Privacy Policy

TwoTab is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, store and protect your personal information when you use the TwoTab website, application and related services (collectively, the "Service").

Please read this Privacy Policy carefully.

1. Who This Policy Applies To

This Privacy Policy applies to anyone who visits, accesses or uses TwoTab.

For the purposes of applicable data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, TwoTab is the controller of your personal data where we determine the purposes and means of processing that data.

2. Information We Collect

We may collect and process the following categories of personal information.

Account Information

When you create an account, we may collect your name, email address, password or authentication credentials, and other information you provide when creating or managing your account.

Financial and Expense Information

When you use TwoTab, you may choose to provide information relating to your personal or shared finances, including expenses and transactions, amounts paid or owed, spending categories, descriptions or notes relating to expenses, household or shared financial information, and balances or calculations generated from information entered into the Service.

TwoTab does not require you to provide your bank account login credentials unless we explicitly introduce a feature that requires this in the future.

Connected User Information

If you connect your account with another user, we may process information relating to that connection, including the identity or contact details of the Connected User, information shared between connected accounts, shared expenses and financial records, and activity relating to the shared account or household.

Please only provide another person's information where you have the right to do so.

Payment Information

If you purchase a subscription, payment processing is handled by a third-party payment provider, such as Stripe. We may receive information relating to your subscription, including your subscription status, payment status, billing period, transaction identifiers, and limited payment-related information. We do not store your full payment card details.

Technical and Usage Information

When you access TwoTab, we may automatically collect certain technical information, including your IP address, device type, browser type, operating system, pages or features accessed, approximate location derived from your IP address, log and diagnostic information, and information about how you interact with the Service.

Communications

If you contact us, we may collect your name, email address, the contents of your message, and other information you choose to provide.

3. How We Use Your Information

We use personal information for the following purposes.

To Provide the Service

We process your information to create and manage your account, provide TwoTab's features and functionality, calculate and display shared expenses and balances, connect you with another user where requested, process subscriptions and payments, provide customer support, and communicate important information about the Service.

To Maintain and Improve TwoTab

We may use information to understand how users interact with the Service, improve features and functionality, identify and fix technical issues, maintain security and reliability, and develop new features. Where possible, we may use aggregated or anonymised information for these purposes.

To Protect the Service and Our Users

We may process information to detect fraud or misuse, investigate security incidents, enforce our Terms of Use, and protect TwoTab, our users and third parties.

To Comply With Legal Obligations

We may process or retain information where necessary to comply with legal or regulatory requirements, respond to lawful requests from authorities, establish, exercise or defend legal claims, or protect the rights, property or safety of TwoTab or others.

4. Our Legal Bases for Processing

Under UK data protection law, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we process your information because:

• Contract. Processing is necessary to provide the Service and fulfil our contractual obligations to you.
• Legitimate Interests. Processing is necessary for our legitimate interests, including operating and improving TwoTab, maintaining the security and reliability of the Service, preventing fraud and misuse, and understanding how the Service is used. Where we rely on legitimate interests, we consider your rights and interests and will not use your information where your rights override our legitimate interests.
• Legal Obligation. Processing is necessary to comply with applicable legal obligations.
• Consent. In certain circumstances, we may ask for your consent before processing your information. Where processing is based on consent, you may withdraw your consent at any time.

5. Shared Information and Connected Users

TwoTab is designed to allow users to share certain financial and household information with a Connected User.

When you choose to connect with another user, information that you add to shared areas of the Service may be visible to that person. This may include expenses, amounts paid, amounts owed, balances, notes, categories, and other information associated with shared records.

You are responsible for deciding what information you enter into shared areas of TwoTab. Please consider carefully before entering sensitive or private information into shared notes or descriptions.

If your connection with another user ends, certain shared records may remain available to both users where necessary to maintain the integrity of shared historical records, unless deleted in accordance with the functionality available in the Service or applicable data protection law.

TwoTab is not responsible for how another user uses information that you have chosen to share with them through the Service.

6. Who We Share Your Information With

We do not sell your personal information.

We may share personal information with trusted third parties where necessary to operate the Service.

Service Providers

Companies that provide services on our behalf, including cloud hosting providers, payment processors, authentication providers, database and infrastructure providers, analytics providers, customer support tools, and email and communication providers. These providers are only permitted to process personal information where necessary to provide services to us or where otherwise required by law.

Connected Users

Where you choose to connect with another user, information entered into shared areas of TwoTab may be made available to that Connected User.

Professional Advisers and Authorities

We may disclose information to professional advisers, regulators, law enforcement agencies, courts or other authorities where necessary or legally required.

Business Transfers

If TwoTab is involved in a merger, acquisition, restructuring, sale of assets or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

7. International Transfers

Some of the service providers we use may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that it receives an adequate level of protection. This may include using adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or other legally recognised safeguards.

8. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy. The retention period will depend on the type of information and how you use the Service.

• Account information is generally retained while your account remains active.
• Financial and expense records are retained while they remain associated with your account or shared records.
• Payment-related information may be retained for longer where required for accounting, tax or legal purposes.
• Communications may be retained for a reasonable period to provide support and maintain records.
• Technical logs may be retained for a limited period for security and operational purposes.

When information is no longer required, we will delete or anonymise it where appropriate.

9. Account Deletion

You may request deletion of your TwoTab account.

When an account is deleted, we will take reasonable steps to delete or anonymise personal information associated with your account, subject to legal or regulatory obligations, legitimate requirements to retain certain records, information required to establish, exercise or defend legal claims, and shared information that may also relate to another Connected User.

Where information forms part of a shared record involving another user, deletion of your account may not automatically remove all shared historical records from that user's account. We will explain the effect of account deletion through the Service or when responding to a deletion request.

10. Your Data Protection Rights

Depending on applicable law, you may have the right to:

• access the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your personal information;
• object to certain processing;
• request restriction of processing;
• request portability of certain personal information;
• withdraw consent where processing is based on consent; and
• complain to a data protection authority.

You can exercise these rights by contacting us using the contact details available on the TwoTab website or within the Service. We may need to verify your identity before responding to certain requests. We will respond to requests in accordance with applicable data protection law.

11. Marketing Communications

We may send you service-related communications where necessary to operate your account, provide important updates, notify you about changes to the Service, manage your subscription, or respond to your requests. These communications are not generally considered marketing communications.

Where we send marketing communications, we will do so in accordance with applicable law and, where required, with your consent. You can opt out of marketing communications at any time by following the unsubscribe instructions provided or adjusting your communication preferences.

12. Cookies and Similar Technologies

TwoTab may use cookies and similar technologies to operate and improve our website and Service. These technologies may be used to keep you signed in, remember your preferences, maintain security, understand how the Service is used, and improve performance.

Where required by law, we will ask for your consent before placing non-essential cookies or similar technologies on your device. You may also be able to control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

13. Security

We take reasonable technical and organisational measures to protect your personal information. These measures may include encryption where appropriate, secure authentication, access controls, restricted access to personal information, monitoring and logging, security testing, and secure infrastructure providers.

However, no system can be guaranteed to be completely secure. You are responsible for keeping your account credentials confidential and for using a strong password. If you believe your account has been compromised, please contact us as soon as possible.

14. Children's Privacy

TwoTab is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from someone under 18 without appropriate authorisation, we will take reasonable steps to delete that information.

15. Third-Party Services

TwoTab may contain links to or integrate with third-party websites or services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you use.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you through the Service, by email or by other appropriate means. The latest version will always be available through TwoTab. The date at the top of this Privacy Policy indicates when it was last updated.

17. Complaints

If you are unhappy with how we handle your personal information, please contact us first so that we can try to resolve your concern. If you are based in the United Kingdom, you also have the right to make a complaint to the Information Commissioner's Office ("ICO"). The ICO is the UK's data protection regulator.

18. Contact

If you have questions about this Privacy Policy or how TwoTab handles your personal information, please contact us using the contact details available on the TwoTab website or within the Service.