About Tvillingen

We collect the minimum needed to run the service:

• Your email address and password when you create an account
• The ideas you write — their text, tags, and any connections between them
• Basic usage data such as how many AI insights you've requested today, used only to apply fair-use limits

We do not collect analytics, track your behaviour, or use any third-party tracking scripts.

Your account and idea data is stored on Supabase, hosted in the European Union (Frankfurt, Germany, eu-central-1). Supabase is certified under SOC 2 Type 2 and ISO 27001 and processes data under a Data Processing Agreement compliant with GDPR.

Data is encrypted at rest and in transit. We do not share your idea content with any third party except Google's Gemini API when you request an AI insight (see below).

When you request an AI insight, the text of the selected idea is sent to Google's Gemini API for processing. The insight is generated and returned to you. We do not store the API response beyond your session.

If you are located in the European Economic Area, United Kingdom, or Switzerland: Google applies its paid-tier data terms to your request, which means Google does not use your idea content to train or improve its AI models. Google may log requests for a limited period solely to monitor for policy violations.

If you are located outside the EEA/UK/CH: Google's standard API terms apply. Google may use your prompts and generated responses to improve its products and services. Human reviewers may see data, though it is disconnected from your Google account before review.

For this reason, we recommend not including highly sensitive personal information in ideas you submit for AI analysis if you are outside the EEA.

If you are in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:

• Right of access — you can request a copy of the data we hold about you
• Right to erasure — you can delete your account and all associated data at any time via your Account page
• Right to portability — you can request an export of your idea data in a structured format
• Right to rectification — you can correct inaccurate data by editing your ideas or contacting us
• Right to restriction — you can ask us to limit how we process your data in certain circumstances

To exercise any of these rights, email us at hello@tvillingen.com. We will respond within 30 days. We may ask you to verify your identity before processing the request.

You also have the right to lodge a complaint with your local data protection authority. For EEA users, find your authority at ec.europa.eu. For UK users, contact the ICO.

You have the right to receive a copy of your idea data in a machine-readable format. To request a full export, email hello@tvillingen.com and we will send you your data within 30 days.