Privacy Policy
Last updated: October 21, 2026
1. Who We Are
Dwoje ("we", "us", "our") is a couples app operated by Dmytro Tolok (Krukit). Dmytro Tolok is the data controller for the personal data described in this policy under the EU General Data Protection Regulation (GDPR). This policy explains what we collect when you use the Dwoje iOS app and the website dwoje.krukit.co, why, who processes it for us, and how long we keep it.
Contact for anything privacy-related: dmytroot@krukit.co.
2. Data We Collect
2.1 Account Data
- Email address (from email sign-up, Sign in with Apple or Google Sign-In)
- Name shown in your profile
- Gender (optional; used for grammatical forms in notifications and as an analytics property)
- Profile photo (avatar), if you upload one
- App language and notification preferences
- User ID (a random identifier assigned to your account)
2.2 Couple Content
Everything you create together with your partner: answers to the daily question and to games (36 Questions, Swipe, Truth or Fiction, Know Me, Would You Rather), your lines and facts, temperature check-ins, pings, polls, shared and personal lists, dates and milestones, reminders, the invite code that links you, and your relationship start date if you enter it.
2.3 Purchases
Your Premium subscription status and history (product, dates, renewal state), received from Apple. Payment details are handled by Apple; we never see your card.
2.4 Support, Feedback and Reports
- Feedback you send from the app: the text, an optional rating, app version and language.
- If you report something your partner wrote: the reason you chose and a copy of the reported text, taken from our database.
- Emails you send us.
2.5 Product Interaction (Analytics)
Events such as which screens and features are used, sign-up and pairing steps, and paywall views, linked to your user ID, together with app version, platform, language and the App Store country. Analytics never include the text of your answers, lines, lists or polls. See section 4 for when analytics are switched on.
2.6 Crash and Performance Data
When the app crashes or hits an error, a report with the stack trace, device model, iOS and app version, and your user ID. A sample of about 10% of sessions also sends performance traces. Crash reports contain no email or name, no screenshots or screen contents, and the app does not attach your IP address.
2.7 Ad Measurement
We measure our ads only through Apple's SKAdNetwork: Apple tells the ad network that an ad led to an install and how far the app got (couple formed, trial, purchase), with no user or device identifier.
2.8 Device Data
A push notification token from Apple (APNs) so we can send you notifications.
We do not collect your location, contacts, health data, browsing history or the advertising identifier.
3. Why We Use It and on What Legal Basis
| Purpose | Data | Legal basis (GDPR art. 6) |
|---|---|---|
| Run the app: sign-in, pairing with your partner, questions, games, lists, notifications, Premium for both partners | 2.1-2.3, 2.8 | Performance of our contract with you (6(1)(b)) |
| Answer feedback and support emails; review reports and keep the app safe | 2.4 | Contract (6(1)(b)) and our legitimate interest in a safe service (6(1)(f)) |
| Find and fix crashes, keep the app fast | 2.6 | Legitimate interest in a stable app (6(1)(f)) |
| Product analytics: understand which features are used | 2.5 | Consent (6(1)(a)) in the EEA, UK and Switzerland; legitimate interest (6(1)(f)) elsewhere |
We do not sell your personal data, and we do not show ads inside the app.
4. Your Choices: Analytics
If your App Store country is in the EEA, the UK or Switzerland, the app asks before any analytics is sent: the "Product analytics" switch is off until you choose. Until you answer, no analytics data leaves your device. You can change your choice any time in Settings → Data, and turning analytics off stops it immediately.
In other countries analytics is on by default. You can object at any time by emailing us (section 9).
5. Who Sees Your Data
5.1 Your Partner
Dwoje is built for two. Your partner sees your name, photo, and what you share in the couple: answers once revealed, lines, temperature, pings, polls, shared lists and dates. Your partner does not see your email, password, push token, personal lists or reports you file.
5.2 Service Providers (Processors)
We use these providers to run Dwoje. Each processes data only on our instructions under a data processing agreement.
| Provider | Data | Purpose | Where |
|---|---|---|---|
| Supabase | All app data (2.1-2.4, 2.8) | Database, sign-in, file storage, server functions | EU (Frankfurt, Germany) |
| PostHog | User ID, product interaction (2.5) | Product analytics | EU |
| Sentry (Functional Software, Inc.) | Crash and performance data, user ID (2.6); no PII, no screenshots | Crash reporting | EU (Frankfurt, Germany) |
| Resend, Inc. | Your email address and a sign-in code; report notifications to us | Sending emails (sign-up and password codes) | USA |
| Apple | Purchases (2.3), push token and notification content (2.8), Sign in with Apple | Subscriptions, push notifications (APNs), sign-in | USA / global |
| Sign-in token (if you choose Google) | Sign-in | USA / global |
Apple and Google act as independent controllers for their own sign-in and store services, under their own privacy policies.
5.3 Transfers Outside the EU
Where a provider processes data in or accesses it from the USA, the transfer is covered by the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise by the European Commission's Standard Contractual Clauses.
5.4 Legal Requests
We may disclose data if the law requires it, for example to comply with a binding order from a court or authority.
6. Data Storage & Security
App data is stored on Supabase in the European Union (Frankfurt, Germany). Database access rules (row-level security) ensure you can only read your own data and what your couple shares. Passwords are hashed and never stored in plain text. All data in transit is encrypted with TLS.
7. How Long We Keep It
- Account data and couple content: while your account is active, until you delete it (section 8).
- If you leave a couple: nothing is deleted for 7 days, so you can both choose "Restore the couple". You can tick "Remove my answers from shared items" to hide them right away. A couple with no members left is deleted immediately.
- Reports: deleted 30 days after the report is closed or the reported text is deleted.
- Invite code attempts: deleted after 1 day.
- Analytics events queued on our server: deleted 7 days after they are sent to PostHog.
- Crash reports: kept by Sentry for up to 90 days.
- Analytics in PostHog: kept under PostHog's retention settings; ask us to delete your analytics data at any time.
- Purchase records: as long as needed to provide Premium and meet tax and accounting obligations.
8. Deleting Your Account
You can delete your account at any time in the app: Settings → Delete account. Before you confirm, the app shows what will disappear. Deletion is permanent and processed immediately:
- Your profile, sign-in credentials and profile photo are deleted. If you used Sign in with Apple or Google, we also revoke Dwoje's access to that account.
- Your answers and lines are deleted by default. If you tick "Keep my answers for my partner", they stay in the couple without your name.
- Shared lists and dates stay with your partner, shown as from "Former partner".
- The couple stays with your partner; if nobody is left, it is deleted.
Analytics data in PostHog is not yet deleted automatically with your account: email us and we will delete it within 30 days. To cancel a subscription, use your Apple ID subscription settings: deleting the account does not cancel billing at Apple.
9. Your Rights
Under the GDPR you have the right to:
- Access your personal data and get a copy
- Rectify inaccurate data (most of it you can edit in the app)
- Erase your data (account deletion in the app, or by email)
- Data portability: receive your data in a machine-readable format
- Restrict processing, and object to processing based on legitimate interest, including analytics
- Withdraw consent at any time in Settings → Data and ads, without affecting processing done before
To exercise any right, email dmytroot@krukit.co. We answer within one month.
You can also complain to a data protection authority, in particular in the country where you live or work. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.
10. Children
Dwoje is for adults in a relationship and is not intended for anyone under 18. We do not knowingly collect data from children. If we learn that a child under 18 uses Dwoje, we will delete the account.
11. Website and Cookies
The app does not use cookies. This website uses no cookies and no analytics or advertising scripts. Pages load fonts from Google Fonts and styles from the Tailwind CSS CDN, so your browser sends your IP address to those servers when you open a page. Invite links (dwoje.krukit.co/j/…) check the invite code with our server to show its status.
12. Changes to This Policy
We will update this policy when our processing changes and change the "Last updated" date above. For material changes, such as a new purpose or a new provider that receives your data, we will tell you in the app, and ask again where consent is needed.
13. Contact
Data controller:
Dmytro Tolok (Krukit)
Email: dmytroot@krukit.co