Legal

Privacy policy

Last updated: June 2026 · Prototype draft

Data we collect

Account information (email, display name), private safety data (gender, region, matching preferences), verification records via Persona, and trip/booking activity.

What we never show publicly

Gender, email, phone number, and region are protected fields. Public profiles expose only display name, avatar, bio, visible cities, verification badge, and membership tier.

Your rights

You may request access, correction, or deletion of your data in accordance with GDPR and CCPA. Contact privacy@thetwosociety.com (placeholder).

Security

Row-level security on all database tables. Sensitive operations via Edge Functions. Webhook signature verification for Stripe and Persona.