Last updated: 12 August 2026
Two Truths is published by Ampora Apps ("we", "us"). This policy explains what
the app collects, why, and what you can do about it.
We have written it to describe what the app *actually does*, not what a
template says. If something here does not match your experience, tell us.
Email address. Used to create your account and sign you in. You provide it
either directly (we email you a sign-in code) or through Google Sign-In.
Display name. Shown to your friends inside the game. You choose it; it does
not have to be your real name.
Game content. The true and false statements you write each day, and the
guesses you make about other players' statements. These are the substance of
the game and are visible to players you are connected with.
Friends' email addresses. If you invite someone, we store the email address
you enter so the invitation can be matched to them when they sign up. We use it
only for that purpose. We do not email them marketing, and we do not add them to
any list.
Push notification token. If you allow notifications, your device is issued
an anonymous token that lets us send notifications to it. It identifies the
device, not you personally, and is deleted when it stops working or when you
delete your account.
That is the complete list. We do not collect your location, contacts,
photos, microphone, camera, advertising ID, or browsing activity. There is no
analytics SDK and no advertising SDK in the app.
| What | Why |
|---|---|
| Email address | To create your account and sign you in |
| Display name | So friends can recognise you |
| Game content | It is the game — statements and guesses are the product |
| Friend connections | To show you your friends' statements and the leaderboard |
| Invited email addresses | To match an invitation to the right person when they join |
| Push token | To notify you when a friend has played, if you opt in |
| Reminder preferences | To send the daily reminder you asked for |
We do not use any of this for advertising or profiling.
We use a small number of service providers. They process data on our behalf and
are not permitted to use it for their own purposes.
| Provider | What it handles | Where |
|---|---|---|
| Supabase | Database, accounts and authentication | Cloud hosting |
| Expo | Delivers push notifications to your device | Cloud hosting |
| Sign-in, if you choose Google Sign-In | Cloud hosting | |
| Resend | Sends sign-in code emails | Cloud hosting |
If you sign in with Google, Google provides us with your email address, name and
profile picture URL. Your Google password is never seen by us. Google's handling
of your data is governed by their own privacy policy.
**We do not sell your personal information, and we do not share it with
advertisers or data brokers.**
We keep your information for as long as your account exists.
When you delete your account, we permanently delete your profile, statements,
guesses, friend connections and push tokens. This is immediate and cannot be
undone.
Backups may retain deleted data for up to 30 days before being overwritten.
Delete your account. In the app: Stats → Delete account. Or email us at the
address below and we will do it for you.
Access your data. Email us and we will send you a copy of everything we hold
about you.
Correct your data. You can change your display name in the app at any time.
For anything else, email us.
Turn off notifications. Reminders can be switched off in the app under Stats.
Push notifications can also be disabled in your device settings.
Depending on where you live, you may have additional rights under laws such as
the GDPR (Europe), the CCPA (California), or the Australian Privacy Act. We
apply the rights above to everyone regardless of location, because it is simpler
and fairer than doing otherwise.
Data is encrypted in transit. Access to the database is restricted by
row-level security rules, which means one player's account cannot read another
player's private data even if the app were modified — the restriction is
enforced by the database itself, not by the app.
No system is perfectly secure. If we ever become aware of a breach affecting
your personal information, we will notify you.
Two Truths is not directed at children under 13, and we do not knowingly collect
personal information from them. If you believe a child has created an account,
contact us and we will delete it.
If we change this policy, we will update the date at the top. If the change is
significant — for example if we ever add advertising or analytics — we will tell
you in the app before it takes effect.
Email: twotruths@ampora.com.au
Publisher: Ampora Apps
We aim to respond within a few days.