Twohold privacy policy

Last updated 9 October 2026

Twohold is an app for one couple: two phones and one shared space. This page says what happens to what you put into it.

The short version

No accounts, no ads, no analytics, no tracking. What the two of you share is encrypted on your phone before it leaves, with a key only your two phones hold. Nobody else — including us — can read it.

Your shared space

Your lists, check-ins, notes, money goals, challenges and the counsellor's memory are kept on your phones in one document. When it travels between your phones it is sealed with AES-GCM under a key derived from a secret that only your two phones have. It travels by one of three routes, all carrying the same sealed document:

• iCloud — a shared space in the iCloud account of one of you, shared only with the other through Apple's invitation. Apple's iCloud terms apply to that storage.
• A relay — a small server on Cloudflare. It stores the sealed document, which it cannot open, and knows your phones only by a one-way hash of their tokens. It also keeps a daily count of requests per couple, to stop abuse; counts older than a week are deleted.
• Nearby — directly between the two phones over Wi-Fi or Bluetooth, with no server at all.

You can delete your couple from the relay at any time in Settings ("Delete our data from the relay"), which removes everything stored there.

The counsellor

On iPhones with Apple Intelligence, the counsellor first uses Apple's on-device model, so your words stay on the phone. When that is not available or not enough, the text you ask it about — and a receipt photo, if you take one — is sent through the relay to Nebius, the AI provider that writes the reply. A search for places or date ideas is sent to Tavily. These requests are used only to answer you. The relay passes them on and does not keep them. Nebius's and Tavily's own privacy terms apply to the requests they receive.

You can switch the cloud models off in Settings; then only the phone thinks.

Between the two of you

Twohold never helps either of you hide anything from the other, and both of you can read everything it remembers. It also never repeats what one of you told it to the other.

Permissions

• Camera — only when you photograph a receipt.
• Local network — only to find your partner's phone nearby.
• Notifications — reminders and what your partner did. Lock-screen text never shows a note's content.

Children

Twohold is rated 17+ and is not meant for children.

Contact

Questions: admin@sillyjoint.com