Privacy Policy

Last updated: 3 July 2026

This is a convenience translation. The legally binding version is the German privacy policy.

This privacy policy explains what personal data the iOS app TwoOfUs (“TwoOfUs,” “the app,” “we”) and the TwoOfUs website process, for what purpose, on what legal basis, and what rights you have. It is based on the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for processing your personal data within the meaning of Art. 4(7) GDPR is:

2. What data the app processes

TwoOfUs only processes what is needed for the shared features. All couple content is stored in your private iCloud (see section 6) and is accessible only to the two of you:

• Apple user identifier: a stable, app-specific ID from Sign in with Apple. It lets us recognize your account without ever processing an email address or password.
• Profile name / initials: the display name you choose. It is shown to your partner and used for initials in the app and widgets.
• Location (optional): your coordinates, used solely to calculate the distance for the Distance widget and to determine the time zone for the Partner Clock. With the “Always” permission, the app can process significant location changes in the background so the distance stays up to date. Location data is only processed if you enable the feature and grant the iOS permission.
• Shared note: a short shared note (up to 100 characters). Updating it triggers a notification to your partner.
• Countdown: the target date and optional label of your shared countdown.
• Streak counter: a counter of your active days or check-in weeks within the app.
• Partner Clock: to display your partner’s local time, the app derives their time zone from their city or coordinates and shows it along with their name and city.
• Pairing code: a short code in the format XXXX-XXXX, used once to connect you securely.
• Date invitations (from version 1.6): the content and design of an invitation — the chosen idea, title, your card message, the date/time (in both time zones), the design of the flower bouquet, as well as replies, proposed times, and reactions.
• Photos in date memories (from version 1.6): photos and optional notes that you add to a shared memory after a date. Access to your photo library only happens via the iOS photo picker, and only when you select photos yourself (see section 13).
• Check-in answers (from version 1.6): your answers to the weekly check-in questions. They are stored sealed: your partner only sees your answers once you have both submitted yours, and vice versa.
• Compliments (from version 1.6): sentences from your check-ins that you place in your shared compliment jar.

3. What we don’t collect

• No email address and no password: sign-in runs entirely through Apple’s Sign in with Apple.
• No payment or billing data.
• No advertising IDs and no advertising.
• No cross-app or cross-website tracking, no third-party analytics or tracking SDKs.
• No cookies and no tracking on this website (see section 15).
• We never sell or rent out data.

4. What we use the data for

We use the data listed above solely for the app’s core functions: to sign you in, connect you with your partner, and provide the shared features — the widgets (distance, countdown, note, partner clock), date invitations and memories, weekly check-ins, and the compliment jar. Certain actions (e.g. a new note, a date invitation, or an acceptance) trigger a notification to your partner. We do not use your data for profiling, marketing, or any other purpose.

5. Legal bases (GDPR)

• Art. 6(1)(b) GDPR (performance of a contract): processing your account identifier, profile, pairing, note, countdown, streak, partner clock, date invitations, memories (including photos you select), check-in answers, and compliments is necessary to provide the service you requested. Photo selection and calendar entries always happen only as a result of your own, active action.
• Art. 6(1)(a) GDPR (consent): location data is only processed with your explicit consent via the iOS permission prompt. You can withdraw this consent at any time in iOS Settings.
• Art. 6(1)(f) GDPR (legitimate interests): security and integrity of the service, abuse prevention, and the technically necessary delivery of this website.

6. Storage: your private iCloud

Since version 1.5, all couple content is stored in your private iCloud database (Apple CloudKit) and shared, via an Apple-managed share, exclusively between your Apple account and your paired partner’s Apple account. Apple enforces access control on its servers: other users, third parties, and we ourselves have no access to your content. We run no servers and no database of our own.

Apple Inc. provides the underlying infrastructure (iCloud/CloudKit, Sign in with Apple, push notifications). Apple’s privacy policy applies to these services: apple.com/privacy.

Transfers to third countries (USA): the provider of the infrastructure used is Apple Inc., headquartered in the USA; personal data may be transferred there as part of iCloud/CloudKit. The legal basis is the European Commission’s adequacy decision on the EU-US Data Privacy Framework (to the extent the respective recipient is certified), supplemented by standard contractual clauses under Art. 46 GDPR. This website is likewise hosted via GitHub Pages (GitHub, Inc., USA); for technical reasons, GitHub briefly processes your IP address on the same legal basis.

7. Retention period

We store your data only for as long as your account exists and you use the app. Note, countdown, profile, invitations, memories, photos, check-in answers, and compliments remain in place so that both of you can see them. If you sign out and delete your account (see section 9), the associated data is removed. Apple’s own deletion and retention cycles apply to backups within the iCloud infrastructure.

8. Your rights

Under the GDPR, you have the right to:

• access the data stored about you (Art. 15);
• rectification of inaccurate data (Art. 16);
• erasure of your data (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interests (Art. 21);
• withdraw any consent given, with effect for the future (Art. 7(3));
• lodge a complaint with a supervisory authority (Art. 77).

To exercise these rights, write to us at jakobsworld@web.de.

9. Sign out & delete

You stay in control. In the app, you can sign out under Settings → Account, or delete your account together with your data. Deleting removes your profile and ends the pairing with your partner; shared content such as memories, photos, check-ins, and compliments is also removed from the share. You can additionally revoke the app’s access to Sign in with Apple under your Apple Account in iOS Settings.

10. Children

TwoOfUs is not directed at children. The app is intended for people aged 13 and older. We do not knowingly collect data from children under 13. If you believe a child has provided us with data, please contact us and we will delete it.

11. Location permissions

The Distance widget needs location access to calculate how far apart you are. iOS asks you for permission; you can choose “While Using” or “Always”. “Always” enables background updates on significant location changes so the distance stays current even when the app is closed. You can change or revoke this permission at any time under iOS Settings → Privacy & Security → Location Services → TwoOfUs. Without location access the app still works — only the distance feature is then turned off.

12. Notifications (push)

TwoOfUs sends you notifications so you don’t miss anything: when your partner updates the shared note, sends you a date invitation, accepts an invitation, or proposes a different time, as well as an optional reminder for your weekly check-in. Delivery happens via the Apple Push Notification Service. You can turn off notifications at any time under iOS Settings → Notifications → TwoOfUs.

13. Photos & photo library

For date memories, you can add photos. Access to your photo library happens exclusively via the iOS photo picker, and only when you actively select photos; the app does not read your library in the background. Selected photos are stored in your private iCloud and are only visible to you and your partner.

14. Calendar access

Once you’ve arranged a date, you can add it to your iOS calendar with a tap. This access is write-only and happens only as a result of your explicit action (“Add to iOS Calendar”). TwoOfUs does not read your calendar. The added event then lives in your own calendar account and is subject to its settings.

15. Invitation links & this website

Invitation links: you can share a date invitation as a link (a link to the TwoOfUs website). The invitation data is encoded in the so-called fragment of the link — the part after the #. For technical reasons, browsers never send the fragment to a server: when your partner opens the link, the invitation is rendered purely locally in the browser. Neither we nor the website’s hosting provider ever receive the invitation’s content. The link is only visible to people who received it, and it expires after the date.

Website: this website is static. It sets no cookies, uses no trackers or analytics services, and does not load fonts, scripts, or other content from third-party servers. When you visit, the hosting provider briefly processes your IP address for technical reasons in order to deliver the pages (Art. 6(1)(f) GDPR); beyond that, no evaluation takes place.

16. Security

The transfer between your device and Apple’s iCloud servers is encrypted; storage takes place within Apple’s secured infrastructure. Access to your couple data is restricted to the two of you and is enforced by Apple on its servers: no one else can read your notes, photos, check-in answers, compliments, invitations, distance, or time data. The app only shows sealed check-in answers to your partner once both of you have submitted them.

17. Changes to this policy

We update this privacy policy when the app or the legal situation changes. For material changes, we update the date under “Last updated” at the top of this page. Please check back from time to time.

18. Contact

If you have questions about this privacy policy or your data, you can reach us here: