Twin Privacy Policy
Last updated: October 12, 2026
This policy explains what personal data the Twin mobile app ("Twin", "we") collects, why, and your rights. Data controller: Aziz Kutlu, Çankaya / Ankara, Türkiye. Contact: azizkutlu.dev@gmail.com.
This is a draft; have it reviewed by a legal professional before publishing.
1. Data we collect
| Data | Examples | Why |
|---|---|---|
| Account | Phone number; email and name from Apple/Google sign-in | Sign-in and account security |
| Profile | Name, date of birth, gender, who you want to see, photos, bio, job, interests | Showing your profile to others and suggesting matches |
| Location | Your device location | Showing people nearby. Others only see your approximate (~1 km) location and distance; your exact location is never shared |
| Interactions | Likes, passes, matches | Running matching |
| Messages and calls | Message content, photos you send, call times and durations | Providing chat and calls; safety and moderation (see below). Call audio/video is not recorded |
| Verification selfie | The photo you take to verify | Confirming you're a real person. Never shown on your profile |
| Safety | Reports, blocks | Keeping the community safe |
| Device | Push token, OS, language | Sending notifications |
| Security and fraud prevention | A random device ID created by the app, device model, app version, IP address | Preventing fake and duplicate accounts, banned people returning with new accounts, and fraud. Never shared with other users |
We do not knowingly collect data from anyone under 18; Twin is for adults 18+.
2. Purposes and legal bases
We process data to perform our contract with you (providing the service), for legitimate interests (safety, fraud prevention, improving the service) and with your consent (location, notifications, camera/microphone) — GDPR Art. 6 and Turkish KVKK Art. 5.
3. Automated processing
- Photo moderation: uploaded photos are checked by Google Cloud Vision for nudity and violence; unsafe photos are removed. Profile photos are also checked with Google's automated services (processed in the EU) for people who look under 18, whether a face is visible, contact details written on the photo and computer-generated images, and with Cloud Vision for whether the photo is published elsewhere online (stolen photos). Suspicious photos are reviewed by a person.
- Verification: we automatically check that a selfie contains one clear face; approval is made by a person.
- Recommendations: people are ordered by distance, recent activity, shared interests, profile completeness, verification and how often a profile is liked by others. To improve the service, some users may get different ranking settings (A/B tests).
- Fraud and abuse prevention: an automatic risk score is calculated from signals such as reports, flagged messages, accounts sharing a device or IP address, unusually fast swiping and the same message sent to many people. Above certain thresholds an account may automatically be put under review, temporarily suspended or have its visibility limited. You can appeal these decisions in the app; appeals are reviewed by a person.
- Message and text screening: messages and profile text are automatically scanned for scams, off-platform contact (e.g. IBAN, phone numbers, social links) and banned terms; flagged items are reviewed.
3a. Message review
To keep the community safe, assess reports and prevent fraud and harassment, authorised Twin moderators may view your messages. Access is limited to authorised staff and every view is logged.
4. Who we share data with
We don't sell your data. To run the service we use:
- Google (Firebase, Google Cloud, Google Maps): hosting, database, authentication, notifications, photo moderation, maps. Data is stored in the EU (Frankfurt).
- LiveKit: relaying voice and video calls (not recorded).
- Apple / Google: if you use Sign in with Apple or Google.
We may disclose data when required by law.
5. What other users see
Your name, age, photos, bio, job, interests, verification badge and approximate distance. Not your phone number, email, date of birth or exact location.
6. Retention
We keep your data while your account exists. When you delete your account in the app (Profile → Privacy & safety → Delete account) your profile, photos, matches and messages are permanently deleted. Report records and fraud-prevention data (device ID, IP address) are kept for 1 year after account deletion, to stop banned people from returning and for possible legal claims, and are then deleted automatically.
7. Your rights
You can access, correct, delete, restrict or object to processing of your data, and request portability. You can request a copy or a correction of your data in the app (Profile → Privacy & safety → My data); requests are handled within 30 days. Contact azizkutlu.dev@gmail.com. You may also complain to your data protection authority.
8. Security
Data is encrypted in transit and access is restricted by security rules to authorised users. No system is 100% secure; tell us if you notice anything suspicious.
9. Changes
We may update this policy and will announce significant changes in the app.