How we treat your data.

Twonight is a private space for two. What you and your partner add stays between you, the app, and the small set of services that keep it running. We don't sell data, we don't run ads, and you can delete everything at any time. The full version follows.

1. Who we are

Twonight is operated by Leaves & Marks LLC ("Twonight", "we", "us"). We are the data controller for the personal information described in this policy, meaning we decide why and how it is processed. For anything privacy-related, contact support@twonight.app.

2. What this policy covers

This policy covers the Twonight service: the Twonight apps and this website, including its waitlist. By using any of them, you agree to the practices described here.

3. What we collect

• Account information: your email address, display name, and avatar choice. Sign-in is passwordless (Google, Apple, or an emailed code), so we never store a password. When you sign in with Google or Apple, we receive a token that verifies your identity; we do not receive your contacts or anything else from those accounts.
• Couple data: your partner connection, your shared couple name, and couple-level settings.
• Content you create: watchlists, ratings, reviews, notes, answers to conversation prompts, milestones and quest progress, circle memberships, and suggestions you post to the ideas board.
• Waitlist signups: your email, when you signed up, which form version you used, and a referral code if one brought you here.
• Technical and usage data: product analytics events (which features are used, on what kind of device), with IP addresses anonymized. This website uses cookieless analytics that cannot identify you. We also keep server logs and error reports needed to run the service.

We do not collect your precise location, your contacts, or advertising identifiers. We do not track you across other sites or apps.

4. How we use it

• To provide the service: syncing your movie world between you and your partner, and with friends you explicitly connect with.
• To generate recommendations and conversation prompts, including with AI (see section 5).
• To send service emails: sign-in codes, partner invites, and important account notices.
• To protect the service from abuse, including a bot check at sign-up.
• To understand how the product is used, in aggregate, so we can improve it.

We do not sell your personal data. We do not share it with advertisers. We do not use it for advertising of any kind.

5. AI features

Some features generate content with AI: for example, conversation questions about films you have watched. For these requests we send our AI providers only what the feature needs, typically film titles, ratings, and aggregate taste data. We never send your name, email, or anything that identifies you as part of generation requests. AI output is generated content: treat it as entertainment, not advice.

6. Who can see your data

• Your partner. Twonight is built for two. Content you add to your shared space (watchlist entries, ratings, reviews, answers once both of you have answered) is visible to your partner. That is the product.
• Your circle. If you join a circle with friends, they see only what the circle features share, and you control this in Settings.
• Service providers (section 7), who process data on our behalf and only to run the service.
• Legal requirements. We may disclose information if required by law, or to protect the rights, safety, or property of our users or the service.
• Business transfers. If Twonight is ever acquired or merged, your data may transfer with it. This policy would continue to apply, and we would notify you of any material change.

7. The services we rely on

Like every app, Twonight runs on a small set of specialist providers. They process data only on our instructions, only to run the service, and never for advertising:

• Hosting and database providers that store your data securely.
• An email delivery service that sends sign-in codes, invites, and account notices.
• A privacy-focused analytics service, with IP addresses anonymized and no session recording.
• AI providers that generate conversation questions and recommendations, as described in section 5.
• Film databases that supply titles, artwork, and ratings. Lookups are not tied to your identity.
• Google and Apple, only if you choose to sign in with them.

Want the current list of providers by name? Email support@twonight.app and we will send it over.

8. Cookies

The app uses strictly necessary cookies to keep you signed in, plus one first-party analytics cookie. There are no third-party advertising cookies and no cross-site tracking. This website is cookieless apart from a small set of security cookies that protect it from abuse; anonymous device IDs used to deduplicate waitlist submissions are stored locally on your device, and you can clear them at any time.

9. The waitlist

If you join the waitlist on this site, we hold your email for one reason: telling you when Twonight opens. If you create an account, your email moves to it. If you don't, or if you ask us to delete it, we will, promptly and without a confirmation dance.

10. How long we keep data

Your data is kept for as long as your account exists. When you delete your account, your personal data is removed from our live systems immediately and from backups within 30 days. Anonymized, aggregate numbers (for example, total user counts) may be retained because they no longer describe you.

11. Deleting your account

Three ways, your choice: the delete option in the app's Settings, the deletion page at beta.twonight.app/delete-account, or an email to support@twonight.app from your account address. Deletion removes your account and the personal data associated with it, as described in section 10.

12. Your rights

Depending on where you live (GDPR, CCPA, and similar laws), you have the right to access the personal data we hold about you, correct it, delete it, object to its processing, and receive a copy of it. To exercise any of these, email support@twonight.app from your account address and we will handle it within the timelines the law requires, and usually much faster. If you are in the EU or UK, you also have the right to complain to your data protection authority.

13. Where your data is processed

Our services are hosted in the United States. If you use Twonight from elsewhere, your data is transferred to and processed in the US under the safeguards our providers offer for international transfers.

14. Children

Twonight is for users aged 13 and older, or the higher minimum age your country's law sets for consenting to data processing. We do not knowingly collect data from children below that age. If you believe a child has created an account, contact us and we will delete it.

15. Security

Data is encrypted in transit, database access is protected with row-level security so each couple can only reach its own data, and no privileged credentials are ever exposed to the client. No system is perfectly secure, but we treat your private space with the seriousness it deserves.

16. Changes to this policy

If we change this policy materially, we will update the date below and notify you in the app or by email before the change takes effect. Continued use after that means you accept the updated policy.

17. Contact

Leaves & Marks LLC · support@twonight.app

Last updated: 3 July 2026