Privacy Policy
Effective and last updated: August 19, 2026
App: Twin Companion
Developer: PAK BC
Android package: com.twinheart.app
This policy explains how PAK BC collects, uses, stores, shares, protects, retains, and deletes information when you use Twin Companion (the “App”). Features described below process information only when available and when you choose to use them.
1. Information we collect
| Category | Examples | Purpose |
|---|---|---|
| Account and profile | Email address, user ID, display name, avatar, authentication records, preferences | Create and secure the account, authenticate users, personalize the App, and provide support. |
| User content | Chats, prompts, journal and life-memo entries, stored memories, reminders, notes, and feedback | Provide companion conversations, memory, organization, reminders, and requested AI features. |
| Wellness information | User-entered mood, wellness check-ins, goals, routines, exercise or meal preferences | Provide requested mood and wellness tracking and personalized guidance. The App is not a medical service. |
| Audio and voice | Microphone audio, voice messages, speech transcripts, and Life Memo recordings | Enable speech recognition, voice conversations, transcription, and voice or Life Memo features. Temporary audio may be processed for transcription; recordings a user chooses to save may remain stored until deleted. |
| Images and style information | Photos selected or captured by the user, avatar images, outfit/closet images, visual-analysis results, body or style preferences | Provide avatar, fashion, styling, aesthetic, and image-analysis features selected by the user. |
| Purchases | Subscription status, product, transaction reference, credit balance, and purchase history | Process purchases, provide paid features, prevent fraud, and maintain accounting records. We do not receive or store complete payment-card numbers. |
| Device and usage | Push-notification token, app version, device/platform information, feature usage, timestamps, diagnostics, and security logs | Deliver notifications, operate and secure the App, prevent abuse, troubleshoot errors, and improve reliability. |
| Optional contextual information | People, places, events, schedules, or location descriptions that a user enters into content | Respond to requests and personalize relevant features. The Android app does not request background location permission. |
2. Permissions and user choices
The App may request microphone, camera or photo-library, and notification access when a related feature needs it. Android billing permission supports Google Play purchases. You can deny or revoke device permissions in system settings, although the related feature may then be unavailable. The App does not access microphone recordings, photos, or camera content unless you grant access and use the feature.
3. How information is used
- Provide accounts, companion conversations, memory, reminders, wellness, voice, image, style, and other requested functionality.
- Personalize responses and preserve user-selected context across sessions.
- Process purchases and manage subscriptions or usage credits.
- Send requested reminders, service messages, and push notifications.
- Maintain security, prevent fraud and abuse, diagnose failures, and enforce service limits.
- Comply with legal obligations and respond to privacy requests.
We do not sell personal information and do not use personal information for third-party behavioral advertising.
4. Service providers and data sharing
Information is shared only as needed to provide a feature, operate the service, comply with law, or protect users. Depending on the feature and current service availability, processors may include:
- Supabase for authentication, databases, file storage, and server-side services.
- Vercel for web and API hosting.
- Google Gemini, OpenAI, and OpenRouter for AI text, image, speech, transcription, embedding, or related processing. Only information needed for the requested feature is sent.
- Qdrant for semantic memory/vector storage when that service is enabled.
- Stripe, Google Play Billing, and RevenueCat for purchases, subscriptions, and entitlement management when those payment paths are used.
- Expo notification services and device platform providers for push notifications.
These providers process information under their own terms and privacy commitments. We may also disclose information when legally required, to investigate abuse or security incidents, or as part of a business transfer subject to appropriate protections.
5. AI processing
When you use an AI feature, your prompt and relevant context—such as recent conversation, selected memories, an uploaded image, or audio—may be sent to an AI provider to generate the requested result. Avoid submitting information you do not want processed. AI output may be inaccurate and should not replace professional medical, legal, financial, or emergency advice.
6. Storage and security
We use encrypted HTTPS/TLS connections for data in transit. Account-linked information is stored using access controls such as Supabase authentication and row-level security where configured. We apply reasonable administrative, technical, and organizational safeguards, but no online service can guarantee absolute security.
7. Retention
Account information and user content are generally retained while the account is active or until the user deletes the content or account. Temporary processing files are removed when no longer needed for the feature. Verified deletion requests are targeted for completion within 30 days. Data removed from active systems may remain in encrypted backups for up to 30 additional days before being overwritten.
Limited transaction, security, fraud-prevention, deletion-receipt, dispute, tax, or accounting records may be retained for the period required by applicable law or a legitimate compliance purpose. Aggregated or de-identified information that can no longer reasonably identify a user may be retained for service analysis.
8. Deletion and privacy choices
You may edit available profile information, remove individual content through available App controls, request deletion of selected data, or request permanent deletion of the entire account and associated data. Account freezing is not used as a substitute for deletion.
- Request account and associated-data deletion
- Request deletion of selected data while keeping the account
We may request limited verification through the account email to prevent unauthorized deletion.
9. Children
The App is not directed to children under 13, or the minimum age required to consent to digital services in their country. We do not knowingly collect personal information from children below the applicable age. A parent or guardian who believes a child provided information may contact us to request removal.
10. International processing
Service providers may process information in countries other than your own. Where required, we use appropriate safeguards for international transfers. Privacy rights vary by location and may include rights to access, correct, delete, restrict, object to processing, or obtain a copy of personal information.
11. Changes to this policy
We may update this policy as features, providers, or legal requirements change. We will update the date above and provide additional notice when required. Material changes apply prospectively unless the law requires otherwise.
12. Contact
PAK BC
Privacy contact: packbcapp@gmail.com
App: Twin Companion
Package: com.twinheart.app