Privacy Policy
Last updated October 26, 2026
TwoNight helps couples plan evenings out. To do that we keep what you tell us about the two of you and the plans you make. We don't sell it, we don't show ads, and we don't track you across other sites.
Draft. This text hasn't been reviewed yet and may change before the beta opens.
This policy covers twonight.io and the TwoNight app, run by TwoNight (“TwoNight”, “we”, “us”). TwoNight is in an invite-only beta for people in the United States and Canada. If something here is unclear, email privacy@twonight.io.
What we collect
Your account
- Your first name, email address and password. Passwords are stored only as a secure hash.
- Your time zone, so plan times show correctly.
- Which invite you signed up with and who sent it, and the invites you send to friends.
- Sign-in records kept by our sign-in provider, such as when you signed in and from which IP address, to keep accounts secure.
Location and home area
- Device location, only if you allow it in your browser. We use it to search for places near you. Your browser remembers the last place you searched from in a cookie for 30 days. We don't save your device location to your account or keep a history of it.
- Home area, if you set one: the area name and map point you pick, how far you'll travel and how you get around. Choose a nearby area rather than your street address if you prefer.
You and your partner
- Your likes, dislikes, must-haves and never-agains, and your usual budget for a date.
- Your partner's name and preferences, if you add them. Your partner doesn't need an account, so please only add what they're happy for you to share.
- Where you are in setting up your account.
Plans and share links
- Your plans: their dates, stops, times, notes and travel modes.
- Share links you turn on. Anyone with a plan's link can see that itinerary until you turn the link off.
- When you use Get ideas, what you asked for (such as the time, budget and how far to go), the suggestions we showed and which one you picked. We use this to make suggestions better.
Places and activities you contribute
TwoNight's place and activity details are built by its members. When you add or edit a place, activity, tag or opening hours, vote on whether an activity is still there, or flag a place, we keep what you contributed and that it came from your account. Contributions are shared with every member. See Deleting your account for what happens to them later.
Feedback and errors
- Feedback you send from the app: your message, the page you were on (without any search terms in its address), the app version and your browser and device type. If you report an error, we also keep the error's reference so we can find what went wrong.
- Error logs: when something breaks, in our servers or in your browser, we log the error, the page's address without search terms, the time, the app version and your account ID if you're signed in. We never log what you typed into a form.
- Activity: the days you open TwoNight while signed in, and counts of the features you use, such as how many plans you've made. We use these to understand how the beta is going and to apply plan limits.
Page visits
We count visits with Umami, a privacy-focused analytics service that uses no cookies. For each page you open it receives the page's address without search terms (with share and invite links blanked out), the site that linked you here, your browser, operating system, device type, screen size and language, and your country, region and city worked out from your IP address. If a link to TwoNight carried a campaign tag, such as which post it came from, Umami gets that tag; a friend's referral reaches it only as "a referral", without their name. Umami also counts a few steps by name, such as joining the waitlist, creating an account or making a plan, with nothing about what you entered. Umami doesn't store your IP address, doesn't know who you are and isn't linked to your account. It groups one browser's visits using an anonymous ID that changes every month. You can block it with any content blocker and TwoNight keeps working.
The waitlist and referrals
- If you request an invite, your email address, the page you asked from, and when we invited you.
- If you arrived through a friend's referral link (such as twonight.io/?ref=sam), we remember the referral in a cookie and save it with your request so we know who sent you.
- To stop spam we may run a Cloudflare Turnstile check on the form, check that your email's domain can receive mail and count requests using a one-way scrambled form of your IP address. The IP address itself isn't stored.
- Your browser keeps a cookie for up to a year noting that you've already joined the waitlist.
How we use it
- To run TwoNight: find places, build and check your plans, and suggest ideas.
- To send emails about your account, such as sign-in links, confirmations and invites.
- To keep TwoNight secure, prevent abuse and fix problems.
- To understand how the beta is going and improve it.
We don't sell or rent your personal information, share it for advertising, or use it to build advertising profiles. We don't use your data to train AI models.
Cookies
We use only cookies that TwoNight needs to work: keeping you signed in, remembering the invite you opened, your last search point and active plan, a referral, and that you joined the waitlist. We don't use advertising or analytics cookies; our visit counts work without them.
Who helps us run TwoNight
We share data with these service providers only so they can do their part, and they may not use it for anything else.
| Provider | What they do | What they get | Where |
|---|---|---|---|
| Supabase | Database, sign-in and file storage | Everything stored for your account, listed above | United States |
| Render | Hosts the app and keeps its logs. Render delivers the site through Cloudflare’s network | Requests to the app, including IP address and browser, and error logs | United States |
| Umami | Counts page visits and a few steps, such as joining the waitlist, without cookies | The page, the linking site, browser and device details, and your IP address to work out your country, which Umami doesn’t store | See Umami’s privacy policy |
| Cloudflare Turnstile | Checks that sign-up, sign-in, password reset and invite requests come from a person | Your IP address and browser and device signals, on those forms only | See Cloudflare’s privacy policy |
| Bird | Sends account emails, such as sign-in links and password resets | Your email address and the email we send | See Bird’s privacy notice |
| OpenFreeMap | Map images | Your IP address and the map area on screen, when a page shows a map | See OpenFreeMap |
| Open-Meteo | Weather forecasts for plans | The coordinates and date of a plan’s stops, never who you are | European Union |
| OpenRouteService and Geoapify | Travel times between stops | The coordinates of a plan’s stops and how you travel, never who you are | European Union |
Place listings come from Foursquare Open Source Places, a public dataset we copy. We don't send Foursquare anything about you. If you open a place or stop in Google Maps, Google's own privacy policy applies there.
We may also share information if the law requires it, to protect people's safety, or as part of a sale or merger of TwoNight, in which case this policy keeps applying to your data.
Where your data is stored
Your account data is stored in the United States. If you live in Canada, your information is processed and stored in the United States and may be accessible to authorities there under US law. Weather and travel-time lookups go to providers in the European Union but contain only place coordinates.
How long we keep it
- Your account, preferences and plans: until you delete them or your account.
- Waitlist requests: while we're sending beta invites, so we know who has been invited. Ask us and we'll remove yours.
- Feedback: until you delete your account.
- Error and server logs: kept by Render for a limited time, then deleted.
- Backups: deleted data can remain in backups for a short time before they roll over.
Deleting your account
You can delete your account any time from Account settings. That deletes your account, profile, partner details, preferences, plans, share links, invites, feedback, votes and activity records straight away.
Places, activities, tags and hours you added stay in TwoNight so other members can keep using them, but they're no longer linked to you. If you'd like a contribution removed, email us.
Your choices and rights
Wherever you live in the US or Canada, you can ask us to:
- Tell you what personal information we hold about you and give you a copy.
- Correct it. Most of it you can edit yourself in the app.
- Delete it.
- Stop using it for anything other than running your account.
Email privacy@twonight.io from the address on your account. We'll answer within 30 days and won't treat you differently for asking. Depending on where you live, you may also be able to complain to a privacy regulator, such as the Office of the Privacy Commissioner of Canada or your state's attorney general.
Security
We protect your data with encryption in transit, access controls that keep each member's data separate, and by collecting only what TwoNight needs. No service is perfectly secure, so if we learn of a breach that affects you, we'll tell you as the law requires.
Children
TwoNight is for adults 18 and over. We don't knowingly collect information from anyone under 18. If you believe a child has signed up, email us and we'll delete the account.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change matters, such as a new use of your data, we'll tell you by email or in the app before it takes effect.
Contact
Questions or requests: privacy@twonight.io.