Privacy Policy

Last updated: July 20, 2026

What we collect

Two Day Club collects the minimum data necessary to provide the service:

• Account information: Your name and email address via Google Sign-In, Sign in with Apple, or other supported sign-in methods.
• Health data: Daily step count from Apple Health or Health Connect. We only read step count data. We do not access heart rate, sleep, weight, or any other health metrics. We record and transmit step data while your membership is active. Step collection stops after you cancel your membership or delete your account. Signing out or uninstalling can stop your device from syncing new steps, but neither action cancels your membership or subscription, and billing may continue.
• Usage data: Your step goal, streak history, weekly membership state, widget and notification settings, and Crew interactions.
• Payment information: Processed securely by Stripe. We never store your full card number, CVV, or bank details. We retain records of subscription billing events (successful payments, waived weeks, refunds) associated with your account.
• Device information: Timezone, locale, and device type for proper streak evaluation and localization.
• Attribution: How you heard about Two Day Club (collected during onboarding, optional).
• Profile photo: Optional avatar image, stored securely and visible to you and people who can view your Crew profile.
• Messages and safety reports: Nudge text, report reasons and details, blocks, and moderation outcomes needed to operate Crew safely.
• Support content: Feedback messages and optional screenshots you attach when asking for help.
• Product analytics and diagnostics: Screen and feature interactions, app version, device model, operating-system version, performance timing, and crash details linked to your account or session. Raw step counts, Health averages, and manual-entry ratios are not sent to the general analytics pipeline.

How we use your data

• Track your daily step progress and evaluate the two-day rule.
• Evaluate the two-day rule and resolve your weekly membership fee as described in our Terms of Service.
• Process or waive the $4.99 weekly membership fee at the disclosed Monday 15:00 UTC weekly billing anchor.
• Power Crew features, including first name, profile photo, step progress, rings, streak count, and weekly status.
• Send push notifications and update widgets, Lock Screen progress, and Dynamic Island progress when enabled.
• Resolve disputes about charges or tracking errors.
• Improve the app and fix technical issues.
• Filter member-visible text, review profile photos before publication, investigate reports, remove content, and suspend accounts that violate our safety rules.

Health data protection

Your health data receives special protection:

• We will not sell your health data to any third party.
• We will not use your health data for advertising or marketing purposes.
• We will not share your health data with third parties without your explicit consent, except as required by law.
• Manual step entries are excluded when the health source can identify them reliably.

What we don't do

• We do not sell any of your personal data.
• We do not use your data for targeted advertising.
• We do not share your data with data brokers.
• We do not track you across other apps or websites.

Third-party services

We use the following third-party services to operate Two Day Club:

• Supabase (database and authentication, hosted on AWS in the United States)
• Stripe (subscription billing and payment processing)
• Expo (push notifications)
• Sentry (crash reporting and technical diagnostics)
• Cloudflare (secure network proxy for app requests)
• OpenAI (automated safety review of new profile photos before publication)
• Apple Health / Health Connect (step data, accessed only with your permission)

These services process your data according to their own privacy policies and applicable data protection agreements.

Data retention

• Your data is retained as long as your account is active.
• When you delete your account, we cancel active subscriptions first, remove account-owned profile and support images, then remove your name, email address, profile, health data, and other personal account data. Stripe may retain billing records required by law.
• Step collection stops after membership cancellation or account deletion. Signing out or uninstalling may interrupt device syncing, but does not cancel your membership or subscription, and billing may continue. Existing records remain until you delete your account, subject to the limited retention described here.
• Anonymized, aggregated data (such as average step counts across all members) may be retained indefinitely for product improvement.
• Billing records may be retained for up to 7 years for legal and financial compliance purposes.

International data transfers

Your data is stored and processed in the United States. If you are located outside the United States, your data will be transferred to US servers. We rely on Standard Contractual Clauses and other legally approved mechanisms to ensure your data is protected in accordance with applicable data protection laws, including GDPR.

Your crew

Profiles are public by default. Signed-in members can see your first name, profile photo, daily step progress, streak count, weekly membership status, and a count of how many times you have been charged the weekly fee. If you turn Private Profile on, only approved followers can view that social progress.

Followers do not see your email address, your individual charge history (specific dates), or any health data beyond step count.

Mutual Crew members can send nudge messages. Member-visible text is filtered and new profile photos are reviewed before publication. You can report or block someone at any time. We aim to review safety reports within 24 hours and may remove content or suspend accounts.

Your rights

All users

• View all your data within the app.
• Delete your account from Settings. We cancel any active subscription first, remove account-owned images, and delete your name, email address, profile, health data, and other personal account data. Stripe may retain billing records required by law.
• Revoke health data access at any time via your device settings.
• Cancel your membership at any time without deleting your account. Cancellation ends your current streak, stops step tracking, and stops all future charges.
• Sign out at any time. Signing out does not cancel your membership or subscription, and billing may continue. Cancel in Settings > Membership before signing out if you want future subscription billing to stop.
• Dispute any charge you believe was made in error.

European Economic Area (GDPR)

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation:

• Access: Request a copy of all personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data (right to be forgotten).
• Portability: Request your data in a machine-readable format.
• Restriction: Request that we limit processing of your data.
• Object: Object to processing based on legitimate interests.
• Withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact privacy@twodayclub.com. We will respond within 30 days.

California (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used.
• Request deletion of your personal information.
• Opt out of the sale of personal information (we do not sell your data).
• Non-discrimination for exercising your privacy rights.

Age requirement

Two Day Club is intended for users 16 and older. We do not knowingly collect data from anyone under 16. If you believe someone under 16 is using the app, please contact us and we will promptly delete their data.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you through the app or by email at least 30 days before the changes take effect.

Contact

For privacy questions or to exercise your data rights:

• Email: privacy@twodayclub.com
• General: hello@twodayclub.com

Delete your Two Day Club account

Request deletion of some or all of your Two Day Club data

English · Español · Français · 日本語 · Português