Privacy Policy

TWENTY is operated by Noles Technology Inc., a Delaware corporation ("we", "us", "our").

This policy explains what happens to information when you use the TWENTY mobile application (the "App").

1. The short version

TWENTY has no accounts. You never create one, and we never ask for your email address or phone number.

What you write stays on your device. Your notes, your own words about difficult moments, and the name you ask the App to call you are stored only on your phone. We never receive them.

The App uses anonymous analytics. To understand how TWENTY is used and whether it helps, the App sends anonymous usage information to our analytics provider. This includes your multiple-choice answers about your drinking and the number of drinks you log. It is tied to a random identifier, not to you. Details in section 3.

We do not sell data. We do not run advertising. We do not share information with data brokers.

2. Information that stays on your device

The following is stored only on your phone. It is never sent to us or to our analytics provider.

• Anything you type, including your answer about when you first thought drinking might be a problem, and anything you write during a twenty-minute session
• The name you ask the App to call you
• The overall score calculated from your onboarding answers
• Your settings, including reminder time and cost per drink

Your complete history is kept on your device. Section 3 describes which individual events are also sent as analytics.

If you delete the App, the information on your device is deleted with it. You can also erase it at any time from Settings, using "Reset all data". Both are permanent and we cannot recover the data.

3. Analytics

TWENTY uses PostHog, Inc. to understand how the App is used and whether it helps people drink less. PostHog receives:

• A randomly generated identifier for your installation
• Which screens you view, and in what order
• Your answers to the multiple-choice questions, including questions about how often and how much you drink. Each is recorded as the option you picked. The overall score calculated from them is never sent.
• Whether your answers suggested a higher risk, and whether the App showed you its medical safety screen as a result
• Your goal and weekly target, and any changes to the target
• Your daily check-ins: the number of drinks and the mood you selected
• The option you selected when planning an evening
• When you use the twenty-minute timer, how long it ran, which tools you used, and whether you drank afterwards
• Taps on buttons and controls
• Recordings of how you move through the App (session replay)

Recordings block out everything you write and every place the App shows your own words back to you. PostHog never receives your name or anything you type.

Your country is worked out from your IP address when information arrives, and the IP address itself is then discarded rather than stored.

PostHog's privacy policy: posthog.com/privacy

4. Information handled by other third parties

Purchases (RevenueCat and Apple). Subscriptions are processed through the Apple App Store. To manage your subscription status across devices and to verify that a purchase is valid, we use RevenueCat, Inc. RevenueCat receives an anonymous identifier generated by the App, your subscription status, your purchase and renewal history, your country, and basic device information such as operating system version.

RevenueCat does not receive your drinking data, your check-ins, your writing, or any of your answers. Apple processes your payment directly and we never see your payment details, card number, or billing address.

RevenueCat's privacy policy: www.revenuecat.com/privacy

Apple's privacy policy: www.apple.com/legal/privacy

Crash and performance data. Apple may collect crash reports and performance data from apps on your device, subject to the settings you have chosen in iOS. We may see aggregated, anonymised crash information through Apple's developer tools. This does not identify you and does not contain anything you entered into the App.

Notifications. If you enable reminders, notifications are scheduled locally on your device. No notification content is sent through our servers or anyone else's.

5. What we do not do

We do not:

• Ask for your email address, phone number, or any other identifier that could tell us who you are
• Operate a server of our own. The analytics in section 3 goes to PostHog.
• Sell, rent, or trade personal information
• Show advertising, or share information with advertising networks
• Use tracking technologies to follow you across other apps or websites
• Build profiles about you for marketing purposes

The App does not request permission to track you as defined by Apple's App Tracking Transparency framework, because it does not track you across other companies' apps or websites.

6. The website

Our website at gettwenty.co is a static page. It has no forms and does not collect personal information from you.

Our host, Netlify, Inc., automatically records standard server information such as IP addresses and browser type as part of delivering the site. We do not use this to identify individuals.

We do not run analytics, advertising pixels, or third-party tracking scripts on the website, and we do not set cookies for those purposes.

7. Health information

Some of what you enter into TWENTY concerns your health, including your drinking. We treat that as sensitive.

What you write never leaves your device. Your own words about difficult moments, your notes and your name are stored only on your phone, so they cannot be breached on our side, subpoenaed from us, or disclosed by us.

Some structured information does leave your device as anonymous analytics: your multiple-choice answers, the number of drinks you log, and whether you drank after a craving. It is sent to PostHog tied to a random identifier rather than to you, and we do not know who you are. It is still information about your health, and we want you to know it is collected.

TWENTY is not a healthcare provider and is not a covered entity under HIPAA. Nothing in the App is medical advice.

8. Your rights

Access: everything the App holds on your device is visible inside the App.

Deletion: use "Reset all data" in Settings, or delete the App. Reset also starts a new analytics identifier, so anything sent afterwards is not linked to what was sent before. Neither can remove analytics already sent, because it is tied to a random identifier and we have no way to tell which records were yours.

Portability: we do not currently offer an export. If you want one, tell us at support@gettwenty.co.

If you are in the European Economic Area, the United Kingdom, or a US state with a comprehensive privacy law such as California, you have rights over personal information that a business holds about you. The information we may hold is the pseudonymous subscription record held by RevenueCat and the anonymous analytics held by PostHog. To exercise any right over your subscription record, email support@gettwenty.co.

We will not discriminate against you for exercising any privacy right.

9. Children

TWENTY is not intended for anyone under 18. It is rated accordingly on the App Store. We do not knowingly collect information from children. If you believe a minor has used the App, contact us at support@gettwenty.co.

10. International use

Noles Technology Inc. is based in the United States. What you write stays on your device, so it is never transferred to us. The anonymous analytics in section 3, and information handled by RevenueCat and Apple, may be processed in the United States and elsewhere, subject to their own policies.

11. Changes

If we change this policy, we will update the date at the top and post the new version at gettwenty.co/privacy. If a change materially affects how information is handled, we will make that clear in the App. This version, dated 21 September 2026, adds the anonymous analytics in section 3. Earlier versions said nothing left your device. That is no longer entirely true.

12. Contact

Noles Technology Inc.
support@gettwenty.co