Legal
Privacy Policy
Last updated: October 5, 2026
What we collect
Two-Do collects the minimum data needed to provide the service: your email address for authentication, calendar events, task lists, and journal entries you create, and basic usage analytics to improve the app.
Google and Apple sign-in
If you choose Google or Apple sign-in, we receive your provider account identifier, email address and basic profile information, such as your name or profile image when provided. Supabase Authentication processes and stores this identity information to sign you in or link the provider to your existing Two-Do account. Google sign-in requests basic identity information; it does not request access to your Gmail messages, Google Calendar events or Google Drive files. You can manage linked sign-in methods in Account & sign-in in the app. To help you identify and manage signed-in devices, we retain session browser or app and operating-system labels, sign-in and recent-activity times, and sign-out status. The device page shows current sessions and the last 30 days of sign-in activity. Older inactive records are cleaned up when you next use your account and are deleted with your account. Device history also includes available sign-in and recent authentication IP addresses; a local database estimates their country or region, not the device’s precise location. To revoke Apple authorization when deletion becomes due, newer releases send the Apple authorization code to the server for verification and retain an encrypted revocable grant. Clear data does not disconnect these sign-in methods.
How we use it
Your data powers your experience. It enables syncing between you and your partner, generating your yearly report, and maintaining your streaks. We do not sell your data or share it with third-party advertisers.
Partner pairing
Two-Do uses a 1:1 pairing model. When you connect with a partner, shared events and tasks are visible to both of you based on your visibility settings. Private entries remain private.
Data storage
Your data is stored securely using Supabase (PostgreSQL) with row-level security policies. Data is encrypted in transit and at rest. We use industry-standard practices to protect your information.
Your rights
You can export your data in the app. Clear data removes your app content and custom settings while retaining your account, sign-in methods, profile and partner connection. Delete account starts a mandatory seven-day cancellation period; there is no immediate permanent-deletion option. During this period the account is suspended and shared content is hidden. Signing in does not cancel deletion: you must verify your identity and explicitly cancel before the displayed deadline. After the deadline, the server deletes your account, owned content and stored files and disconnects your partner; the partner’s own items remain. Other devices clear local caches and reminders when they reconnect. Saved Apple authorization tokens are revoked on deletion; older accounts without a saved token can remove Two-Do through Apple Account settings. Deleting Two-Do does not delete your Apple or Google account. Service-provider backups follow their retention schedules. Contact support@two-do.org with questions or requests.
Changes
We may update this policy from time to time. Significant changes will be communicated through the app or via email.