Privacy Policy
Last updated: October 5, 2026
Twicetold ("the App") is operated by Twicetold ("we", "us", "our"). This policy explains how we collect, use, and protect your personal information.
1. Information we collect
Account information: When you create an account, we collect your email address and/or authentication tokens from Google or Apple sign-in. We do not store your password — authentication is handled securely by Supabase and OAuth providers.
Your stories and activity: Your stories — the genre, the chapters written for you, the choices you made, and when — are saved to your account so you can pick them up again and keep them. We also keep a count of the stories you’ve started and choices you’ve made. This is linked to your account and deleted along with it. We don’t use any third-party analytics services.
Purchase data: If you buy tokens or subscribe to Premium, the transaction is processed entirely by Apple (App Store) or Google (Play Store). We receive a purchase confirmation but never see your payment details.
Device information: We may collect your device type, operating system version, and app version for crash reporting and compatibility.
Content reports: If you report a chapter, we receive the chapter's text, the reason you chose, and your account ID, so we can review it and improve our safeguards.
2. How we use your information
- To provide and maintain the App's features (story generation, token balance, saved progress)
- To authenticate your account and sync data across devices
- To process in-app purchases and manage subscriptions
- To send push notifications you have opted into (daily story reminders)
- To analyse usage patterns and improve the App
- To respond to support requests
3. AI-generated content
Stories in Twicetold are generated in real-time by Anthropic's Claude AI. When you play a story, the genre and your choices are sent to Anthropic's API to generate the next story segment. Anthropic's API does not retain conversation data for training purposes under their commercial terms. No personally identifiable information is included in AI requests — only the genre and story context.
4. Advertising
You can choose to watch an optional video ad to earn free tokens. These ads are provided by Google AdMob. When an ad is requested or shown, Google may collect your device's IP address (from which it can estimate an approximate location), device and app information, an advertising or app-specific identifier, and how you interact with the ad. Google uses this to deliver ads, measure them, and prevent fraud.
Twicetold does not ask for permission to track you across other companies' apps and websites, so on iPhone Google does not receive your device's advertising identifier from us. If you are in the UK, the European Economic Area or Switzerland, we ask for your consent before ads are personalised, and you can change your choice at any time in Settings. You can learn how Google uses this information at policies.google.com/technologies/partner-sites.
Ads are never required. An ad only plays when you choose to watch one, and the App works without them. To have one ready when you ask, the App may request an ad in advance, which is when the information above is sent to Google.
5. Narration
Narration happens entirely on your device. When a chapter is read aloud, its text is turned into speech by voice models stored in the App, and nothing is sent to us or anyone else to do so. Narration audio is saved on your device so chapters you have heard replay without being generated again. It never leaves your device, and you can delete it at any time in Settings.
6. Data storage and security
Your data is stored securely on Supabase (hosted on AWS infrastructure) with encryption at rest and in transit. We use Row Level Security to ensure users can only access their own data. All API communications use HTTPS/TLS encryption.
7. Data sharing
We do not sell your personal information to third parties. We share data only with:
- Supabase — database hosting and authentication
- Anthropic — AI story generation (no personal data shared)
- RevenueCat — subscription and purchase management
- Google (AdMob) — the optional rewarded ads described in section 4
- Apple / Google — payment processing via their respective stores
8. Data retention
We retain your account data for as long as your account is active. If you delete your account, we will delete all associated data within 30 days, except where we are legally required to retain it.
9. Your rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and all associated data
- Export your data in a portable format
- Opt out of push notifications at any time via device settings
To exercise any of these rights, contact us at support@twicetold.app.
10. Children's privacy
Twicetold is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via the App or email.
12. Contact
If you have questions about this Privacy Policy, contact us at support@twicetold.app.