Privacy Policy
TwineUp ("we", "us") helps people find others nearby to do activities with, chat, and get discounts at partner venues. This policy explains what we collect, why, who we share it with, and the choices you have. It applies to the TwineUp mobile apps and this website.
1. Who we are
TwineUp is operated by Tarun Singh, Udaipur, Rajasthan, India. Contact us at twineup.official@gmail.com. For the purposes of India's Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described here.
2. Information you give us
- Account: email address and password (stored only as a secure hash by our authentication provider), or the name and email shared by Google or Apple when you sign in with them. If you use "Hide My Email" with Apple, we receive a relay address.
- Profile: name, age, gender, bio, city, interests and profile photo. Your profile is visible to other TwineUp users.
- Verification (optional): a selfie you take so our team can compare it with your profile photo and award a verified badge. Selfies are reviewed by a person; we do not use facial recognition or create biometric templates.
- Activities and requests: activities you post (title, description, time, place, coordinates) and requests to join others' activities. Activities are visible to other users.
- Messages: chats between you and other users, including reactions and edits.
- Reports and blocks: reports you submit about users or content, and the list of people you block.
- Discount codes: codes you generate at partner venues and, when a venue redeems a code, the bill amount and discount the venue enters.
3. Information collected automatically
- Location: with your permission, your device's precise location, used to show activities and venues near you and to notify you about activities within the radius you choose. Your precise location is stored privately and is never shown to other users; your profile stores only an approximate location (about 1 km) used to sort nearby activities. You can turn location off in your phone's settings at any time.
- Notification token: a device token so we can send the notifications you have turned on.
- Technical data: our cloud providers process standard technical information (such as IP address and request logs) to operate and secure the service.
- Crash reports: if the app crashes, Firebase Crashlytics sends a report with the device model, OS version, app version, the code location of the crash and your TwineUp account ID (not your name or email), so we can fix it.
- Usage analytics: Firebase Analytics records which screens are used and key actions (for example "activity posted" or "message sent", never the message itself), with your account ID, to understand what works and improve the app. We don't use advertising identifiers.
We do not use advertising identifiers, we do not show ads, we do not track you across other companies' apps or websites, and we do not sell your personal data.
4. How we use information
- To create and run your account and show your profile and activities to other users.
- To let you join activities, chat, and receive discounts at partner venues.
- To send notifications you have enabled (messages, requests, activity updates, nearby activities, expiring codes).
- To verify profiles, review reports, and keep the community safe, including suspending accounts that break our Terms.
- To show venue partners aggregate statistics about codes redeemed at their venue (they see the code and bill details, not your profile).
- To comply with legal obligations.
5. Who we share information with
- Other users: your profile, activities you post, and messages you send to them.
- Service providers that process data on our behalf:
- Google Firebase (Google LLC): authentication, database, file storage, cloud functions, push notifications, hosting, crash reporting (Crashlytics) and analytics. Data may be stored on servers outside India.
- Google Sign-In and Sign in with Apple, if you choose them.
- OpenStreetMap Nominatim and Google Maps Platform: place names you search for, and coordinates, are sent to look up addresses and venues.
- Venue partners: the discount code you present and the bill details entered at redemption.
- Legal reasons: when required by law, or to protect the safety of our users or the public.
6. How long we keep data
We keep your data while your account is active. When you delete your account (Settings → Delete account), we delete your account, profile, private settings, precise location, profile photo, verification selfies and requests, delete activities you hosted that nobody else joined, cancel and de-identify activities other people joined (so they keep their history), and remove you from activities you joined. Messages you already sent remain visible to the people you sent them to. Ratings you gave or received are deleted (their effect on averages remains, without identifying you). Reports about safety issues may be kept for up to 12 months to prevent abuse. If your account was suspended for breaking our Terms, we keep a one-way fingerprint of your email address (it cannot be turned back into the address) so it can't be used to sign up again. Backups held by our providers are overwritten on their normal schedules.
7. Your choices and rights
- Edit your profile at any time in the app.
- Choose which notifications you receive and your nearby radius in Settings.
- Turn off location, notification, camera or photo access in your phone's settings.
- Block or report any user.
- Delete your account in the app (Settings → Delete account).
- Request access to, correction of, or deletion of your data, or raise a grievance, by emailing twineup.official@gmail.com. We respond within 30 days.
8. Age requirement
TwineUp is only for people aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a minor is using TwineUp, report the profile or contact us and we will remove it.
9. Security
Data is encrypted in transit, access to it is restricted by security rules so users can only read what they should, and your precise location and notification token are kept in a private record only you and our servers can access. No system is perfectly secure, so please use a strong password and report anything suspicious.
10. Changes
If we make material changes we will update this page and notify you in the app. The date at the top shows the latest version.
11. Contact and grievances
Grievance Officer: Tarun Singh · twineup.official@gmail.com · Udaipur, Rajasthan, India.