Privacy Policy
Effective Date: March 28, 2026
TwoFishTwoCats ("we," "our," or "the app") is a family household management application. We are committed to protecting your privacy and being transparent about how we handle your data. This Privacy Policy should be read alongside our Terms of Service, which together govern your use of the app.
Summary: We collect only the data needed to run your household dashboard. We do not sell your data, show ads, or use analytics tracking. You can delete your account and all data at any time.
The data controller responsible for your personal data is TwoFishTwoCats. You can contact us at support@twofishtwocats.com.
1. Information We Collect
Account Information
- Email address — Used for authentication and account recovery
- Display name — Shown to household members
Household Data
When you use the app, you may create the following content, which is stored on our servers:
- To-do items and task assignments
- Calendar events and reminders
- Meal plans and shopping lists
- Notes
- Workout logs
- Pet health information (weight and general status)
- Mood entries
- Dependent profiles (names and types for children or pets in your household)
Location Data
- If you grant permission, we access your device's location only to display local weather
- Location coordinates are rounded to reduce precision (~1km accuracy) and are not stored on our servers
- If you deny location permission, the app uses a default location instead
- We do not track your movements or store location history
Device Calendar
- If you enable calendar sync, events are written to your device's native calendar
- Calendar data stays on your device and syncs via your device's own cloud service (iCloud, Google Calendar, etc.)
2. How We Use Your Data
Your data is used exclusively to provide the app's functionality:
- Display your household dashboard and shared content
- Sync data between household members in real time
- Send local notifications for event reminders and daily digests (if enabled)
- Display weather information for your area
We do NOT:
- Sell or rent your personal information
- Display advertisements
- Use analytics or tracking SDKs
- Share your data with data brokers or marketing companies
- Use your data to build user profiles for advertising
3. Third-Party Services
The app uses the following third-party services to operate:
- Firebase (Google) — Authentication (email/password storage and session tokens), Cloud Firestore (all household data storage), and Cloud Functions (account deletion processing). Firebase may collect limited technical data such as IP addresses and device identifiers for security and abuse prevention. Subject to Firebase Terms of Service and Google's Privacy Policy
- OpenWeather — Weather data. Receives approximate location coordinates only. Subject to OpenWeather's Privacy Policy
- TheMealDB — Recipe suggestions. Receives only recipe search queries. No personal data is shared
- Google Fonts — Our website loads fonts from Google's servers. This results in your browser making requests to Google, which may receive your IP address. Google states that Google Fonts requests do not use cookies or store any user data. See Google Fonts Privacy FAQ
4. Data Sharing Within Households
When you join or create a household, all household data is shared between the household's adult members. This includes todos, events, meals, shopping lists, notes, workouts, pet health, and mood data. Dependent profiles (children, pets) are visible to both adults in the household.
Data is not shared across different households. Each household's data is isolated.
5. Data Security
- All data is transmitted over encrypted connections (TLS/HTTPS)
- Authentication tokens are stored using encrypted device storage (iOS Keychain / Android Keystore) when available
- Database access is controlled by security rules that enforce user and household isolation
- The app uses Firebase App Check to protect against unauthorized access
6. Children's Privacy (COPPA Compliance)
TwoFishTwoCats is designed for use by adults (parents, partners, and caregivers) who are 13 years of age or older. The app allows adults to create dependent profiles for children in their household. These profiles contain only a first name and type designation (e.g., "child"), and are created, managed, and deletable entirely by the household's adult members. No other personal information about children is collected through these profiles.
Children do not create accounts, log in, or directly interact with the app in any way. We do not knowingly collect, use, or disclose personal information from children under 13, in compliance with the Children's Online Privacy Protection Act (COPPA). If you are a parent or guardian and believe that a child under 13 has provided us with personal information without your consent, please contact us immediately at support@twofishtwocats.com and we will promptly delete that information from our servers.
7. Your Rights & Choices
- Access your data — All your data is visible within the app
- Modify your data — You can edit or delete any content you've created
- Delete your account — Use the "Delete Account" option in the app header. This permanently removes your account, profile, and all data you've created from our servers
- Deny permissions — You can deny location and calendar permissions without affecting core app functionality
- Leave a household — You can sign out at any time. Deleting your account removes you from the household
8. Data Retention
Your data is retained as long as your account exists. When you delete your account:
- Your user profile is permanently deleted
- All content you created (todos, events, notes, shopping items) is permanently deleted
- Dependents you added are removed
- Your membership in the household is removed
- Your Firebase authentication account is deleted
Residual copies of your data may persist in encrypted backups for up to 30 days after deletion, after which they are automatically purged. We do not access or use backup data for any purpose other than disaster recovery.
9. Cookies & Tracking
The TwoFishTwoCats website and app do not use cookies, analytics, or tracking technologies of any kind. We do not use advertising pixels, session cookies, or fingerprinting. Our website loads fonts from Google Fonts, which may result in your browser connecting to Google's servers (see Section 3 above), but Google states this does not involve cookies.
10. Notifications
The app may send local notifications for event reminders and daily digest summaries. These are processed entirely on your device and are not sent through any external notification service. You can disable notifications at any time through your device settings.
11. International Users (GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following additional disclosures apply:
Data Controller
The data controller responsible for your personal data is TwoFishTwoCats. You can contact us at support@twofishtwocats.com.
Lawful Basis for Processing
- Contract performance — Processing your account data, household data, and app content is necessary to provide the app's functionality
- Legitimate interest — We process limited technical data (such as approximate location for weather) to deliver core features you have requested
- Consent — Location access and calendar sync require your explicit device-level permission, which you can revoke at any time
International Data Transfers
Your data is processed and stored using Firebase (Google Cloud) infrastructure, which may be located in the United States. Google maintains Standard Contractual Clauses (SCCs) and other safeguards for international data transfers. By using the app, you acknowledge that your data may be transferred to and processed in the United States.
Your Rights Under GDPR
In addition to the rights listed in Section 7, you have the right to:
- Rectification — Request correction of inaccurate personal data (Article 16)
- Erasure — Request deletion of your personal data (Article 17). You can do this directly via "Delete Account" in the app
- Data portability — Request a copy of your data in a structured, machine-readable format
- Restrict processing — Request that we limit how we use your data
- Object to processing — Object to our processing of your data based on legitimate interest
- Withdraw consent — Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal
- Lodge a complaint — File a complaint with your local data protection supervisory authority
To exercise any of these rights, contact us at support@twofishtwocats.com. We will respond within 30 days.
12. California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to know — You may request details about the categories and specific pieces of personal information we collect
- Right to delete — You may request deletion of your personal information. You can do this directly in the app via "Delete Account," or by contacting us
- Right to opt-out of sale — We do not sell your personal information to third parties. We have never sold personal information and have no plans to do so
- Right to correct — You may request correction of inaccurate personal information. You can do this directly in the app by editing your profile, or by contacting us
- Right to non-discrimination — We will not discriminate against you for exercising your privacy rights
Sources of Personal Information
We collect personal information directly from you when you create an account, use the app, or contact us. We do not purchase or acquire personal information from third-party data brokers.
Business Purpose for Collection
We collect personal information solely to provide and operate the app's household management features, including user authentication, data synchronization between household members, and displaying relevant content such as local weather.
Categories of Personal Information Collected
- Identifiers — Email address, display name
- Internet or network activity — Approximate location (not stored) used for weather display
- User-generated content — Todos, events, meal plans, shopping lists, notes, workout logs, mood entries, and pet health data
To exercise your rights, contact us at support@twofishtwocats.com. We will verify your identity before processing your request and respond within 45 days.
13. Data Breach Notification
In the event of a data breach that affects your personal information, we will notify affected users via email within 72 hours of becoming aware of the breach, as required by applicable law. We will also notify relevant supervisory authorities where required.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected with an updated effective date at the top of this page. For material changes to how we process your data, we will notify you via email or in-app notification and, where required by law, obtain your consent. Continued use of the app after non-material changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy or your data, please contact us at:
TwoFishTwoCats
Email: support@twofishtwocats.com