PRIVACY

Twine is operated by ELAQ Limited.

Last updated: 23 September 2026

THE SHORT VERSION

Twine keeps your answers on your phone. We do not have an account system and we do not ask for your email.

Once your two phones are paired, everything between them — chat, nudges, game turns and video — is end-to-end encrypted, and we cannot read any of it. Before you pair, long-distance games that use a room code are encrypted on the way to our relay but not end-to-end, so pair your phones if you want that guarantee.

WHAT STAYS ON YOUR DEVICE

Your names, avatars, anniversary and distance. Your streak, level, milestones and which prompts you have seen. Your time capsules. Your settings. All of it is stored locally and is deleted when you delete the app, or when you tap Erase All Data in Us → Settings.

SAME-ROOM PLAY

When you play on two phones in the same place, the phones talk to each other directly over your local network using Apple's MultipeerConnectivity, with encryption required. Nothing is sent to us, and it works with no internet connection at all.

PAIRING AND END-TO-END ENCRYPTION

Pairing happens once. Your two phones each make a key and exchange the public halves through our relay; from those, each phone works out the same secret key, which never leaves the phone and is never sent to us. Both phones then show four "safety emoji". If they match, nobody was able to sit between your phones during the exchange.

That key is kept in your phone's Keychain, marked so that it is never included in backups or moved to another device. A new phone pairs again.

From then on, chat, nudges, game invites, game turns and video frames are sealed with AES-256-GCM before they leave your phone and opened only on your partner's. Our relay passes the sealed bytes along and cannot open them.

CHAT

Your chat history is stored on your phone, encrypted by iOS whenever the phone is locked. If your partner is offline when you send something, our relay holds the sealed message — which it cannot read — until their phone connects, for at most 30 days, and then discards it. Unpairing deletes the key and the chat history from your phone.

WHAT OUR RELAY CAN SEE

End-to-end encryption hides what you say, not that you are talking. While it is forwarding messages, the relay necessarily handles a random room identifier, when each phone connects, and how large each sealed message is. It does not log this, and it has no way to connect a room to a name, an email or an Apple Account.

LONG-DISTANCE GAMES WITHOUT PAIRING

You can also play across a distance by sharing a six-character room code instead of pairing. Those games travel to our relay over an encrypted (TLS) connection, but the relay forwards the turns themselves unsealed, because there is no shared key to seal them with. They are held at most seven days if your partner is offline. For anything private, pair first.

Same-room mode never touches our servers.

SEEING EACH OTHER WHILE YOU PLAY

Long-distance play has an optional video window. It is off until you tap

"See them", and your camera is never switched on at any other time. A red

dot shows on the tile the whole time your camera is live.

Video is sent as small still frames through the same relay as your turns,

at roughly eight frames a second, and is end-to-end encrypted like

everything else between paired phones. Unlike messages, video frames are

never held by the relay — if your partner is not connected at that instant,

the frame is discarded immediately rather than stored. Nothing is recorded,

by us or by the app.

Twine does not carry audio. If you want to hear each other, stay on your

normal phone or video call; it keeps running while Twine is open.

You can revoke camera access at any time in iOS Settings, and Twine will

keep working without it.

PURCHASES

Twine+ is sold through Apple. Apple processes the payment and tells the app whether a subscription is active. We never see your payment details, and we do not receive your name or email from Apple.

ADVERTISING

The free tier shows promotions for Twine+ only. These are served by the app itself. There is no third-party advertising SDK in Twine, no advertising identifier is read, and no tracking-permission prompt is shown, because nothing about you is tracked across apps or websites.

ANALYTICS

Twine contains no analytics SDK. We do not collect usage statistics, crash reports with personal content, or device fingerprints.

CHILDREN

Twine is rated for users 17 and over and is not directed at children. The After Dark decks are additionally gated behind an explicit 18+ confirmation and are switched off by default.

YOUR RIGHTS

Because we hold no personal data tied to you, there is nothing for us to export or delete on request. You can erase everything Twine knows by deleting the app or using Erase All Data.

CHANGES

If this policy changes we will update it in the app and on our website, with the date above.

CONTACT

privacy@twineapp.club

ELAQ Limited