← Back to twocents.co.in

Privacy Policy

Effective 26 July 2026

twoCents is an anonymous opinion app, in beta. This policy explains what personal data we collect, how it is used, your rights under the Indian Digital Personal Data Protection Act, 2023 (DPDPA), and how to contact us. For DPDPA purposes twoCents is the Data Fiduciary and you are the Data Principal.

1. What we collect

  • Email address — used to authenticate your account. If you opt in during sign-up, we may also send you occasional product updates and announcements. You can withdraw this consent at any time by contacting us. Other users never see your email.
  • Account profile from Google — if you sign in with Google, Google sends us your email address, full name, profile picture URL, and Google account ID. Your name and profile picture are stored in our authentication system (Supabase) as part of the sign-in record. They are not displayed to other users, not used inside the app, and are permanently deleted when you delete your account.
  • Anonymous identity — an icon and name you choose. The only thing other users see on your posts and votes.
  • Submissions and votes — the case text you write, your votes, and your category choice. Every submission is reviewed by an AI system (Anthropic) before it appears in the feed. See Subprocessors below.
  • Optional demographic fields — age band, gender, city, and country. Used only in aggregate community stats (a slice is only shown when at least 5 people fall inside it) and in your personal Judge Profile (visible only to you). Never displayed next to your identity in any public view.
  • Push notification token — if you grant notification permission, your device’s Expo push token is stored so we can send you verdict alerts and daily cases. You can revoke this at any time from your device settings.
  • Session ID — a random identifier generated on your device that resets every 30 minutes of inactivity. Used to group feature-usage events within a single session. It is not tied to your identity and cannot be used to identify you.
  • Device location (GPS) — collected on an ongoing basis while the app is in use, starting from your first session. Used to personalise the community split statistics you see (e.g. how people in your area voted) and to improve regional features. You can revoke location permission at any time from your device settings; doing so will not affect core app functionality.
  • Diagnostic events — feature usage counts (e.g. tabs visited, votes cast, streaks). No personal content, no message bodies.
  • Crash and error reports — when the app crashes or hits an unhandled error, a stack trace, the last few navigation breadcrumbs, and your anonymous user ID are sent to Sentry (see Subprocessors). Email, phone numbers, and auth tokens are automatically scrubbed from error messages before send. We do not use Session Replay (no screenshots of your screen). No advertising, no cross-site tracking.
  • Technical log data — IP addresses and device type are processed transiently by our infrastructure (Supabase, Expo) and our CDN for security, abuse prevention, and routing. They are not stored in our own application tables and are not linked to your identity.

2. What we do not collect

  • Your real name beyond what is stored in the authentication record described above.
  • Contacts, photos, camera, microphone, or phone book.
  • Data from other apps on your device.
  • Any advertising identifiers (IDFA/IDFV).

3. How we use it

  • Show your anonymous identity on the cases you post and the takes you weigh in with.
  • Calculate aggregate result statistics across the community (only shown when the underlying slice contains at least 5 people).
  • Generate your personal Judge Profile, visible only to you.
  • Run automated content moderation on every submission to keep the feed safe.
  • Use your device location to show regional community splits and improve location-based features.

4. Lawful basis

We process your data on the basis of your consent (given when you sign up and submit content) and on legitimate use for moderation, abuse prevention, and providing the service you have asked for. You can withdraw consent at any time by deleting your account from the Profile screen. Withdrawal applies prospectively.

5. Subprocessors

  • Supabase — hosts our database in Mumbai (ap-south-1). Provides authentication and storage. Encrypted in transit and at rest.
  • Anthropic (United States) — receives submission text only (no identity) to run AI content moderation and generate both-sides reasoning. Data is processed under their published API privacy terms and not retained for model training.
  • Sentry (United States) — receives crash and error reports (stack traces, breadcrumbs, anonymous user ID). Email addresses, phone numbers, and auth tokens are scrubbed from error content before send. No screenshots or Session Replay.
  • Google — provides Google Sign-In if you choose it. We receive only the basic profile data described above.

6. Cross-border transfer

Submission text is transferred to the United States to Anthropic for processing. By submitting a dilemma you consent to this transfer. India and the United States do not have an equivalent data protection regime; we rely on Anthropic’s contractual commitments.

7. Data retention

  • Active account data is kept for as long as your account is active.
  • Deleted account data is removed from primary systems within 7 days of deletion. Encrypted database backups may retain it for up to 30 days before being overwritten.
  • Anonymous aggregate stats (vote counts, category totals) are kept indefinitely because they cannot be tied back to you once your identity is deleted.

8. Anonymity

Your account identity is stored in a separate auth schema from your posts and votes. Other users cannot link them. As operators we technically have access to the join — we use it only for moderation, legal compliance, or to honor delete requests. Internal access is logged.

9. Security

We follow reasonable security practices including encryption in transit (TLS 1.2+) and at rest (AES-256), Postgres row-level security, OAuth or email OTP sign-in, and least-privilege access controls. No system is fully secure; we will notify affected users and the Data Protection Board of India of any breach involving your personal data, in line with DPDPA s.8(6).

10. Your rights under DPDPA

You have the right to:

  • Access the data we hold about you — email support@twocents.co.in.
  • Correct or update your data through the app or by emailing us.
  • Erase your account and data from the Profile screen, or by visiting twocents.co.in/delete.
  • Nominate another person to exercise these rights on your behalf in case of death or incapacity — write to us to set this up.
  • Withdraw consent at any time (see Lawful basis).
  • File a grievance with our Grievance Officer (below); if unresolved within 30 days you can complain to the Data Protection Board of India.

11. Children

twoCents is for users 13 and older. We do not knowingly collect data from anyone under 13. If we learn that we have collected data from someone under 13, we will delete it promptly.

12. Changes to this policy

We will update this page when policies change. For material changes we will notify you in the app at least 30 days before the change takes effect.

13. How to make a data request

To exercise any of your rights under DPDPA — access, correction, erasure, nomination, or consent withdrawal — email support@twocents.co.in with the subject line "Data Request" and include: (1) your registered email address, (2) the right you are exercising, and (3) any relevant details. We will acknowledge your request within 48 hours and respond substantively within 15 days, as required by the IT Rules, 2021. If we need to verify your identity before processing the request, we will contact you for the minimum information required.

14. Grievance Officer and contact

Grievance Officer: Shrutika Patel, Founder, twoCents.

Email: support@twocents.co.in

We aim to acknowledge complaints within 48 hours and resolve within 15 days, as required by the IT Rules, 2021.