Privacy Policy — TwoNest

Last updated: October 1, 2026

TwoNest ("the App", "we", "us") is a private space for two people in a relationship to count their days together, stay close every day, plan life side by side and keep their memories. The App is published on Google Play by Dream Studio and on the Apple App Store by Ky Le Quang. Both versions are the same service, use the same servers and handle your data in the same way. In this policy, "we" and "us" mean the publisher of the version you use. This Privacy Policy applies to both versions and explains what data we collect, how we use it and the choices you have. Where the Android and iOS versions differ, we say so.

By using TwoNest, you agree to this Privacy Policy.

1. Data We Collect

Data you provide

• Account information: signing in is optional and only needed to connect with a partner.
• If you sign in with Google or Facebook, we receive your name, email address and profile photo from that account.
• If you sign in with Apple (iOS), we receive the name and email address you choose to share. If you choose "Hide My Email", we receive a private relay address created by Apple, not your real email.
• If you sign in with email and password, we receive your email address. Your password is handled by Google Firebase Authentication and is never visible to us.
• Profile details: display name, profile photo, birthday (optional), interests, personality traits and love language (all optional), your relationship start date, a cover photo and special days you add.
• Content you create with your partner: moods, notes, nudges and heartbeat cards; answers to daily questions, quizzes and Journey chapters; time-capsule letters; 24-hour moments and photo memories with captions; a pinned line on your counter; calendar events, to-dos, shopping and wish lists; income and expenses (amounts, categories, notes); and big-day plans, including checklists, budget items (with any vendor names and phone numbers you type in) and guest lists (guest names, RSVP status, gift amounts).

If you enter details about other people, such as guests or vendors, please make sure you are entitled to share them.

Before you sign in, your profile, relationship date and special days are stored only on your device.

Data collected automatically

• Device information: device model, operating system and version, and app version.
• App language and time-zone offset, so notifications arrive in your language and reminders and weekly recaps arrive at the right local time. For long-distance couples, your partner can see the local time on your side.
• Push notification tokens (Firebase Cloud Messaging) so your partner's activity can reach your device.
• Usage and diagnostics: analytics events (for example screen views and feature usage) and crash reports via Google Firebase Analytics and Crashlytics. While you are signed in, analytics events are associated with your randomly generated account ID, not your name or email.
• Activity counters: for each couple we keep simple counters of which days both partners used the App during the first weeks after pairing, to understand whether the App is working for couples. They contain none of your content.
• Advertising identifiers: in the free version, our advertising partners may use your device's advertising identifier to serve and measure ads. On iOS this happens only if you allow tracking (see Section 6).

Device permissions

The App asks for permission only when you use a feature that needs it, and you can change these at any time in your device settings:

• Camera and photos: to take or choose photos for moments, memories, your avatar and cover, and to save share cards to your photo library.
• Notifications: to deliver partner activity, reminders and letters.
• Face ID, Touch ID or your device screen lock: only if you turn on App Lock. Biometric data never leaves your device and is never available to us.
• Tracking (iOS only): see Section 6.

We do not collect your precise location, contacts, SMS, call logs or microphone audio.

2. How We Use Your Data

• To provide the core service: syncing your shared space between you and your partner in real time.
• To send notifications you have enabled (partner activity, event reminders, milestone days, daily questions), plus service notifications such as streak reminders, your weekly recap, a letter that is ready to open, and notice that your partner has unpaired or deleted their account.
• To maintain, secure, debug and improve the App.
• To show ads in the free version and measure their performance.
• To process Couple Premium subscriptions through Google Play or the App Store.

Where the law requires a legal basis (for example under the GDPR), we rely on: performing our agreement with you (running the service you asked for), your consent (personalized ads, tracking on iOS, optional permissions), and our legitimate interests (security, crash reporting and improving the App).

We do not sell your personal data, and we do not use your private content for advertising.

3. Who Can See Your Content

Your couple space is private to the two of you, enforced by server-side security rules. Both partners can view, edit and delete anything in the shared space. Your account record, including your notification tokens, is readable only by you. Our team does not access your content except where strictly necessary to operate the service, comply with law or investigate abuse.

Some content is locked even from your partner until the right moment, and this is enforced on our servers, not just in the App:

• Daily questions, quizzes and Journey chapters: you can read your partner's answer only after you have submitted your own.
• Time-capsule letters: your partner can see that a letter is waiting and when it opens, but can read it only from the opening date you chose.

Notifications sent to your partner never include the content of your notes, moods, letters or answers. Notifications about events, to-dos, big-day tasks, memories and expenses include the title, caption or amount so your partner can see what changed.

Home Screen widgets show information such as your day count, names, latest moment and what is up next. Widget data is stored on your device so the widget can display it, and anyone who can see your Home Screen can see it. Remove the widget if you prefer.

4. Where Your Data Is Stored

Your data is stored on Google Firebase (Google Cloud Platform) servers in Singapore (asia-southeast1). Photos are compressed on your device before upload. Data is encrypted in transit (HTTPS/TLS) and at rest by Google Cloud's standard encryption. A copy of your couple's data is also kept on your device so the App works offline.

If you live outside Singapore, your data is transferred there. We rely on Google's standard data-protection terms for these transfers.

5. Third-Party Services

The App uses the following processors and partners. Each processes data under its own privacy policy.

We never receive your card or payment details. Payments are handled entirely by Google Play or Apple.

6. Advertising, Tracking and Your Choices

The free version shows ads. Couple Premium removes ads for both partners.

• Consent (where required): in the European Economic Area, the UK, Switzerland and other regions where the law requires it, the App shows a Google consent form before ads are personalized.
• iOS — App Tracking Transparency: the App asks for your permission before your device's advertising identifier is used to track you across other companies' apps and websites. If you choose "Ask App Not to Track", ads are still shown but are not personalized using that identifier. You can change your choice any time in Settings → Privacy & Security → Tracking.
• Android: you can reset or delete your advertising ID, or opt out of ad personalization, in your device settings (Settings → Google → Ads, or Settings → Privacy → Ads, depending on your device).

7. Data Retention and Deletion

• While your account is active, your content is kept so you and your partner can use the App.
• Moments disappear from the App 24 hours after they are posted, unless one of you keeps it as a memory. Expired moments and their photos are then deleted from our servers.
• Unpairing (Us tab → Unpair): the shared space is hidden from both of you immediately and your partner is notified. 30 days later it is permanently deleted: all events, to-dos, money records, memories and photos, letters, notes, answers and big-day plans. During those 30 days it cannot be opened in the App or restored, and a new pairing always starts with an empty space. Download your photos first if you want to keep them (see Section 8).
• Deleting your account (Us tab → Delete account, or by email as described on our Account Deletion page) permanently removes your sign-in account, your user profile and your notification tokens, and disconnects you from your partner. Your shared space, including all photos, is permanently deleted right away, for both of you, and your partner is notified. If a technical error interrupts this, an automated cleanup completes it within 30 days. A shared space from an earlier pairing that you had already unpaired is deleted on its own 30-day schedule. This cannot be undone.
• Invite codes stop working after 48 hours, or as soon as they are used.
• Data stored only on your device (such as your solo-mode profile, app settings and widget data) stays there until you clear the App's data or uninstall the App.
• Analytics and crash data are kept according to Google Firebase's retention settings and are associated with a random account ID rather than your name or email.
• Subscriptions are not cancelled when you unpair or delete your account. Cancel in Google Play → Subscriptions (Android) or Settings → your name → Subscriptions (iOS).

8. Your Rights

Depending on where you live (for example under the GDPR or the California Consumer Privacy Act), you may have the right to access, correct, export or delete your personal data, to object to or restrict some processing, and to withdraw consent. The App provides:

• Correction: edit your profile and any shared content in the App at any time.
• Export: while you are paired, Us tab → "Download all our photos" produces a ZIP archive of your memory photos with an index file listing each photo's date and caption. For a copy of other data, contact us.
• Deletion: in-app account deletion, or by email as described on the Account Deletion page.
• Withdrawing consent: change notification, photo, camera and tracking permissions in your device settings at any time.

For any other request, contact us at the address below. You also have the right to complain to your local data protection authority.

9. Children

TwoNest is meant for people in a relationship and is not directed at children under 13, or under the minimum age required in your country. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

10. Security

We protect your data with authenticated sign-in, per-couple server-side security rules (only the two members of a couple can read or write their space), encryption in transit and at rest, and optional App Lock with Face ID, Touch ID, fingerprint or your device screen lock. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in the App. The "Last updated" date above shows the latest revision.

12. Contact

• Google Play version: Dream Studio
• Apple App Store version: Ky Le Quang

Email: dreamskydev.app@gmail.com