Privacy Policy

Last updated: June 17, 2026

What we collect

Two Day Club collects the minimum data necessary to provide the service:

• Account information: Your name and email address via Sign in with Apple.
• Health data: Daily step count from Apple Health on iPhone, and Android Health Connect when Android is available. We only read step count data. We do not access heart rate, sleep, weight, or any other health metrics. We only record and transmit step data while your membership is active. When you sign out, cancel your membership, or uninstall the app, we stop collecting step data immediately. Days during which your membership was paused are not tracked and cannot be recovered after the fact.
• Usage data: Your step goal, streak history, weekly membership state, widget and notification settings, and Crew interactions.
• Payment information: Processed securely by Stripe. We never store your full card number, CVV, or bank details. We retain records of subscription billing events (successful payments, waived weeks, refunds) associated with your account.
• Device information: Timezone, locale, and device type for proper streak evaluation and localization.
• Attribution: How you heard about Two Day Club (collected during onboarding, optional).
• Profile photo: Optional avatar image, stored securely and visible to you and people who can view your Crew profile.

How we use your data

• Track your daily step progress and evaluate the two-day rule.
• Evaluate the two-day rule and resolve your weekly membership fee as described in our Terms of Service.
• Process the $4.99 weekly membership fee at your billing anniversary, or waive it when you've stayed consistent.
• Power Crew features, including first name, profile photo, step progress, rings, streak count, and weekly status.
• Send push notifications and update widgets, Lock Screen progress, and Dynamic Island progress when enabled.
• Resolve disputes about charges or tracking errors.
• Improve the app and fix technical issues.

Health data protection

Your health data receives special protection:

• We will not sell your health data to any third party.
• We will not use your health data for advertising or marketing purposes.
• We will not share your health data with third parties without your explicit consent, except as required by law.
• Manually entered step data is excluded to ensure accuracy.

What we don't do

• We do not sell any of your personal data.
• We do not use your data for targeted advertising.
• We do not share your data with data brokers.
• We do not track you across other apps or websites.

Third-party services

We use the following third-party services to operate Two Day Club:

• Supabase (database and authentication, hosted on AWS in the United States)
• Stripe (subscription billing and payment processing)
• Expo (push notifications)
• Apple Health / Android Health Connect (step data, accessed only with your permission where supported)

These services process your data according to their own privacy policies and applicable data protection agreements.

Data retention

• Your data is retained as long as your account is active.
• When you delete your account, all personal data is permanently removed within 30 days. Your Stripe customer record and any active subscription are cancelled as part of the same process.
• While your membership is paused (signed out, cancelled, or uninstalled), we do not collect new step data. Existing records from before the pause are retained until you delete your account.
• Anonymized, aggregated data (such as average step counts across all members) may be retained indefinitely for product improvement.
• Billing records may be retained for up to 7 years for legal and financial compliance purposes.

International data transfers

Your data is stored and processed in the United States. If you are located outside the United States, your data will be transferred to US servers. We rely on Standard Contractual Clauses and other legally approved mechanisms to ensure your data is protected in accordance with applicable data protection laws, including GDPR.

Your crew

When you follow someone, you can see their first name, profile photo, daily step progress, streak count, weekly membership status, and a count of how many times they have been charged the $4.99 weekly fee. They see your data only if they also follow you.

Followers do not see your email address, your individual charge history (specific dates), or any health data beyond step count.

Followers can send nudge messages to encourage your progress. Private accounts must approve every follow request. You can unfollow or block anyone at any time, which immediately stops their access to your data.

Your rights

All users

• View all your data within the app.
• Delete your account and all associated data from Settings. Deletion cancels any active subscription and is irreversible.
• Revoke health data access at any time via your device settings.
• Cancel your membership at any time without deleting your account. Cancellation ends your current streak, stops step tracking, and stops all future charges.
• Sign out at any time. Signing out has the same effect as cancelling: your current streak ends, step tracking stops, and no further charges occur. Signing back in does not restore a prior streak.
• Dispute any charge you believe was made in error.

European Economic Area (GDPR)

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation:

• Access: Request a copy of all personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data (right to be forgotten).
• Portability: Request your data in a machine-readable format.
• Restriction: Request that we limit processing of your data.
• Object: Object to processing based on legitimate interests.
• Withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact privacy@twodayclub.com. We will respond within 30 days.

California (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used.
• Request deletion of your personal information.
• Opt out of the sale of personal information (we do not sell your data).
• Non-discrimination for exercising your privacy rights.

Age requirement

Two Day Club is intended for users 16 and older. We do not knowingly collect data from anyone under 16. If you believe someone under 16 is using the app, please contact us and we will promptly delete their data.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you through the app or by email at least 30 days before the changes take effect.

Contact

For privacy questions or to exercise your data rights:

• Email: privacy@twodayclub.com
• General: hello@twodayclub.com

English · Español · Français · 日本語 · Português