Data Policy
Sky for Two, by Techowiat LLC · Effective October 5, 2026
Our Privacy Policy explains what we collect and why. This page is the practical side: how long each kind of data is kept, which companies process it and where, how it is protected, and what happens when you ask us to hand it over or delete it. If the two pages ever seem to differ, the Privacy Policy is the one that counts.
Our rules for data
- Only what a feature needs. Every piece of data we keep belongs to a feature you use. When we add a feature, we ask what it needs and keep nothing more.
- Nothing for advertising. No ads, no ad networks, no data brokers, no selling or sharing for advertising, no tracking across other companies' apps or websites.
- No location tracking. The app never asks for your location. Your city comes from a list you choose from.
- Your words stay out of our tools. Usage events and crash reports never carry what you wrote, said or photographed.
- Privacy enforced by the database. Who can read what (your partner, only you, nobody until both have answered) is enforced inside the database, not just by the app.
- Deleting means deleting. Deleting your account removes your data right away; it isn't hidden or kept "just in case".
How long we keep things
| Data | Kept for | Then |
|---|---|---|
| Your account, profile and settings | As long as you keep your account | Deleted immediately when you delete your account |
| What you write, record and photograph | As long as you keep it | Deleted when you delete it, choose "Delete everything I wrote" on leaving, or delete your account |
| A shared space after one of you leaves | 30 days, read-only, with export | Deleted automatically |
| What you described about your partner | Until your partner joins with their own account, or you change or remove it | Deleted when they join; their own profile takes its place |
| Invite codes | Each code works for 7 days, or until used or replaced | Kept as a record of how you paired; deleted with the space or with the account that made it |
| Exports | The download link works for 1 hour | The file is deleted within a day |
| Push tokens | Until you sign out of that phone, the token stops working, or you delete your account | Deleted |
| Notification records | 60 days after sending | Deleted automatically |
| Phone handover records | 30 days | Deleted automatically, or at once with your account |
| Invite-link IP counts and wrong-code counts | 1 day | Deleted automatically |
| The monthly AI letter | As long as the space exists | Deleted with the space |
| What you type into an AI helper, and its answer | Not kept by us | Anthropic keeps it only briefly for safety checks under its commercial terms |
| Problem reports | While your account exists | Deleted with your account |
| Usage events (PostHog) | At most 24 months | Deleted; or straight away on request |
| Crash reports (Sentry) | At most 90 days | Deleted automatically |
| Database backups | A short rolling window for disaster recovery | Deleted data leaves backups within 30 days |
| Purchase records (Apple, Google) | As tax and accounting law requires | Under the stores' own policies; RevenueCat's copy is deleted with your account |
Who processes data for us, and where
These companies process data only to run Sky for Two, under contracts that require them to protect it and use it only for us. None of them may use it for their own advertising.
| Company | Why | Where |
|---|---|---|
| Supabase | Database, file storage, sign-in and server functions | United States |
| Expo (650 Industries) | Push notification delivery and app updates | United States |
| Apple | Sign in with Apple, App Store billing, iPhone notifications, the age range check | United States and worldwide |
| Google sign-in, Google Play billing, Android notifications, Play age signals | United States and worldwide | |
| RevenueCat | Subscription records across both stores | United States |
| Resend | Sending the sign-in code by email | United States |
| Sentry | Crash reports, with no names or content | United States |
| PostHog | Usage events, with no content (you can switch them off) | United States |
| Anthropic | The optional AI helpers, only after you turn them on | United States |
If we add or change a company that processes your personal data, we update this page and the Privacy Policy first.
How we protect it
- Everything travels over encrypted connections (HTTPS) and is encrypted at rest by our host.
- Each couple's data can be read only by its two members, and private items only by their author. This is enforced by row-level security in the database and covered by automated tests that run against every change to it.
- Photos and voice notes live in a private storage space and open only through links that expire within an hour.
- Server keys never ship in the app. Sign-in sessions are kept in your phone's secure storage.
- Invite codes can't be guessed: wrong attempts are counted and slowed down.
- Only the people who build Sky for Two can reach the production systems, and only to run and fix the service. We look at content only when you ask us to (for example to help with a problem) or when the law requires it.
- Letters and messages are not end-to-end encrypted today, which means our systems could technically read them. We say so plainly so you can decide what to write.
If something goes wrong
If we learn that your personal data was accessed without permission, we will investigate straight away, stop it, tell you without undue delay with what happened and what to do, and notify regulators where the law requires it.
Asking for your data, or for it to be deleted
- A copy: Us > Privacy > Export my data, any time. Or write to us.
- Deletion: Us > Privacy > Delete my account, which is immediate. Without the app, see Delete your account.
- Corrections: edit it in the app, or write to us.
- Usage data: switch it off under Us > Privacy > Share usage data, or ask us to delete what was collected.
Write to support@skyfortwo.com from the email on your account. We answer within 30 days, and we never treat you differently for asking.
Requests from the authorities
We hand over data only when the law requires it, for example a valid court order, and only what the request covers. Where the law allows, we tell you first so you can respond.
Contact
Techowiat LLC · Texas, United States · support@skyfortwo.com