Privacy Policy

Twogether helps you and the people you eat with decide where to go by swiping on nearby restaurants together. This policy explains what we collect, who can see it, and the choices you have. Questions: trytwogetherapp@gmail.com.

1. Information We Collect

Account information. Your email address, a password (stored only in hashed form by our authentication provider), the display name you choose, and a profile photo if you add one. If you sign in with Google, we receive your Google email address, name, and profile photo.

Activity in the app. Your partnerships and partner requests, the sessions you start or join, each restaurant you like or pass on, your matches, and any ratings, notes, “loved” or hidden status, and visit marks you add to matches. We also record when you last opened Twogether.

Location. When you start a session, we store the location you search from (the coordinates and place name you entered or picked), plus the search radius and cuisine filters. Your device's precise location is used only if you tap “Use my location”, and only to set that session's search area. We don't track your location in the background.

People you invite. If you invite someone by email, we store the name and email address you enter so we can send the invite and connect you when they join. If you share your invite link, we record when someone signs up through it.

Preferences and basic usage. Your email notification setting, and anonymous, aggregated page-view statistics (see section 5).

2. How We Use Your Information

• To run Twogether: find restaurants near the location you choose, run swipe sessions, and detect matches.
• To connect you with partners, including invites and partner requests.
• To send emails: account verification and password resets, invites, and, if email notifications are on, when a partner starts a session or you get a match. You can turn notification emails off in Settings.
• To keep Twogether secure, fix problems, and understand overall usage.

We don't sell your personal information, use it for advertising, or share it with data brokers.

3. What Other Users Can See

• Your display name and profile photo are visible to your partners (current, pending, and past), to anyone who has blocked you (so their blocked list shows who it is), and in partner search, where people can find you by your display name or by your exact email address. Search results never show your email.
• Your partners can also see when you last opened Twogether, the sessions you share with them (including the location, radius, and filters), your likes and passes in those sessions, the resulting matches, and any ratings or notes added to matches you share.
• Your email address is never shown to other users. If you invite someone by email, the invite tells them your display name.

4. Service Providers

We use these companies to run Twogether. They process data on our behalf under their own privacy policies:

• Supabase: database, sign-in, and file storage (including profile photos). Data is stored in the United States.
• Vercel: website hosting and Vercel Web Analytics (cookie-free, aggregated page views).
• Google: restaurant search and details (Google Places receives the location and place name you search with), restaurant photos, Sign in with Google, and Gmail, which delivers our emails.
• Mapbox: map images of restaurants. It receives restaurant locations, not yours.

5. Cookies and Local Storage

We use essential cookies to keep you signed in, and your browser's local storage to remember display preferences such as your Matches page filters. We don't use advertising or cross-site tracking cookies. Our analytics are cookie-free and don't identify you.

6. Keeping and Deleting Your Data

We keep your information while your account is open. You can delete your account in Settings: it's deactivated immediately, your partnerships end, and you're signed out. If you sign back in within 45 days, your account is restored (you'll need to reconnect with partners). After 45 days, your account and its data, including your profile photo, sessions, swipes, matches, ratings, and notes, are permanently deleted. Because sessions and matches are shared, they're also removed from the history of the partners you shared them with. To delete your account immediately instead, email trytwogetherapp@gmail.com from the address on your account.

Restaurant information we cache (names, addresses, photos from Google) isn't personal data and isn't deleted with your account. If someone invited you and you'd like your name and email removed from our records, email us.

7. Your Choices and Rights

• Update your display name, photo, password, and email notifications in Settings.
• Remove or block partners at any time.
• Ask us for a copy of your data, or to correct or delete it, by emailing trytwogetherapp@gmail.com. We'll respond within 30 days.

8. Security

Data is encrypted in transit (HTTPS), passwords are stored only in hashed form, and database access rules limit each user to their own data and what their partners are allowed to see. No system is perfectly secure, so we can't guarantee absolute security.

9. Children

Twogether is for people 18 and older. We don't knowingly collect information from anyone under 18; if you believe a minor has an account, email us and we'll delete it.

10. Changes to This Policy

We'll update this page when our practices change and revise the date above. For significant changes, we'll also let you know in the app or by email.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at trytwogetherapp@gmail.com.