Privacy policy

1. Information you provide

We process account details such as your email address, sign-in identifier, and profile information; prompts and photos or other files you submit; generated content saved to your library; and messages you send for support. If you join our launch list, we use the email you provide to notify you about availability. Website payment details are entered with Stripe. We receive transaction, subscription, and billing information, not your full payment-card number.

2. Google and Apple sign-in

If you choose Continue with Google, we request your basic identity information: your Google account identifier, email address and verification status, and available name and profile picture. We use this information to create or sign you into your Twisty account, display your profile, secure access, and connect you to your library, subscription and credits. It is stored with your account through our authentication provider, Supabase.

Google sign-in does not give us access to your Gmail messages, Drive files, contacts or Google Photos. We do not use Google sign-in data for advertising, sell it, or use it to train AI models. Photos and prompts that you separately choose to upload for generation are processed as described below. You can remove Twisty’s access in your Google Account’s third-party connections settings and request deletion of your Twisty account as described in section 8.

Sign in with Apple similarly provides an account identifier and the name or email you choose to share, which may be an Apple relay address. The website and iOS app use the same Twisty account service. Using the same sign-in identity gives access to that account’s existing data.

3. Information collected automatically

We process technical and usage information needed to run and secure the service, including browser or device information, network information, features used, generation activity, and diagnostic or error logs. Essential cookies and browser storage maintain sign-in, private preview access and preferences, and may preserve a draft while you sign in or visit checkout. Optional cookies are subject to your consent choices where required.

4. How we use and share information

With your analytics consent, we use Google Analytics and our own website measurement to record page visits, link and button clicks, traffic sources, and completed signup or enquiry events. We use a random session identifier and first-party storage to connect visits to conversions. We do not send your email, enquiry message, prompts, uploaded files, or private URL parameters to Google Analytics. Advertising features are disabled. You can withdraw analytics consent through Cookie preferences; future optional tracking stops. Blocking or declining analytics does not prevent you from submitting an enquiry.

Enquiries and confirmed website signups are stored as business records in our private administration system, even if you decline analytics. Where you consent, we associate the traffic source with these records. Our team uses enquiry details to respond and manage follow-up. Read how Google uses information from sites that use its services.

We use information to provide the service, generate and store your creations, manage subscriptions and credits, prevent abuse, provide support, diagnose problems, improve the service and meet legal obligations. We do not sell personal information.

We share information with service providers as needed for these purposes: Supabase for authentication, database and storage; Vercel for website hosting; Stripe for website checkout, payments and subscriptions; and AI model providers for generation. Prompts and files you submit for generation are sent to the selected model provider for processing. These providers may also process information under their own terms and privacy policies.

We may disclose information where legally required, to enforce our terms or protect rights and security, or as part of a business merger or transfer. Existing purchases made through the iOS App Store are handled by Apple; purchases made on twisty.studio are processed by Stripe.

5. Data retention

We retain account information and creations as needed to provide your account and library. We retain transaction and security records where needed for legal obligations, fraud prevention, dispute resolution and record-keeping. Deletion may be subject to these requirements and the time needed to remove data from backups.

6. Security

We use technical and organizational measures to protect information. No method of storage or transmission is completely secure. Keep your sign-in credentials secure and contact us if you suspect unauthorized access.

7. International processing

We are based in Singapore. Our providers may process information in other countries. Where required, we use appropriate safeguards for transfers of personal information.

8. Your choices and deletion

Depending on where you live, you may have rights to access, correct, delete or obtain a copy of your information, restrict or object to processing, or withdraw consent. To request account or data deletion or exercise these rights, email legal@twisty.app. The Twisty iOS app also provides a Delete account option in Settings. We may need to verify your identity to protect your information.

You can control permissions in your browser or device settings. Removing access from a sign-in provider does not itself cancel a paid subscription. Contact us if you need help with your account or billing.

9. Children’s privacy

The service is not intended for children under 13 or the minimum age in their jurisdiction. We do not knowingly collect their personal information. Contact us if you believe a child has provided information.

10. Changes and contact

We may update this policy as the service changes and will post the updated date here. We will communicate material changes where required. For privacy questions, contact legal@twisty.app.

Bondo Studio Pte. Ltd.
68 Circular Road, #02-01, Singapore 049422