who we are

Two & One is a daily family reflection app built by Borbole Companies ("we," "us," "our"). This policy explains how we handle your information when you use the Two & One iOS app.

what we collect

We collect only what's needed to provide the app's features:

• Account information: Your Apple ID identifier (via Sign in with Apple) or email address if you sign in with email. We also store the display name you choose.
• Journal entries: The two good things and one bad thing you write each day, along with the date, privacy status, and "want to talk" flag.
• Family data: Family group membership, invite codes, managed profile names and emoji avatars, and member roles.
• App preferences: Reminder settings, notification preferences.

what we don't collect

• We don't track your location
• We don't collect contacts or phone data
• We don't use analytics or advertising SDKs
• We don't sell, rent, or share your data with third parties
• We don't display ads

how data is stored

Your data is stored securely using Google Firebase (Firestore) with industry-standard encryption in transit and at rest. Access to your journal entries is restricted to you and, if you're part of a family, to family members with appropriate roles (as controlled by the app's permission system).

Private entries (those you've locked) are stored in the same secure database but are only accessible to you, regardless of family membership.

children's privacy

Two & One is designed for family use, including children. We take children's privacy seriously:

• Managed profiles are created by a parent and require only a display name and emoji avatar. No personal information is collected from the child.
• Child accounts (solo view) that sign in independently collect only authentication credentials and the information they choose to enter in journal entries.
• A parent or family owner must approve all join requests before anyone can access the family feed.
• We do not knowingly collect personal information from children under 13 without parental involvement through the app's managed profile or family approval system.

data sharing within families

When you join a family in Two & One, your journal entries are visible to family members with "family view" access. You can lock any individual entry to keep it private. The "want to talk about it" flag is visible to family view members even when an entry is locked. Solo view members can only see their own entries.

your choices

• Lock entries: Mark any day's entry as private so only you can see it.
• Export data: Export all your entries from Settings at any time.
• Delete account: Permanently delete your account and all associated data from Settings. This action cannot be undone.
• Leave a family: Remove yourself from a family group at any time. Your entries remain on your personal account.

third-party services

We use the following services to operate the app:

• Firebase Authentication: For secure sign-in (Apple ID and email/password).
• Firebase Firestore: For secure data storage and real-time sync.
• Firebase Cloud Messaging: For optional evening reminder notifications.
• Apple StoreKit: For subscription management.

These services process data under their own privacy policies. We do not share your journal content with any other services.

changes to this policy

We may update this policy from time to time. If we make significant changes, we'll notify you through the app. The effective date at the top of this page reflects the most recent revision.