Privacy policy

Who we are

Twofold is run by KWARG CODE Limited, which is responsible for your information. Write to us at jnpsofts@gmail.com about anything on this page. Twofold is for adults only: nobody under 18 may join.

What we collect, and why

• Your account: your email address, and your password stored only as a one-way hash we cannot read back. To sign you in and to send you the emails you choose.
• Your phone number, if you confirm your account by text message. To send the code, and the texts you choose to get.
• About you: the name you show, your date of birth, your gender and who you are looking for, what kind of relationship you want, your answers to our questions, the character you pick, your interests and what you write about yourself. To show you to the right people and to match you.
• Your location: the place you choose and, only if you allow it on your phone, your device's location, to set that place and to notice when you have moved. To measure distance between members. Other members see your town and how far away you are, never your exact position.
• Your photos. They are private: nobody sees one unless you send it to them, or choose to show one on your card. We remove the location tags your camera adds before saving them.
• Your messages and introductions, to deliver them to the person you wrote to and to check a report if one is made.
• What you do here: who you liked, passed on, introduced yourself to, blocked or reported, and when you were last active. To run matching, to keep people you blocked away from you, and to keep members safe.
• Membership payments: the plan, the amount, the date, the payment reference and, for M-Pesa, the phone number you paid from. To give you what you paid for and to keep our accounts. Card details are typed into the bank's own page and never reach us. In our phone apps you pay Apple or Google, who tell us only which membership was bought, its order number and, from Apple, the price; we never see how you paid.
• Notifications: if you turn them on, the keys your phone or browser gives us so we can send to it.
• Visits: which pages are opened, with your country and a scrambled form of your internet address that cannot be turned back into it. To count visitors. Your address is also checked to keep robots out, and stored only when something is refused (next).
• Security: when something is refused (a robot or VPN turned away, a wrong password, a sign-in locked after too many tries, or a page someone may not open), the internet address, its network, the page, the browser's name and, for a sign-in, the email typed with most of it hidden. Never the password. To protect members and the site from break-ins and copying.

What other members see

Your card: the name you show, your age, your character, your town and distance, what you are looking for and the answers you give. Your email, phone number, date of birth and exact location are never shown to anyone. Photos and messages go only to the person you send them to.

Who else handles it

We do not sell your information, we show no advertising, and there are no tracking or analytics companies on Twofold. A few services do part of the work for us, and see only what that work needs:

• DigitalOcean, which hosts our server and stores the data.
• Equity Bank (Jenga), and M-Pesa when you pay with it, to take membership payments on the website; Apple and Google, when you buy membership in our phone apps.
• Africa's Talking and Twilio, to send text messages.
• An email delivery service, to send the emails you choose.
• Google, Apple and Mozilla, whose services carry notifications to your phone or browser. In a browser the notification is encrypted so they cannot read it. In our phone apps it travels through Google Firebase and Apple, who can, which is why a notification says what happened and not who with, unless you choose otherwise.

These may be in a different country from you. We also share information when the law requires it, or when someone's safety is at risk.

How long it is kept

• Your account stays until you delete it. A profile nobody has used for two months is hidden from everyone, not deleted.
• When a chat ends, by a no, an unmatch or a block, the photos in it are deleted from our disk at once. The words stay, so a report can still be checked, until one of you deletes your account.
• When you delete your account, everything above goes at once: your profile, photos, chats, likes, blocks, reports, notifications, devices and payment records. What stays is a note that an account with your name was deleted (no email), with any reports against it that were still open and why it was on hold, if it was, so a safety review can still be acted on; the bank's or the app store's own record of any payment, which we must keep for our accounts; and visit counts that no longer point to you.
• Records of refused attempts (Security, above) are deleted after 90 days.
• Our backups are replaced every day and kept for 14 days, so a deleted account is gone from them within two weeks.

Your choices

• See and change what you have told us at any time, under You.
• Turn emails and texts on or off under You, and notifications on your alerts page.
• Delete your account yourself: You, then Account, then Delete my account. It takes effect at once, also while an account is on hold.
• Ask us for a copy of your information, or to correct something you cannot change yourself, at jnpsofts@gmail.com.
• If you think we have handled your information wrongly, you can complain to the data protection authority where you live.

Keeping it safe, and changes to this page

Everything travels encrypted, passwords are hashed, and every photo is served only to the person it was sent to, while that chat is open. No system is perfect, and if something went wrong that put you at risk we would tell you.

If we change what we collect or why, we will update this page and tell you in the app before it takes effect.