Us Two Privacy Policy

Effective 2026-10-09 · Last updated 2026-10-13 · Applies to Us Two for iOS (com.hyperfocused.duo), published by Hyperfocused Apps.

What Us Two saves on your phone

Us Two is a collection of small tools, and each tool keeps what you put into it: the names you type, your answers, date ideas, notes and hints, lists and picks, and your settings. All of this is stored in the app’s own storage on your phone. We cannot see it, and it does not leave the phone unless you turn on the backup described below.

You can clear a single tool from its own settings, or clear everything with Delete my data (Settings → Your data). Deleting the app from your phone also deletes everything it saved there.

Usage stats on your phone

Us Two keeps simple usage stats for you to look at in Settings → Your stats: which tools you open, roughly how long each is on screen, when you last used it and on which days you used the app, and a few totals Today’s Question already keeps (your streak, and how many days you both answered). The launcher’s “recent” order and the open count on a tool’s detail sheet come from the same record; the app keeps no other. They are kept only in the app’s own storage on your phone, as one small total per tool per day. They are never sent to us or to anyone else, they are not part of the optional backup, and no analytics service is involved. You can turn them off with Keep usage stats (nothing is recorded while it is off), remove them with Clear stats, and Delete my data or deleting the app removes them too.

Reminders

Reminders in Us Two are local notifications scheduled on your phone. They need your permission once, are never sent through a server, and are removed by Delete my data or by deleting the app.

Optional backup

Settings → Your data lets you sign in with Apple or Google. Until you do, nothing is backed up and no account exists. When you sign in:

• What is stored: the saved data of each tool (the items listed above), the sign-in’s email address (Apple lets you share a private relay address instead) and a user id that Firebase assigns. We use these only to keep your backup and to recognise you on a new phone. Firebase also keeps the IP address and device type of your sign-ins for security.
• Where: in a Firebase project owned by Hyperfocused Apps, on Google Cloud servers in the United States. Google acts as our processor and does not use your data for its own purposes. Firebase’s security rules allow only your signed-in account to read or write your backup.
• How it works: the phone keeps its copy and pushes changes to the backup a few seconds after you make them. Signing in on another phone with the same account merges the two, newer changes winning. The same account works across all Hyperfocused Apps apps.
• Signing out stops the backup. Your phone keeps its data, and the cloud copy stays until you delete it.
• Values over about 900 KB stay on the phone and are not backed up.

We use your backup for nothing else: not for advertising, profiling, analytics or contacting you.

Pairing with your partner

Us Two works on its own. If you want to share with your partner, Settings → Your partner pairs your two phones with an 8-character code that one of you shares with the other. A pairing holds exactly two phones; nobody else can join it, and a code is never reused: once a pairing ends, pairing again makes a new one.

• How it works: pairing creates an anonymous Firebase identity for your phone (no name, email or phone number) and a private shared space for the two of you on Firebase (Google Cloud, United States). Firebase’s security rules let only the two paired phones read or write it.
• What syncs, and who sees it: the display name you type, the name of the time zone the two of you share, such as “America/New_York” (so you both get the same question on the same day) and, in Today’s Question, the answers you send and whether you have Spicy questions turned on. All of this is available to both paired phones, and to no one else.
• Hidden until you both answer: the app does not show you your partner’s answer until you have answered the same day’s question too. This is how the app behaves, not a lock on our servers: an answer is delivered to your partner’s phone when you send it, and the app there keeps it out of sight until they have answered.
• Sharing a reveal: either of you can share a day’s card outside the app through the iPhone share sheet. The card shows only the sharer’s own answer unless they turn on “Share both answers”. What is shared that way leaves Us Two and is no longer under our control.
• Limits: answers are limited to 280 characters, and links are removed before they are sent.
• What does not sync: everything else in Us Two (date ideas, love notes, hints, lists, picks, settings) stays on your phone, unless you turn on the backup above.
• Unpairing: Settings → Your partner → Hold to unpair. Your partner stops receiving anything new from you; answers they already received stay on their phone. When a pairing ends, the shared space and the answers stored in it are deleted from our servers once the second phone next opens the app (or unpairs itself).
• A new phone, and signing out: if you sign in under Your data, your pairing is kept with that account, and a new phone signed in to it picks the pairing up. If you sign out, the pairing is set aside on that phone (nothing is sent or shown) until you sign in again. Without signing in, a pairing lives only on that phone. An account holds one pairing at a time.
• Preview: “Preview with a sample partner” shows the two-phone screens with a pretend partner. It runs only on your phone and sends nothing; answers you write in the preview are never sent, even if you pair later.
• Report a problem: Settings → Help → Report a problem writes to Hyperfocusedengineer@gmail.com, including about anything your partner sent.

Delete my data leaves the pairing and deletes your anonymous identity. Answers your partner already received stay on their phone.

When Us Two uses the network

Us Two ships everything it needs inside the app, including every question, and downloads no content. It uses the network in two cases: each time it starts, it asks Expo’s update server whether a fix is available (see “App updates”); and it connects to our Firebase backend only when you pair with your partner or turn on the optional backup.

App updates

Us Two can receive small fixes between App Store releases. They are delivered by Expo (650 Industries, Inc., United States; its service is called EAS Update), acting as our processor. To find out whether a fix is available, the app sends a request to Expo’s update server (u.expo.dev).

Us Two asks each time it starts, and again when you come back to it after it has been open for six hours or more.

That request carries:

• A random install ID. The app creates it on the phone the first time it asks for an update and keeps it in the app’s own settings on the phone, so it is the same in every request until Us Two is deleted. It is not your name, email, account, phone number or the advertising identifier, and we never combine it with anything else we hold. It lets Expo count how many installs received an update.
• Which build is asking: that it is the iOS app, the build’s runtime version (a code for the app’s native parts), the update channel the build listens to, the ID of the update it is running and of the one it shipped with, and the IDs of any updates that recently failed to start on that phone.
• What iOS adds to every request an app makes: a User-Agent line that names the app, its build number and the versions of the system’s networking parts (which reveal the iOS version), and the languages the phone is set to (Accept-Language).
• Like any internet request, it shows Expo the phone’s IP address while it is served.

It carries none of your saved data and nothing about how you use Us Two. The update system can also attach the text of an error that stopped the app from starting; Us Two is set up to send that field empty.

If a fix is available, the app downloads it from Expo with the same details and uses it the next time it opens. What we can see in Expo’s dashboard is totals: how many installs run each update and how many failed to start it. We cannot see who they are. Expo keeps this under its own privacy policy. There is no switch for update checks in the app; they do not happen while the phone is offline.

What we do not do

• No advertising and no ad networks.
• No analytics or crash-reporting SDKs. We do not measure how you use the app: the usage stats described above are kept by the app on your phone, for you, and never reach us.
• No tracking across apps or websites, and no advertising identifier.
• No selling, renting or sharing of your data. Two third parties handle some of it for us, and only as described on this page: Google’s Firebase, as the storage provider for the optional backup and for pairing; and Expo, which delivers app updates and receives a random install ID and the build’s details when the app asks for one (see “App updates”).
• No access to your contacts, photos, location, microphone or camera. Us Two asks for no such permission.

Purchases

Us Two currently has no in-app purchases. If paid features are ever added, they will be sold through Apple’s App Store. Apple handles the payment and we never receive your card or billing details; Apple shares with us only what is needed to unlock what you bought.

Children

Us Two is not directed at children under 13 (or the age of digital consent where you live), and we do not knowingly collect personal information from them. The optional backup can only be turned on by signing in with an Apple or Google account. If you believe a child has signed in, email Hyperfocusedengineer@gmail.com and we will delete the account and its backup.

Deleting your data and your rights

Delete my data (Settings → Your data, hold to confirm) deletes, in this order: the cloud backup, your sign-in account with us, and every tool’s saved data and reminders on the phone. Because one account backs up all Hyperfocused Apps apps, deleting from Us Two also deletes the backups of every other Hyperfocused Apps app kept under that account, along with the account itself; those apps keep the data on their phones and simply stop backing up. You will be asked to confirm with Apple or Google first; for an Apple sign-in we also ask Apple to revoke the sign-in. This cannot be undone. If a step fails, the app says so and you can try again to finish. Signed out, it clears the phone only; sign in first to remove a cloud backup too.

Wherever you live, you can also ask us to show you, correct, export or delete any data we hold about you by emailing Hyperfocusedengineer@gmail.com. We answer from the same address, usually within a few days, and we will ask you to confirm the request from the email address of your backup account. There is no charge.

• If you are in the European Economic Area, the United Kingdom or Switzerland (GDPR): we process backup data because you asked us to (your consent, which you withdraw by signing out or deleting). You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your data protection authority. The data is stored in the United States under Google Cloud’s standard contractual clauses.
• If you are in California (CCPA/CPRA): we do not sell or share your personal information, we have no financial incentive programmes, and we do not use sensitive personal information for anything beyond keeping your backup. You may request what we hold, ask for it to be deleted, and you will not be treated differently for doing so.

Retention

Data on your phone stays until you delete it or the app. A backup stays under your account until you delete it. Apple and Google keep their own records of your sign-in under their own privacy policies.

Security

Every connection to Firebase uses HTTPS. The backup is protected by Firebase security rules that only let your own signed-in account read or change it; we have no admin tooling that browses user backups. No system is perfectly secure, and the app is designed so the phone is always the primary copy of your data.

Changes to this policy

If Us Two ever starts collecting something new, we will update this page, change the dates at the top and, for anything material, tell you in the app before it takes effect.

Contact

Hyperfocused Apps is the trade name of Harsha Hassan Somashekara, an individual developer established in India, who is the data controller for Us Two. Questions, data requests and anything else about privacy:

Hyperfocusedengineer@gmail.com

Us Two support page