Draft: this wording is still being reviewed, and a few business details are yet to be filled in.

Privacy Policy

Last updated 2026-09-24

This explains what Twilit collects, why, who it’s shared with, how long it’s kept, and what you can do about it. [COMPANY LEGAL NAME] is responsible for your data. Contact: privacy@jointwilit.app.

What we collect

• Account: username, email, password (handled by our sign-in provider, never stored in plain text), birth date and gender.
• Profile: photos, videos, prompts and your answers to the app’s questions. The “Looking for” and bedroom answers are private: nobody else ever sees them. With a plan that includes it, two people see a general fit level, never each other’s answers.
• Approximate location, if you allow it: rounded to about 1 km. It is only used to work out distances, and nobody ever sees it.
• Activity: the people you Keep or Fade, matches, messages, photos you send in chat, glimpses, reports and blocks.
• Verification selfies: compared with your main photo, then deleted.
• Device and app: your notification token and settings, and basic technical logs.
• Pronouns, if you add them: shown on your profile.
• Open book, if you fill it in: the topics you’re happy to be asked about. Only people you’ve matched with see it, and it never says anything about you beyond which topics are welcome.
• If you ask us to remove an image (even without an account): your name, email, typed signature and what you tell us about it.
• Signals for spotting bots and fake accounts: the timing of your actions, where a hold starts on the screen and how far your finger moves, and how long a message took to type. For messages, we keep only a fingerprint (a hash), never the text.

How we use it

• To run the app: showing your profile, suggesting people, delivering messages and photos, and notifying you.
• To keep people safe: automated checks on photos, videos and some messages for nudity, violence, hate and abuse; spotting bots and scams; and handling reports.
• To provide paid features, and to follow the law.

We do not sell your personal information. We do not use it for targeted advertising. [UPDATE BEFORE LAUNCHING ADS: describe the ad provider and any consent choices.]

Sensitive information

Dating information can reveal your sex life or sexual orientation. For example, who you want to see, and your private answers. We use it only to provide the app, never for advertising, and we don’t share it except as described here.

Who we share it with

• Other members: your public profile. They see your distance only as a number of miles, and an “active” label only if you both allow it.
• Service providers that process data for us under contract: Amazon Web Services (hosting, storage, and automated image and text checks), Expo (delivering notifications), and Apple and Google (app stores, payments and notifications).
• Law enforcement and authorities, when valid legal process requires it or someone is in danger. We report apparent child sexual abuse material to the National Center for Missing & Exploited Children, as US law requires.
• A buyer or successor, if the business is sold, under this policy.

How long we keep it

• Your account and profile: until you delete your account. Deleting it removes your profile, photos, videos, matches and conversations.
• Chat photos: normal photos for 30 days. Private photos are deleted once they’ve been opened, or after 2 days if they aren’t. A locked copy of each private or blurred photo, and of any photo blocked by our checks, is kept for 7 days so a report can still be reviewed. Only our safety team can open it.
• Glimpse photos: deleted when the date ends, and within a day at most.
• Reported content and moderation records: until the report is resolved, and longer when the law requires (for example, when a report is made to authorities).
• Requests to remove an intimate image: the request and what we did about it are kept as a record. Removed images are locked away where only our safety team can reach them, and deleted after 90 days, or after a year when we’ve reported them to the National Center for Missing & Exploited Children, as the law requires.
• Technical logs: 7 days. Daily usage counters: 90 days.

Your choices and rights

• See and download your data: Edit profile, then Download my data.
• Correct it: edit your profile at any time.
• Delete it: Edit profile, then Delete account.
• Turn off notifications, location or private photos, or hide when you’re active, in settings.

Depending on where you live, you may have further rights, such as knowing what we hold or appealing a decision. Contact privacy@jointwilit.app. We won’t treat you differently for using them.

Age

Twilit is for adults only. We delete accounts we find belong to anyone under 18.

Security and changes

We use encryption in transit, access controls and limited retention to protect your data. No system is perfectly secure.

If we change this policy in a meaningful way, the app will tell you before the change applies.