Privacy

Draft, second version. A lawyer has not reviewed this yet. The second version says what changed: owners can read their twin’s chats, visitors can chat as themselves, a twin can keep a note about a visitor who asks it to, people can connect their twins, and a business can have a twin.

This page says what itwin.co keeps, what it does with it, and how you get it back or make it go away. It is written to be read, not skimmed.

What we store about an owner

When you make a twin, we keep:

• Your email address or your phone number, so you can sign in and so we can reach you about your account. If you sign in with Google or Apple, we receive your email address and your name from them, and nothing else. With a phone number we also keep a one-way hash of it, used only to match contacts you choose to import.
• Your first and last name.
• Your birth year, to check you are 18 or over.
• Your country.
• Your answers to the questions.
• Your About sections, your links and your photos, if you add any.
• Your settings, such as your username, your twin’s mood, its light, whether anonymous visitors may chat, and whether your twin may remember visitors.
• For a business twin: the business name, its kind, its logo, and the items you list.

That is the list. We don’t collect anything else about you in the background.

What a visitor leaves

Anyone can chat with a twin. Before the first message, the page says who can read the chat. Here is what a chat leaves behind:

• The messages and the twin’s answers are kept for 30 days from the last message, then deleted. We do not store the visitor’s IP address with them.
• The back-and-forth of one conversation is kept for 2 hours, so replies make sense in context. After that it is gone.
• Email addresses, phone numbers and social handles are removed from a message before the text reaches the AI and before it is stored.
• A short signed cookie keeps the chat session together. It identifies the session, not the person.
• Before an anonymous chat starts, a human check runs through a service under contract with us, which processes what it needs for that check under its own privacy terms. Signed-in visitors skip the check.

Who can read a chat

The owner of a twin can read the conversations their twin had, for the same 30 days, from their own page. The page tells every visitor this before they write anything.

• An anonymous visitor appears to the owner as “Visitor”. No name, no account, no address.
• A signed-in visitor chats under their name: the owner sees it, and a link to their twin if they have one. Before the first message the page says so, and the visitor can switch that conversation to anonymous. Anonymous chats stay anonymous.
• An owner can switch anonymous chats off for their twin. Then only signed-in visitors can chat, and the page says so.
• The owner can delete any conversation, or all of them, before the 30 days are up.
• Nobody else reads chats. We look at a conversation only when it is reported to us, when a fault cannot be fixed any other way, or when the law requires it.

Memory

A twin can keep one short note about a visitor, but only when that visitor asked it to on that twin, after their first chat. The note is written by the AI from what the visitor said about themselves, what they asked and what was left open. It is never a claim about the owner or about anyone else, and it never contains contact details.

• The visitor reads the note, word for word, on their own twin page, and deletes it there with one action. From then on the twin starts fresh.
• The owner can read a note their twin keeps and delete it.
• A note is deleted when the visitor asks, when the visitor or the owner ends a connection or blocks the other, when either account is deleted, and after twelve months without a visit.
• The note goes to the AI as part of the conversation and nowhere else. It is never used to train anything.
• itwin.co does not guess. Nothing is written into a note that the visitor did not say.

Connections

Two people can connect their twins. Both must agree. We keep who is connected to whom and when. Between connected people the twin’s memory is on by default; the screen that asks you to accept says so, and either side can turn it off for themselves. If you import contacts to find people you know, the numbers are hashed on your device and only the hashes reach us; we keep no address book.

Business twins

A business twin reads what its owner wrote: the ten answers, the About sections and the items listed. It can repeat prices, hours and contact details exactly as written. Visitors to a business twin are treated the same way as visitors to a person’s twin: the business owner can read the chats, anonymous visitors are anonymous, and memory needs the visitor’s choice.

The AI

Answers are generated by a third-party AI model provider under contract with us, whose servers are in the United States. To answer a question, the provider receives the twin’s page (the answers, the About sections, the items, and the settings that shape replies), the visitor’s scrubbed messages in this conversation, and, when the visitor chose memory, their note.

Your data is never used to train any model. Not by us, and not by the provider. The model reads the page to answer and does not keep it.

Cookies

We set two cookies:

• A sign-in session cookie, so you stay logged in.
• A chat session cookie, so a conversation with a twin holds together.

Nothing for ads. No tracking across other sites.

Export and delete

You can export everything we hold about you as a single file, any time, from your settings. The file includes the notes other twins keep about you.

You can also delete your account, any time, from the same place. Deleting removes your answers, your page, your photos, your connections, the notes your twin kept about visitors and the notes other twins kept about you. Conversations you had as yourself with other twins become anonymous. It is not a soft delete; it is gone.

Who runs this

[Operator and address to be set by counsel]

Contact

To report a twin or a message, write to hello@itwin.co.

For everything else, write to hello@itwin.co.