Privacy policy

01Signing in

You can sign in with Apple or with an email address and password. Either way, signing in doesn’t ask for your name. If you set up Friends, you choose a name for other people to see (see section 4).

Sign in with Apple

Twentyfold asks Apple for your email address and nothing else.

• If you choose Hide My Email, Apple gives Twentyfold a private relay address that forwards to you. Twentyfold never sees your real address.
• Apple also gives Twentyfold an identifier for your Apple Account, so each sign-in reaches the same Twentyfold account.
• Twentyfold never sees your Apple password.

Email and password

• Supabase stores your password only as a salted hash, so nobody, including the developer, can read it.
• Supabase emails you a link to confirm the address is yours, and a link to choose a new password if you ask for one. Twentyfold sends no other email.

02What’s stored on the server

Twentyfold keeps your account and your habits with Supabase, a hosted database and sign-in service.

Your account

• Your email address (or relay address).
• If you sign in with Apple, your Apple identity: the Apple user identifier and the details Apple sends with a sign-in, such as whether the address is a relay address.
• If you sign in with email, the hash of your password, when you confirmed the address, and a note that the login was made in Twentyfold (see section 11).
• Records Supabase’s sign-in system keeps as part of running sessions, such as when you signed in and from which IP address.
• Which looks you’ve borrowed and when. A look can be borrowed free for 4 days, once. They’re deleted with your account.
• Which looks you’ve unlocked for buying and when. The harder looks unlock as you keep your habits going; the app works this out on your iPhone from your habits and check-ins, and saves each unlock so it’s never taken back. They’re deleted with your account.

Your habits

• Habits: the name you give each habit; its kind (checked in by hand, Screen Time, steps, distance, workout or weigh-in); the days of the week it’s due, and the days it was due before if you changed them; its goal or limit, if it checks itself in; your terms for it (how many days, and how consistent); when you started it; its place in your list; and when you ended it or archived it as kept for life.
• Check-ins: each day you kept a habit, the time on your iPhone when it was checked in, when the server received it, and a small reward the Tree tab uses. Check-ins are never deleted: changing a day later is saved as a change on top of it (see Changing a day in section 5), and an ended habit keeps its check-ins.
• Shields: each one you use: the missed day it covers, and when you used it.
• Screen Time habits: the limit you set (daily, weekly or by weekday, and earlier limits if you changed it), and whether it counts everything except the apps you set aside or only the apps you choose. Section 3 explains what isn’t uploaded.
• Apple Health habits: the goal you set for steps, distance or workout minutes. A weigh-in habit has no goal: it counts a day when you logged a weight.
• Tree tab: a random number that shapes the picture drawn there, and the day it started.

Friends, if you set them up

• Profile: the name (up to 30 characters), colour and @handle you choose for other people to see, and whether people can find you in search. No photo.
• Settings: your time zone, updated when your iPhone’s changes (so days, leagues and quiet hours follow your clock), which notifications you want, your quiet hours, your quick messages, and when you accepted the community rules, which includes confirming you’re 13 or older.
• Settled days: the last day your iPhone finished checking your Apple Health and Screen Time habits, so leagues and watchers know when a day is settled.
• Friends, requests and blocks: who you’re friends with and whom you’ve muted, friend requests you sent or received, and who you’ve blocked.
• Leagues: the leagues you’re in or were invited to, who invited you, when you joined, left or declined, which of your habits count in each and from when to when, and the result of each week you had something due: your rank, days kept and due, perfect days and laurel.
• Watchers: who watches which of your habits, and whose habits you watch.
• Messages and notices: each message, respect, watcher alert, friend request, league invite and weekly result sent to or by you: who sent it, the habit or league it’s about, when, whether it was delivered, and for a message, the text you typed (up to 140 characters).
• Summary for the Tree tab: what friends see there (see section 4), worked out on the server from all your habits, check-ins and shields.
• Invite links: a fingerprint (hash) of each friend or league link, who made it, for which league, when it was made, when it expires, how many times it was used and whether it was revoked. The link itself isn’t stored.
• Reports: reports you make, and reports made about you (see section 7).
• Push tokens: the address Apple and Expo use to deliver notifications to your iPhone, and an identifier for the app installation it belongs to, so a new token replaces the old one.
• Limits: the times of recent searches, invites, reports and similar actions, to stop abuse.

Deletion bookkeeping

• Reset marker: your user ID and the time your Twentyfold data was deleted, so your other devices know to throw away their old copies. It stays while your login exists (see section 11).
• Deletion requests: your user ID, what you asked to delete, when, and a short error note if an automatic step failed. Only created when a deletion has to be finished by hand.
• Deletion attempts: your user ID and the time, each time you open Delete account in the app or confirm a deletion, used only to limit how often account deletion can be used. Attempts more than a day old are cleared the next time anyone uses account deletion, and all of yours go when your login is deleted.
• The deletion function logs the outcome of each deletion (for example, whether it finished and whether Apple disconnected Twentyfold) without your user ID.

03Apple Health and Screen Time

These habits check themselves in. Twentyfold never sends the readings they’re judged on anywhere.

Apple Health

• If you add a steps, distance, workout or weigh-in habit, Twentyfold asks to read your step count, walking and running distance, workouts and weight from Apple Health. It never writes anything to Apple Health.
• It reads the last five weeks on your iPhone, keeps the readings in memory only, and never saves or sends them. Any weight trend on the habit page is worked out on your iPhone.
• When a day’s reading reaches your goal, the app checks the habit in. What’s uploaded is that check-in, as section 2 describes it, the goal you set and, if you use Friends, the last day your iPhone finished checking. The readings never are.
• Friends and league mates see only whether a Health habit you share was kept or missed, and missed days in your Tree tab picture (see section 4). They never see the readings.
• The readings are never used for advertising or shared with anyone. You can turn off Twentyfold’s access to Apple Health at any time in iOS Settings or the Health app.

Screen Time

• If you add a Screen Time habit, Twentyfold asks for Apple’s Screen Time access for your own use. iOS then runs a small Twentyfold extension that notes your total minutes each day and, for habits that set apps aside or count only some, the minutes in those apps. It keeps the last 21 days on your iPhone for the app to read.
• The apps you set aside, or choose for a habit, are saved on your iPhone as tokens from iOS that Twentyfold can’t turn back into names. It only knows how many apps, categories and websites you picked.
• Your top apps and pickups on the habit page are worked out by a separate Twentyfold extension that iOS keeps apart from the app. It shows them on screen but never saves or sends them, and the app itself can’t read them.
• When a day ends under your limit, the app checks the habit in. What’s uploaded is that check-in and the habit’s settings, as section 2 describes them, and, if you use Friends, the last day your iPhone finished checking: never your minutes, your pickups or which apps you used.
• Friends and league mates see only whether a Screen Time habit you share was kept (under your limit) or missed (over it), and missed days in your Tree tab picture: never your minutes, which apps you used or your limit.
• The minutes and app choices the extension keeps stay on your iPhone, even after you sign out or delete your account, until you delete the app. Like other app data, they can be part of your iPhone’s own backups, but Twentyfold never sends them anywhere. The extension stops noting minutes once Twentyfold sees you have no Screen Time habits left, when you delete your account, or when you turn off Twentyfold’s Screen Time access in iOS Settings. Signing out doesn’t stop it.

04Friends and what they see

Friends is optional. Nothing in this section applies until you set up a profile with a name and an @handle.

How people find you

• Search: anyone using Friends can search for an @handle. Search matches the start of a handle (at least three characters), shows up to ten people, and shows each one’s name, @handle and colour. You’re findable unless you switch off Let people find me by @handle in your profile. People you’ve blocked, or who blocked you, never find you.
• Friend requests: someone who finds you can send a request, which you accept or decline. They aren’t told if you decline. While a request is open, both of you can see each other’s name, @handle and colour.
• Invite links: a friend link works once and lasts a week. Anyone who opens it in Twentyfold sees your name, @handle and colour, and the first person to accept becomes your friend. League links show more and work differently (see section 5).
• There’s no list of people you might know, and Twentyfold never reads your contacts.

Every friend sees

• Your name, @handle and colour.
• On the Tree tab, a picture drawn from all of your habits, shared or not: how far along you are, how steadily you’ve kept them, how many days went missed without a shield, and whether you’re slipping. It shows no habit names.
• The names of habits you let them watch (see section 6), and the habits you count in any league you share (see section 5).

Never shown to friends or league mates

• Your email address and how you sign in. Your time zone isn’t shown either, though friends and league mates can tell when your day turns over.
• Habits you don’t count in a league with them or let them watch, except as part of the Tree tab picture.
• Your Health readings, your Screen Time minutes, pickups and apps, and the goals and limits you set.
• The times you checked in, and the rewards the Tree tab uses.
• Your list of friends, who you’ve blocked or muted, and what you’ve reported.

Muting, unfriending and blocking

• Mute a friend to stop their messages and respect arriving as notifications. What they send is still stored for 30 days, like any message.
• Unfriend someone to end the friendship and any watching between you. Leagues you share carry on.
• Block someone to end the friendship and any watching both ways, take one of you out of each league you share (you, unless you’ve been in that league longest), and drop notifications between you that haven’t been delivered yet. They can’t find you, message you, invite you or join a league you’re in. They aren’t told. Unblocking doesn’t make you friends again.

05Leagues

A league is a weekly board, Monday to Sunday, for up to 20 people. Each member chooses which of their habits count there, and one habit can count in several leagues. Members are ranked by the share of their due days they kept.

Who sees what

• Everyone in a league sees each member’s name, @handle and colour, who invited whom, and for this week: each member’s rank, percentage, days kept and due, perfect days, and a mark for each day.
• They also see the name and kind (for example steps or Screen Time) of each habit a member counts there, with its own mark for each day. For a Health or Screen Time habit, the mark shows whether the day was kept or missed, never the readings, minutes or limit behind it.
• If you stop counting a habit, its name is hidden at once, but its kind and its marks so far this week stay on the board until the week ends.
• Last week’s results and each member’s laurels show too, and everyone in a league can read its earlier weekly results, including those of members who have left.
• Someone invited who hasn’t joined sees only the league’s name and its members: each one’s name, @handle and colour, how many there are, and who invited whom. Until they join, they see none of the habits counted there, their kinds or marks, anyone’s days kept or due, percentages, ranks, weekly results or laurels.
• Everyone in or invited to a league can also see who has left it or declined, and when.

Joining and leaving

• Invitations: any member can invite their own friends, without asking the other members or the person invited. Someone invited sees who’s in the league before deciding, but not the board, and an invitation nobody answers is declined after 7 days. If a friend invites you to a league, everyone in it and everyone else invited sees your name, @handle and colour until you answer, and can see afterwards that you declined.
• League links: a league link works five times and lasts a week. Anyone who opens it in Twentyfold, even if it was forwarded to them, sees the league’s name, how many people are in it, and the name, @handle and colour of whoever made the link. Anyone who has it can join, and joining also makes them friends with whoever made the link. A link stops working once its maker leaves the league, and its maker can revoke it at any time.
• Names: any member can rename the league. League names go through the same word filter as other names.
• Counting: a check-in made by hand counts in a league only if it reaches the server by noon the next day. A habit that checks itself in counts once your iPhone has settled the day.
• Changing a day: if you change a day after noon the next day, you write a reason of 15 to 280 characters. Everyone in the leagues that habit is in sees the change, the day it’s for and your reason in League updates on the Friends tab, and anyone who sees it can report it from there. The change and its reason are kept until you delete your Twentyfold data or account; League updates shows the last 30 days.
• Weekly results: after each week, the final rank, days kept and due, perfect days and laurel are saved for each member who had something due that week.
• Leaving: your habits stop counting and you leave the board. The record that you were a member, which habits counted and when, and your weekly results stay until you delete your account, and everyone in the league can go on seeing your past weekly results.

06Messages, watchers and notifications

Messages and respect

• Every message between people is sent by hand: a message you type, up to 140 characters, or a one-tap respect.
• You can message friends and people active in a league with you: up to 3 messages to one person and 20 messages and respect in all each day, and one respect per person a day. A word filter checks every message.
• The text is stored with the message for 30 days, then deleted. In the app, the person you sent it to sees only your latest message from the last few days.
• Quick messages: up to six, each up to 60 characters, saved with your settings so they appear as one-tap choices when you write. Nobody else sees them unless you send one.
• If someone has muted you or switched off message notifications, your message is still stored for 30 days but doesn’t reach them as a notification.

Watchers

• You choose which friends watch a habit, up to ten. A watcher sees the habit’s name and kind.
• When you miss a watched habit, each watcher gets one notification naming you, the habit and the day. For a habit you check in by hand, it comes at noon the next day unless you’ve checked in by then. For a habit that checks itself in, it comes once your iPhone has settled the day. A shield stops it. Each watcher gets at most three of these as notifications a day.
• A watcher can mute your alerts or stop watching. You aren’t shown whether a watcher has muted them. You can remove a watcher at any time, and ending the habit, unfriending or blocking removes watching.

Notifications

• Twentyfold sends notifications for messages, respect, watcher alerts, friend requests, league invites and each week’s final standings. You can switch them off by type in Account › Notifications (friend requests and league invites share a switch), and set quiet hours (10 PM to 8 AM to start). Notifications that come in during quiet hours wait until they end.
• A notification shows names, habit and league names, and message text, on your lock screen too. It passes through Expo and Apple on its way to your iPhone (see section 10).
• The daily reminder, if you switch it on, is made on your iPhone and never sent anywhere. It names the habits still open that day.

07Reports and moderation

• You can report someone from their profile, a message they sent, their row in a league, a League update, a search result or an invite they sent. You pick a reason (their name, a habit name, harassment or something else) and can block them at the same time. You can make up to ten reports a day.
• A report stores who made it, who it’s about, the reason, the habit or league it concerns, and a copy of up to 300 characters: their name, that habit or league name, and, if you report a message they sent you, that message, or, if you report a League update, the reason they wrote. A report made anywhere else carries no message or reason text.
• Only the developer can read reports; they can’t be read from the app. The developer’s moderator account gets a notification when a report comes in, and reports are reviewed in the database’s dashboard.
• The person you report isn’t told.
• After a review, the developer can remove a name, suspend someone from Friends (they can no longer search, message, join leagues or invite anyone, and they disappear from search and invite links), or delete their account. The community rules say more.
• Reports have no set end date. When you delete your Twentyfold data or account, every report about you is deleted, copy and all. So is every report you made, unless a moderator hasn’t dealt with it yet: then it’s kept, without your name or account on it, until it’s resolved. Until a report is deleted, its copy can outlast the 30 days a message is kept.

08What’s stored on your iPhone

• A copy of your habits, check-ins, shields and limits, and the last 21 days of Screen Time minutes, so the app opens instantly and works offline.
• Changes you made that haven’t reached the server yet.
• A few small markers, such as the last day you opened the app and the last account reset it saw, so it knows what to show you.
• If you sign in with Apple, your Apple user identifier, so Twentyfold can tell if you stop using Sign in with Apple for it, and sign out.
• Your sign-in session (a token issued by Supabase), so you stay signed in.
• An identifier for this installation, made by the app, so a new push token replaces the old one.
• Files the Tree tab draws from, for you and your friends. They’re made from random numbers and hold no names.
• Screen Time minutes and app choices, as section 3 describes. Apple Health readings are never saved.
• If you switch on the daily reminder: its time, and the reminders iOS will show, which name your habits. They’re made on your iPhone and never sent anywhere.
• If you use Friends: a copy of what your friends and leagues share with you, including the last few days of messages; your push token; and an invite link you opened before signing in.
• The look you use, the looks you’ve taken while they were free, and while you’re signed in, the looks you’ve borrowed and unlocked.

Like other app data, what Twentyfold keeps on your iPhone can be part of your iPhone’s own backups.

Signing out (Sign out in your account) removes your session, the copy of your data, any unsynced changes, your reminders and delivered notifications from that iPhone, and asks the server to forget its push token. If the server can’t be told at the time (for example, you’re offline), it may keep sending notifications to that iPhone until the token stops working or another account that uses Friends and allows notifications signs in there. Signing out leaves the Screen Time minutes and app choices, the Apple user identifier, the installation identifier, the Tree tab’s files and any invite link you haven’t used, and the Screen Time extension keeps noting minutes.

Deleting your account on an iPhone also clears every account’s copy, the Apple user identifier and the Tree tab’s files from it, and stops the Screen Time extension. Deleting the app removes everything Twentyfold stores on it, except the installation ID Expo’s notification library keeps in the iPhone’s keychain (see section 10), which iOS may keep after the app is deleted.

09How your data is used

Only to run Twentyfold: to sign you in, sync your habits between the server and your devices, rank leagues, send watcher alerts, show friends and league mates what this policy describes, deliver the notifications you’ve allowed, handle reports, and carry out deletions. The one exception is safety: when someone’s safety is at serious risk, for example after a serious threat, what’s needed may be passed to the authorities.

• No advertising, no analytics, no profiling, and no tracking across other companies’ apps or websites.
• Your data isn’t sold, and isn’t shared with anyone for their own purposes.
• Besides the services that run the app, the only third-party library that sends anything is Sentry’s crash reporter (see section 10). There are no analytics or advertising libraries.
• Your email address isn’t used for marketing.

10Who else handles your data

These service providers each handle data only to provide their part of the app:

• Supabase hosts the database and sign-in system, and runs the server functions that send notifications, settle leagues, prepare what friends see on the Tree tab, and delete accounts. Like any web service, it sees your device’s IP address when the app connects and keeps standard request logs. Your data may be stored and processed outside your country.
• Expo (650 Industries) relays notifications to Apple’s push service. Each time the app opens while you’re set up in Friends with notifications allowed, and whenever iOS gives your iPhone a new Apple push address, the app gives Expo that address, the app’s identifiers and an installation ID that Expo’s library keeps in the iPhone’s keychain, and gets back a push token. For each notification, Expo receives that token, the title and text (which can include names, habit and league names, and message text), the notification’s number and type, and a link to the right screen in the app, which includes the sender’s account ID and the habit’s or league’s ID. Expo passes the same title, text, number, type and link to Apple to deliver it.
• Apple provides Sign in with Apple and delivers notifications (Apple Push Notification service), and Apple Health and Screen Time run on your iPhone. When you delete your account, Apple asks you to confirm and gives the app a one-time code. Where the server is set up for it, Twentyfold sends that code to Apple so Apple can disconnect Twentyfold from your Apple Account; otherwise the app shows you how to do it in Settings. Twentyfold doesn’t keep Apple’s tokens. Looks you buy are sold by Apple through the App Store: Apple handles the payment, and Twentyfold never sees your payment details. The app asks the App Store on your iPhone which looks your Apple Account owns, and doesn’t send that to Twentyfold’s server. Apple’s handling of your data is covered by Apple’s privacy policy.
• Sentry (Functional Software) receives a report when the app crashes, freezes, runs slowly or hits an unexpected error: the error and where in the code it happened, the app version, the iPhone model and iOS version, and it can include details of the iPhone’s state such as free memory and storage, battery, language and time zone. It also gets a short note when the server refuses a change, naming only the kind of change and the error code. Twentyfold attaches no account or email to reports, and IDs are stripped from the app’s own error text. Like any web service, Sentry sees the IP address each report is sent from. Reports from Sentry’s built-in iOS crash reporter (crashes and freezes) carry two IDs that aren’t linked to your account: a random one Sentry makes for this installation, and a fingerprint (hash) of the ID iOS gives this developer’s apps on your iPhone, combined with the iPhone’s model and the app’s identifier. That fingerprint stays the same if you reinstall Twentyfold while another app from the same developer is on your iPhone. Twentyfold removes it from the app’s other reports. Twentyfold attaches no screenshots and no record of what you did in the app. Reports are used only to fix bugs.
• Email: Supabase’s sign-in system sends the emails that confirm your address or let you choose a new password, through the email service it’s set up to use.
• The website: invite links point to the developer’s website at grantpankratz.com. Twentyfold’s own pages there (this policy, the community rules and its invite pages) load no third-party scripts or analytics. The part of an invite link that identifies it comes after the # sign, which browsers don’t send to the website’s server. Like any website, its host may keep standard visit logs.

If you’ve chosen in iOS settings to share analytics with app developers, Apple may give the developer crash reports and diagnostics under Apple’s own terms. Twentyfold adds nothing to them.

Data is disclosed to anyone else only if the law requires it, or to the authorities when someone’s safety is at serious risk (see section 9).

11If your login is shared with other apps

Twentyfold’s Supabase project, including its sign-in system, is shared with other apps by the same developer. They offer the same ways to sign in. Your Twentyfold login is separate from them unless you use it there too.

If you sign in to Twentyfold with the email and password of a login you already have for one of those apps, or Apple shares the same verified email address as that login (not a Hide My Email relay address), it’s the same login and the apps share it. An email login you create in Twentyfold is marked as made here.

Because the sign-in system is shared, every new login, a Twentyfold one included, also gets a basic profile in a table that belongs to one of the other apps: the login’s user ID, email address and name (Twentyfold never asks for or sets a name). That app’s access rules don’t let other users read it. Twentyfold never writes to it. The basic profile is removed only when the login itself is deleted; section 12 says when that happens.

Twentyfold never changes the data the other apps keep. Each time you open Delete account or confirm a deletion, the server checks which of those apps hold data linked to your login, only so it knows what it can safely delete. Your login counts as shared only when another app by the same developer holds data linked to your login: records or files that app keeps for it, or anything in its basic profile besides the ID, email address and name that has been set or changed. How you signed in doesn’t matter. Section 12 explains the choices you get.

12Deleting your account

In the app, tap the account button at the top of Home, Progress or Friends, then tap Delete account. You’ll need an internet connection. Twentyfold checks whether another app by the same developer holds data linked to your login, names any that do, and shows the matching options.

If no other app holds data linked to the login

Your account and all its data are deleted immediately, and so is the login itself, which removes its basic profile (see section 11). In the rare case the server can’t remove the login automatically, your Twentyfold data is still deleted immediately and the login itself, with its basic profile, is removed within 30 days.

If another of the developer’s apps holds data linked to the login

• Remove my Twentyfold data deletes your habits, check-ins and everything to do with friends immediately. Your login, its basic profile and your data in those apps stay as they are, along with the reset marker described in section 2.
• Delete my account everywhere deletes your Twentyfold data immediately, and your login, with its basic profile and its data in the other apps, within 30 days.

Either way

• If you sign in with Apple, Apple asks you to confirm, and Twentyfold uses that to ask Apple to disconnect it from your Apple Account, which revokes its Sign in with Apple access. If you skip that step, or the disconnect can’t be done, the app shows how to finish it in Settings.
• Everything tied to you goes with the rest: your profile, the Tree tab summary, friendships, requests, blocks, watchers, messages you sent or received, invite links, push tokens, and your league memberships and weekly results. Notifications already delivered stay on other people’s phones.
• Every report about you is deleted, with its copy of names and any message. So is every report you made, unless a moderator hasn’t dealt with it yet: then it’s kept, without your name or account on it, until it’s resolved.
• Leagues carry on for the others. A league you were the last member of ends, and its name is deleted once no current or past member still has history in it. Invitations nobody accepted don’t keep it.
• Twentyfold’s copy of your data on that iPhone is erased and you’re signed out. If you used Twentyfold on another device, sign out there or delete the app to clear its copy.

Other ways

• Stop using Sign in with Apple: open Settings, tap your name, then Sign in with Apple (under Sign-In & Security on some versions), choose Twentyfold and remove it. Twentyfold signs out on that iPhone but keeps its copy of your data there until you sign in again, another account signs in, or you delete the app. This doesn’t delete your data; use Delete account or email for that.
• By email: write to grant.h.pankratz@gmail.com with the email address your account uses. Requests are completed within 30 days.

13How long data is kept

• Until you delete your Twentyfold data or your account: your habits (ended ones too), check-ins, shields, limits and Tree tab data; the days you changed and your reasons; the looks you’ve borrowed and unlocked; your profile and settings; your league memberships, which habits counted when, and your weekly results.
• Until you remove them, or delete your account: friendships, blocks and watchers.
• 30 days: messages, respect, watcher alerts and the other notices in section 2, and friend requests nobody answered.
• 7 days: invite links work for 7 days, and their records are deleted 7 days after they expire or are revoked, or once a used-up link is a week old. A league invitation nobody answers is declined after 7 days.
• 2 days: the records of recent actions kept to stop abuse.
• A league’s name stays while anyone, current member or past, still has history in it. Invitations nobody accepted don’t keep it.
• Reports have no set end date. Each one is deleted as soon as either person, the one who reported or the one reported, deletes their Twentyfold data or account, except that if the one who reported deletes theirs before a moderator has dealt with it, it’s kept, without their name or account on it, until it’s resolved.
• Push tokens are deleted when you sign out and the server can be told, when the iPhone stops accepting notifications, when another account that uses Friends and allows notifications signs in on it, or with your account.
• Deletion bookkeeping that holds your user ID is removed when your login is deleted. If your login is shared and stays, the reset marker stays with it. Records of deletion attempts more than a day old are also cleared the next time anyone uses account deletion.
• Logs: Twentyfold’s scheduled jobs keep their run logs for 7 days. Supabase’s own logs, Sentry’s reports and the website host’s logs are kept as those services set.
• Deleted data can remain in Supabase’s backups for a while before those backups are replaced.

14Security

• Everything between the app and the server travels over HTTPS, so it’s encrypted in transit.
• Every Twentyfold table has per-user access rules (row-level security): a signed-in account can read only its own data, plus what this policy says other people can see.
• Everything to do with friends, leagues and messages is changed only by server functions that check who’s asking, and names and messages other people will see pass a word filter first.
• Invite links are stored only as a fingerprint, and reports can’t be read from the app at all.
• Twentyfold’s own server functions hide user IDs, email addresses and push tokens in what they log.
• Account deletion runs on the server and only ever acts on the account that asks for it.

No system is perfectly secure, but these rules keep each person’s data separate.

15Children

Twentyfold isn’t directed at children under 13, and the developer doesn’t knowingly collect data from them. Friends asks you to confirm you’re 13 or older before you set up a profile; tracking habits on your own doesn’t ask your age, except where the law requires it. If you believe a child under 13 has an account, email the address below and it will be deleted.

In places where the law requires it, Twentyfold asks Apple for your age range (for example, under 13, 13 to 17, or 18 and older). Apple shows its own sheet and doesn’t share your birthday. Twentyfold keeps the answer on your iPhone and uses it only to follow that law. People under 13 can’t use Twentyfold.

16Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, or to object to how it’s used. You can delete your account in the app at any time (see section 12). For anything else, email the address below and include the email address your account uses so it can be found. If you chose Hide My Email, that’s the relay address Apple created for Twentyfold. You can also complain to your local data protection authority.

17Changes to this policy

When this policy changes, the date at the top changes too, and big changes are noted on this page.

18Contact

Twentyfold is made by Grant Pankratz. For privacy questions or requests, email grant.h.pankratz@gmail.com.