TwoBuy — Privacy Policy

TwoBuy is a shared shopping list for two people. This policy explains what the app stores, why, and how to get rid of it. It covers the TwoBuy mobile app (com.starworks.twobuy) and nothing else.

What TwoBuy stores

TwoBuy has no accounts in the usual sense — you are signed in anonymously the first time you open it. The app stores:

• A display name you type during setup. It is shown to the person you pair with, so they can tell who added or bought something.
• An anonymous user ID generated by Firebase Authentication. It is not linked to your identity unless you choose to sign in with Google.
• Your Google email address — only if you link a Google account, which is optional and exists so you keep your list across devices.
• Your lists and items: names, quantities, units, categories, whether an item is urgent, and whether it has been bought.
• An activity history of what was added, bought or deleted, stamped with the display name of whoever did it and when.
• An invite code for your pair, so a second person can join.
• Push notification tokens and your app language, stored only once you are paired, so the app can notify your partner and use the right language. You can turn each notification type off in Settings.

What TwoBuy does not do

• No advertising, and no advertising identifiers.
• No analytics or tracking SDKs.
• No selling or sharing of your data with third parties.
• No location, contacts, camera, microphone or photo access.

Who can see your data

Your lists, items and activity are shared with the one person you pair with — that is the entire point of the app. Nobody else can read them; the database rules restrict every record to the two members of a pair.

Data is stored and processed by Google Firebase (Cloud Firestore, Firebase Authentication, Cloud Messaging and Cloud Functions), acting as our processor. See Firebase's privacy information.

How long it is kept

Data stays until you delete it. Items you buy are kept so they show up in your activity history and monthly summary. Deleting your account removes your data as described below.

Deleting your account and data

You can also delete data without deleting your account. In the app you can delete any individual item, clear the bought items off a list, or delete a whole list — from the list's own menu. For anything else, email the address below and we will action it within 30 days.

Deleting your account removes:

• your profile — display name, language, notification settings and push tokens;
• your authentication record, including the link to your Google account;
• your lists, items, activity and invite code, if you are the only person left in the pair.

If you are still paired with someone, the shared lists and the activity history belong to both of you, so they stay with your partner. Past activity entries keep the display name they were recorded with — we cannot rewrite your partner's history. If you want those gone too, ask your partner to delete the pair, or delete the shared lists before you delete your account.

Children

TwoBuy is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes materially we will update the date at the top and, where the change matters, note it in the app's release notes.

Contact

Questions, or a deletion request: starworkssoftware@gmail.com