We retain at most the current replaceable hash set and matching bookkeeping until you clear the feature or delete your account.
• Profile content: your gender, private personal starting preference for who you would like your future duo to meet, up to six photos, your written prompt answers, and optional vitals such as height, city, job, and school.
• Duo content: the shared duo profile you and your friend build together, including your friendship story, approved photos or videos, prompt answers, and the preferences you set for who your duo wants to meet.
• Messages and interactions: the likes and comments you send, your matches, and the messages you exchange in four-person chats.
• Optional Wingman requests: when you explicitly enable Wingman and submit a request, we process the text you send and a limited label for the app area you are using (for example, Discover or Matches) to generate an answer. We store your consent version, but we do not add the request or answer to your profile or chat history.
• Safety reports: if you block or report someone, we keep a record of the report and the related evidence so our safety team can act on it. Depending on where you report, that evidence may include limited shared-conversation content or the exact profile voice answer, personal video, and video poster you selected.
• Support messages: anything you send us by email or through our contact form.

Information collected automatically

• Usage and device data: basic technical information needed to operate the app reliably, such as your device type, operating system version, app version, and diagnostic or crash information.
• Subscription data: when you subscribe to Twoman+, our payments partner records the purchase, its status, and a device or transaction identifier so we can grant and verify your subscription.
• Notification data: if you enable notifications, we store an app-specific push token, your notification choices, time zone, delivery status, and the app object needed to open the right screen. We do not put private message text in redacted notification categories.

What we do not collect

• We do not collect your precise GPS location.
• We do not use third-party advertising trackers, and we do not run ads in the app.
• We do not use your photos, prompts, or messages to train artificial intelligence models.
• We do not upload or store contact names or raw address-book phone numbers or email addresses. Optional contact matching uploads one-way hashes as described above; the system picker and share sheet otherwise operate on your device.

2. How we use your information

• To create and operate your account and your duos.
• To show your duo to compatible duos and to show you theirs.
• To deliver likes, matches, and real-time four-person chats.
• To confirm you meet the minimum age and to keep the community safe.
• To provide, verify, and manage Twoman+ subscriptions.
• To respond to your support requests.
• To detect, investigate, and prevent abuse, fraud, and violations of our rules.
• With your separate consent, to answer the Wingman request you choose to submit and provide a draft or suggestion for you to review.
• To deliver the notification categories you enable and route a notification tap to the relevant app screen.
• To meet our legal obligations.

3. How we share information

We share information only in the ways described here. We do not sell your personal information.

With other members

Your duo profile, photos, and prompt answers are visible to other duos in the matching feed. Once you match, your first name and profile are visible to the other three people in that chat. Anything you write in a chat is visible to all four members of that chat.

With service providers

We rely on a small number of trusted providers who process data on our behalf under contract:

Provider	Purpose
Convex	Secure backend, database, authentication, and real-time messaging
Stripe	Optional government-ID and selfie verification, verified birth-date confirmation, and redaction processing
Adapty	Subscription status delivery, lifecycle reconciliation, and paywall analytics for Twoman+
Apple	App distribution, in-app purchase processing, and signed transaction verification
OpenRouter and the selected AI model provider	Process the Wingman request you explicitly submit after enabling the feature

For safety and legal reasons

We may disclose information when we believe in good faith that it is necessary to comply with the law, respond to a valid legal request, enforce our Terms, or protect the safety, rights, or property of our members or the public.

Wingman AI

Wingman is optional and off until you turn it on. It receives the request you submit, the current feature area, and instructions that prohibit autonomous social actions and hidden-field use. We do not send your contacts, block list, hidden profile fields, private chats, or another person's sensitive information as background context. You review every answer and remain responsible for anything you choose to send or do. You can withdraw Wingman consent from its menu at any time; withdrawing stops future AI requests unless you consent again.

4. Photos, likeness, and consent

Your photos belong to you. Before any photo leaves your device, the app removes embedded metadata such as GPS location and camera details, and downsizes the image. When a duo photo shows your friend as well as you, that friend must approve the photo before it appears, and either of you can remove a photo you appear in at any time.

5. Location

Twoman is city-based, not a precise-location tracker. You can search for a city or optionally use a one-time approximate location to find it. Before storage, coordinates from either path are rounded to city-scale precision; we use them for distance filters and fair midpoint venue suggestions. We do not collect background or precise location, and photos are stripped of location data before upload.

6. Purchases and subscriptions

Twoman is free to download. Twoman+ is an optional auto-renewing subscription sold through the Apple App Store. Apple processes your payment; we never receive or store your card number. Our payments partner records that a purchase happened and its status so we can unlock your benefits. See our Terms of Use for subscription details.

7. Age requirement

Twoman is only for adults aged 18 and older. We confirm your age at sign-up. If trusted verification shows that an account belongs to someone under 18, we immediately hide the profile and lock dating access. Account deletion remains available, and limited safety or legal records may be handled under the retention terms below. See section 12 on children below.

8. Retention and deletion

We keep your information for as long as your account is active. When you request deletion, we lock the account and begin removing or de-identifying your personal profile, contact hashes, photos, videos, messages, notification records, and Wingman consent record. Stripe identity redaction is an asynchronous vendor process that may take up to four days after submission; failed requests remain restricted for operator review and retry instead of being silently discarded. If Stripe has already placed a verification session in a state its redaction API does not accept, we keep its local linkage restricted while we resolve the provider-retention request. Wingman request text and answers are not stored in your Twoman profile or message history; an AI service provider may process them for the limited time needed to provide and secure its service.

You can start account deletion from inside the app under Profile, or from our Delete your account page.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. You can exercise many of these directly in the app:

• Access and edit: view and change your profile at any time under Profile.
• AI choice: do not enable Wingman, or withdraw consent from Wingman's AI & privacy menu at any time.
• Notifications and contacts: change notification categories in the app and system permission choices in iOS Settings.
• Delete: delete your account in the app or from our deletion page.
• Other requests: use our monitored support and privacy form and we will respond within the time required by applicable law.

We will not discriminate against you for exercising any of these rights.

10. Security

We use encryption in transit, hashed passwords, and access controls to protect your information. No online service can promise perfect security, but we work to protect your data and to respond quickly if something goes wrong.

11. International transfers

Our providers may process and store data in countries other than yours. Where required, we use appropriate safeguards for those transfers.

12. Children

Twoman is not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a minor is using Twoman, use the Safety or reporting topic in our monitored support form and we will act promptly.

13. Changes to this policy

We may update this policy from time to time. If we make a material change, we will update the date above and, where appropriate, notify you in the app.

14. Contact us

For privacy or safety concerns, use our monitored support form and select the matching topic. In an emergency, contact local emergency services first.