Privacy Policy for Two

Coptersolutions ("we," "us," or "our"), based in Andorra, operates the "Two" messaging application and the website twomessenger.com. We are committed to protecting your privacy and ensuring your personal data is handled in accordance with the laws of Andorra and applicable international standards.

1. Our Core Principle: Privacy First

"Two" is designed to facilitate private communication.

• End-to-End Encryption (E2EE): All messages and media sent through "Two" are end-to-end encrypted. We cannot read your messages, view your photos, or listen to your audio clips. Only you and your paired partner possess the keys to decrypt this content.
• User-Controlled Deletion: Messages and media are stored in encrypted form on our servers to ensure accessibility across your devices. They are permanently wiped from our servers the moment you explicitly delete them from your device, or when they are automatically pruned by your customized rolling message limit (1 to 50 messages).
• Technical Inability to Decrypt: Because encryption keys are generated and stored only on user devices, Coptersolutions has no technical ability to access your message content. We cannot decrypt your data, even if compelled by valid legal process.

2. Information We Collect

A. Information You Provide

• Account Information: When you register, you provide an email address and a username. We use this solely for authentication and account recovery.
• Profile Data: Your username is stored to allow your partner to identify you. We do not store user avatars or profile photos.

B. Automatically Collected Information

• Device Information: We collect limited information about your device (e.g., model, OS version) to ensure app compatibility and troubleshoot crashes.
• Usage Data: We use privacy-preserving tools (Google Firebase) to collect anonymous statistics (e.g., "Daily Active Users") to help us improve the app. This data is aggregated and does not identify you personally or reveal your conversation habits.

3. How We Use Your Information

We use your data strictly to:

• Provide, maintain, and improve the "Two" service.
• Authenticate your identity and prevent fraud.
• Troubleshoot technical issues via crash reports (e.g., Firebase Crashlytics).

4. Data Storage and Transfers

• Location: Your encrypted data is processed via Google Cloud Platform (Firebase), which may store data in servers located in the United States or Europe.
• Security: We employ industry-standard encryption (AES-256) for data at rest and while in transit (TLS/SSL).
• Media: Encrypted media files are stored in Cloudflare R2 object storage. These files persist in the cloud until they are deleted by you or your partner from your respective devices.

5. Third-Party Services

We use trusted third-party services to operate the app:

• Google Firebase: For authentication, database, and crash reporting.
• Cloudflare: For secure media hosting.
• Apple App Store: For app distribution and subscription processing.

6. Your Rights

Under Andorran law (and complying with GDPR principles), you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Deletion: Request the permanent deletion of your account and all associated data ("Right to be Forgotten"). You can do this directly within the app settings.
• Correction: Update your profile information at any time.

To exercise these rights, simply use the "Delete Account" feature in the app or contact us at: [email protected]

7. Children's Privacy

"Two" is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we discover such data has been collected, we will delete it immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or our website. Continued use of the service implies acceptance of the updated policy.

9. Contact Us

For any questions regarding this Privacy Policy, please contact us: