Privacy Policy

Last updated 2026-10-20

1. Who we are
2. What data we process
3. Why we process it
4. What your partner can see
5. Where data is stored
6. Who processes it
7. How long we keep it
8. Leaving a shared space
9. Export and deletion
10. Your rights
11. Security
12. No tracking or ads
13. Children
14. Changes
15. Contact

1. Who we are

US TWO (the “app”) is provided by SEVEN AM Limited Liability Company (“Seven A.M.”, “we”, “us”), Kyiv, Ukraine, company registration number (EDRPOU) 46285335. We are the controller of the personal data described in this policy. You can reach us at hello@7am.agency.

This policy covers the US TWO iOS app, the US TWO API at api.ustwo.7am.digital and this website (ustwo.7am.digital).

2. What data we process

Account

• Apple user identifier. When you use Sign in with Apple, Apple gives us a stable, app-specific identifier that lets you sign in again. We do not receive or store your Apple ID password. We do not store your e-mail address.
• Display name that you choose, shown to your partner.
• Time zone and language, used to show dates, reminders and quiet hours correctly.
• Session tokens. Short-lived access tokens and refresh tokens that keep you signed in. Refresh tokens are stored only as hashes. On your device, tokens are kept in the iOS Keychain.

Your shared space and content

• Membership of your couple space (solo or shared with one partner) and its time zone.
• Content you create: tasks (title, notes, category, assignee, due date, reminders, recurrence), shopping lists and items, calendar events (title, description, time, location as free text, participants, type, reminders, recurrence, visibility), important dates, and your daily-question answers.
• Optional onboarding answers (for example, whether you live together and your focus areas). These are stored as preferences and used only to order cards on your Home screen.
• Invitations: an invite link token and code are stored only as hashes, with expiry and status. Failed invitation attempts are logged with a hashed network address to prevent guessing.

Notifications

• Your notification settings (per-type toggles, quiet hours, optional daily-question time).
• Your device's Apple Push Notification service (APNs) token, used only to deliver notifications to your device. Push content never includes your answers or notes.

Purchases

• If you buy US TWO Plus, the app sends Apple's signed transaction to our server. We verify Apple's signature and store the entitlement: product (monthly or yearly), transaction identifiers, status and dates. Apple sends us signed server notifications about renewals, expiry, refunds and revocations. We never receive your card or payment details.

Product analytics (pseudonymous)

• Our server records a small set of events from a fixed list (for example “invite accepted”, “task created”, “subscription started”), with only enumerations and counts as properties. User and space identifiers are replaced with keyed hashes. We never record titles, notes, answers, names, e-mail addresses or any free text. No analytics code runs in the app itself.

Security and audit records

• A minimal audit trail of security-relevant actions (for example sign-in, leaving a space, account deletion), with user identifiers hashed. Server logs never contain tokens, answer text, notes or Apple identity tokens.

What we don't collect

No location, no contacts, no photos, no health data, no advertising identifier, no browsing history, no activity timing such as “last seen” or read receipts. This website uses no cookies, no JavaScript and no analytics; our web server keeps standard technical access logs.

3. Why we process it (purposes and legal basis)

We do not sell personal data, use it for advertising, build profiles for third parties, or use your content to train AI models.

4. What your partner can see

A shared space has two members with equal permissions. While you share a space:

• Your partner sees your display name and everything shared in the space: tasks, shopping lists and items, and calendar events with Shared visibility (the default).
• Private events are visible only to you. They are never shown to your partner.
• Daily-question answers stay private until both of you have answered. Only then are both answers revealed. You can skip a question or discard your answer before the reveal; an unrevealed answer is visible only to you.
• The optional workload overview (off by default) shows how many tasks each of you completed in the last 30 days, as a neutral split.
• US TWO never shares your location, when you were last active, or whether you have read something.
• Before you accept an invitation, the invitation preview shows no personal information about the inviter.

We (Seven A.M.) do not browse your content. Administrative tools show aggregates only.

5. Where data is stored

The US TWO server and database are hosted by OVH (OVHcloud) in data centres in the European Union. The database runs on an internal network that is not reachable from the internet, with disk encryption at the provider and encrypted backups. All connections between the app and the server use TLS.

Seven A.M. is based in Ukraine and may access the systems from there to operate and support the service. Apple, as described below, processes data under its own terms and may do so outside the EU.

6. Who processes it

• OVH (OVHcloud): hosting of our servers and database in the EU, as our processor.
• Apple: Sign in with Apple (authentication), the App Store and In-App Purchase (payments, subscriptions and refunds), and the Apple Push Notification service (delivery of notifications to your device). Apple acts under its own privacy policy for these services: apple.com/legal/privacy.

The app contains no third-party SDKs: no analytics, advertising, crash-reporting or social SDKs. We may disclose data where required by law or to protect the rights and safety of users, and only to the extent necessary.

7. How long we keep it

Encrypted backups are kept for a limited rotation period and then overwritten. We may keep information longer only where the law requires it.

8. Leaving a shared space

Either partner can leave at any time from Our Space → Leave shared space. Leaving cannot be blocked and takes effect immediately:

• You get a new, empty solo space. Your private events move with you.
• Your daily-question answers are deleted from the old space. Your former partner keeps their own answers.
• Shared tasks, lists, items and shared events stay with your former partner. Your name is removed from them and they show “Former partner”.
• Pending invitations of the space are revoked, and your access to the old space ends at once.
• US TWO Plus follows the purchaser. If you bought it, the old space loses Plus unless your former partner has their own subscription.
• Your former partner receives one neutral notice: “Your shared space is now just you.”

If both members leave, the space and all its data are permanently deleted.

9. Export and deletion

Export. In the app, go to Our Space → Export & delete → Export my data to receive a JSON file with your profile, preferences, notification settings, your current space and everything visible to you in it, your private events, your own answers (and revealed partner answers), and your entitlements.

Delete account. In the app, go to Our Space → Export & delete → Delete account. Deletion is immediate and cannot be undone:

• If you share a space, you leave it first (as described above).
• Your solo space and everything only you could see, your answers, preferences, notification settings, device push tokens, sessions, entitlements and pending notifications are deleted.
• Your account record is anonymised: your Apple identifier and display name are removed and the record is marked deleted, so it can no longer be linked to you.
• Shared records you created stay with your former partner, without your name.
• Pseudonymous analytics and hashed audit records cannot be linked to you after deletion and expire under the schedule above.

Deleting your account does not cancel an App Store subscription. Cancel it first in your Apple ID settings (the app links there). If you cannot use the app, write to hello@7am.agency; see Delete your account.

10. Your rights

Depending on where you live, and in particular under the EU and UK General Data Protection Regulation, you have the right to:

• Access your personal data (use Export, or ask us);
• Rectification: correct inaccurate data (most of it you can edit directly in the app);
• Erasure: delete your data (use Delete account, or ask us);
• Portability: receive your data in a structured, machine-readable format (the JSON export);
• Restriction of processing in certain cases;
• Objection to processing based on our legitimate interests, including pseudonymous analytics;
• Complain to a data protection supervisory authority, in particular in the country where you live or work or where an alleged infringement took place. In Ukraine, this is the Ukrainian Parliament Commissioner for Human Rights.

To exercise a right, write to hello@7am.agency. We will answer within one month and may ask you to confirm the request from inside the app so that we can verify it is you. Requests about shared content are handled so that your partner's own data and rights are respected.

11. Security

Every request is checked on the server against your live membership, so you can only ever reach data in your own space. Invitation codes and refresh tokens are stored as hashes, sessions are short-lived and rotated, and connections use TLS. No system is perfectly secure, but we design US TWO to minimise what we hold and who can see it.

12. No tracking, no ads, no third-party SDKs

US TWO does not track you across apps or websites owned by other companies, does not use the advertising identifier, shows no ads, and contains no third-party SDKs.

13. Children

US TWO is not directed to children and is not intended for anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child has created an account, contact us and we will delete it.

14. Changes to this policy

We may update this policy when the app changes or the law requires it. We will change the date at the top and, for material changes, tell you in the app before they take effect.

15. Contact

SEVEN AM Limited Liability Company, Kyiv, Ukraine, EDRPOU 46285335
E-mail: hello@7am.agency