Legal
Privacy Policy
Last updated: April 23, 2026
1. Overview
Twy ("we", "us", or "our") is operated by Velombe (hello@velombe.com). This Privacy Policy explains what information we collect when you use Twy, how we use it, and what rights you have over your data.
By using Twy, you agree to the practices described in this policy. If you do not agree, please do not use the service.
2. Information We Collect
Account information
When you create an account we collect your name, email address, and a hashed password (or an OAuth token if you sign in via a third-party provider). We do not store plaintext passwords.
Note content
We store the raw input you submit (text, voice transcripts, or images) and the structured output Twy generates (tasks, ideas, and notes). This content is associated with your account and retained until you delete it or close your account.
Voice recordings
Voice input is processed entirely on your device using your browser's built-in Speech Recognition API. The audio recording itself is never sent to our servers or stored anywhere. Only the text transcript produced by your browser is submitted to Twy for organization.
Usage data
We track daily and monthly credit usage (number of requests, image scans, and token counts) to enforce plan limits and display your usage dashboard. We do not log the content of individual requests for this purpose — only the counts.
Billing information
Payment is processed by Stripe. We never see or store your full card number. We receive a Stripe customer ID and subscription status, which we store to manage your plan.
Cookies and session data
We use session cookies to keep you logged in. We do not use third-party tracking or advertising cookies.
3. How We Use AI
Twy sends your input to the OpenAI API to power the Twy assistant. This includes:
- Text and voice transcripts sent to GPT-4o-mini to organize your thoughts into tasks, ideas, and notes. Note: voice audio never leaves your device — only the browser-generated transcript is sent.
- Images sent to GPT-4o for OCR (optical character recognition) and text extraction.
Your content is not used to train AI models. OpenAI's API terms prohibit using API inputs and outputs to train or improve their models without explicit consent. We do not train any models on your data either.
Inputs sent to the OpenAI API are processed transiently and are subject to OpenAI's Privacy Policy.
4. Third-Party Services
We use the following third-party services to operate Twy:
5. Data Retention
We retain your account data and notes for as long as your account is active. Usage counters (daily and monthly) are retained for billing and analytics purposes.
If you delete a note, it is removed from our database immediately. If you close your account, all associated data is deleted within 30 days.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you.
- Correction — update inaccurate or incomplete information via your account settings.
- Deletion — request deletion of your account and all associated data.
- Portability — request an export of your notes in a machine-readable format.
- Objection — object to certain processing activities, including any direct marketing.
To exercise any of these rights, email us at hello@velombe.com. We will respond within 30 days.
7. Data Security
We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, and access-controlled infrastructure. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but we work to protect your data to the best of our ability.
8. Children's Privacy
Twy is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are material, we will notify you by email. Continued use of Twy after changes constitutes acceptance of the revised policy.
10. Contact
Questions, concerns, or data requests can be sent to:
Velombe
hello@velombe.com