Privacy policy
Draft, 2 November 2026. This policy is waiting for the owner's review. It has not been reviewed by a lawyer.
This policy covers the Two Tails app for iPhone and iPad, its sync server, and this website. "We" means the Two Tails developer. In short: we store what your household puts into the app so it can sync, everyone in your household can see it, we do not track you, and you can delete your account in the app.
What we store
Your account
- A random account id. It is not your name or email address.
- If you sign in with email: your email address. Your password is checked by Amazon Cognito; we never see it.
- If you sign in with Apple or Google: the account identifier that Apple or Google gives the app. We do not store your email address from Apple or Google.
- If you sign in with Apple: a token from Apple that we keep only so we can revoke the app's access to your Apple ID when you delete your account.
- Sign-in tokens for your session, kept in your device's Keychain.
Your household
- The household's name, its members' account ids, when each joined or left, and invite codes. Invite codes expire after 7 days.
- Checklists and items: names, titles, notes, links, due dates, repeat schedules, and when items were completed or skipped.
- Fitness: exercise names, and the workouts and sets you log (who logged the workout, start and end times, notes, reps, weight, duration, distance).
- For a class you mark attended from Google Calendar: a workout with the event's start and end times, its title (in the workout notes), and its Google event id. See Google Calendar.
- A history of changes, so every device in the household can catch up.
On your device
The app keeps a full copy of your household's lists and workouts on your phone so it works offline, plus your choice of weight unit. If you connect Google Calendar, it also keeps a copy of the chosen calendar's events and your Google tokens on that device.
What we do not collect
No location, contacts, photos, advertising identifier, or browsing history. The app does not read Apple Health today. If a future version adds health data, this policy will say so first.
Who can see your data
Everything in a household is shared with every member of that household. The app shows this before you join:
Everyone in this household can see all fitness and health data that any member brings into Two Tails.
That includes the workouts and sets you log. There are no private records inside a household. Only invite people you are comfortable sharing this with.
People outside your household cannot see your data. Our server checks membership on every request and refuses anyone who is not a member.
If you leave a household or another member removes you, your access ends at once and the app deletes that household's data from your phone. The lists and items you added stay with the household; we do not store who wrote them. Your workouts stay too. Other members see them labeled "Member" and a short code from your account id, not your name.
Google Calendar
Connecting Google Calendar is optional. Each member connects their own Google account on their own device and picks one calendar. Two Tails then asks Google for two permissions:
calendar.calendarlist.readonly, to list your calendars so you can pick one.calendar.events, to show, add, change, and delete events. The app only uses it on the one calendar you picked.
The app talks to Google directly from your device. Your Google tokens stay in that device's Keychain, set to stay on that device only, and the events are cached on that device. Our server never receives your Google tokens or your calendar.
The one exception: when you mark a class attended, the app saves it as a workout. That workout holds the event's start and end times, its title, and its Google event id, and like every workout it syncs to our server and every member of your household can see it.
To stop, tap Disconnect in the app's Calendar tab, which revokes the app's access and deletes the tokens and cached events from the device, or remove Two Tails from your Google Account's third-party access settings. Disconnect Google Calendar before you delete your Two Tails account: deleting the account removes your class workouts from our server, but the Google connection lives on your device.
Two Tails' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How we use it
Only to run the app: to sign you in, to sync your household's data between devices, and to show and edit the calendar you connected. We do not use it for advertising, profiling, or training AI models, and we do not sell or share it with anyone for their own use.
No tracking
The app contains no ads, analytics, or third-party tracking code, and does not track you across other apps or websites. This website sets no cookies, loads nothing from other sites, and keeps no visitor logs.
Companies that process data for us
| Company | What they do |
|---|---|
| Amazon Web Services (AWS) | Runs our server and database in the United States, manages accounts and passwords (Amazon Cognito), sends sign-in verification emails, and hosts this website. |
| Apple | Sign in with Apple, and distributing the app through the App Store. Apple's own privacy policy applies to your Apple account. |
| Sign in with Google and Google Calendar, if you choose them. Google's own privacy policy applies to your Google account. |
Deleting your account
You can delete your account in the app at any time. Deletion is complete and cannot be undone. When you delete your account we:
- Revoke the app's access to your Apple ID, if you signed in with Apple.
- Delete your workouts and sets from every household you are in or were in, and remove you from those households.
- Delete your sign-in records and your Amazon Cognito account, including your email address.
Shared checklists and items you added stay with the household, because they belong to everyone in it. We do not store who wrote them. If you signed in with Google, the app disconnects Google sign-in on your device; our server holds no Google token to revoke. Google Calendar is separate: see Google Calendar. A session that was already open can last up to 60 minutes, but it can no longer reach any household data.
When the last member leaves a household, the household and all its records are deleted.
How long we keep data
- Account and household data: while your account exists, or until you delete it as above.
- Database backups: deleted data can stay in point-in-time backups for up to 35 days, then it is gone.
- Server error logs: kept for 30 days. They may record that a request failed.
- Records used to stop duplicate uploads: 30 days.
- Invite codes: deleted a day after they expire.
Security
All traffic between the app and our server is encrypted with HTTPS. Data is encrypted at rest in AWS. Sign-in tokens are kept in your device's Keychain, set to stay on that device only.
Changes to this policy
If we change what we collect or who can see it, we will update this page and its date before the change takes effect.
Questions
Email support-address-not-set@example.invalid. See also the support page.