Last updated 10 October 2026 · Growthx Ventures Pty Ltd, ABN 75 632 942 208, Sydney, Australia
This policy is written to the Australian Privacy Principles and is under review by our lawyers; it may change. If a change reduces your privacy, we will email every account holder 30 days before it takes effect.
Twoself holds a copy of the work you connect to it (your mail, calendar, LinkedIn network, notes and files) so it can answer your questions, keep track of people and promises, and draft messages for you. We store it in Sydney. AI providers see the question and the records needed to answer it, on paid terms that do not allow training. We never sell it, never use it for advertising, and never read it ourselves except as this policy says. You can export it and delete it.
Growthx Ventures Pty Ltd (ABN 75 632 942 208), an Australian company based in Sydney, operates Twoself. Privacy questions: team@twoself.ai.
| What | Where from | Why |
|---|---|---|
| Your name, email address, time zone, language, sign-in details | You, at sign-up | To run your account |
| Mail and calendar: senders, recipients, subjects, bodies, attachments’ names and text, dates, meetings and attendees | The mailbox and calendar you connect (Microsoft 365, Outlook.com, Gmail or Google Calendar), for the period you choose at connection (none, 1, 3, 6 or 12 months back), then ongoing | To build your record of people, promises and conversations; to draft replies; to brief you |
| Your LinkedIn network: connections, messages, posts, comments, invitations, your profile and positions | The data file you download from LinkedIn and upload to Twoself | To know who you know and to join it to your mail |
| Notes, tasks, memories, files and anything you type or dictate | You | To remember what you tell us |
| Questions you ask and the answers given, drafts, helper runs and their findings | Your use of Twoself, in the app or through a connected assistant | To answer you, to let you see what helpers did, and to improve your own account’s results |
| Company information: name, website, industry, size, news | Public web sources, looked up when you ask about a company or add one | To brief you |
| Payment details | Our payment provider, from public launch | To bill you. We never see your full card number |
| Technical data: browser, device, pages opened, errors, timings | Automatically, when you use the app | To keep Twoself working and secure |
Most of what you connect is about other people: your clients, contacts, correspondents and connections. We hold it on your behalf and under your instruction, the way your mailbox and address book already do. We use it only to serve you. We do not contact those people, add them to any list, enrich their records beyond public company information you ask for, or share them with any other Twoself user. If one of them asks us to correct or remove their information, we will tell you and, where you do not act within a reasonable time or the law requires it, act ourselves. You are responsible for holding their information lawfully, and for any confidentiality duties you owe them.
Mail and messages sometimes contain health, family, financial or other sensitive information about you or others. We do not ask for it and do not need it. Twoself screens incoming items and marks the ones that look sensitive as private; private items are kept out of answers, briefings, helpers and connected assistants unless you choose to show them, and you can delete them. Add any company, person or word to your Never-read list and matching items are never read or stored.
To provide Twoself to you; to answer your questions and run the helpers you switch on; to draft messages you may send; to bill you and tell you about your account; to keep Twoself secure and find faults; to understand use in aggregate so we can improve the product; and to meet legal obligations. We do not use your information to advertise to you or anyone, to sell, to build profiles of your contacts for others, or to train or improve any general AI or machine-learning model.
To write an answer, briefing or draft, Twoself sends the question and the records needed to answer it to an AI provider. Today that is Google (Gemini models); we may add Anthropic and OpenAI. Each provider is engaged on business terms under which it does not use your data to train its models and keeps it only as long as needed to respond. Processing happens where the provider operates, which may be outside Australia. The current list, with each provider’s location and purpose, is on the Sub-processors page and is updated whenever a provider is added or removed.
If you connect Twoself to an AI assistant you use, the assistant reads your information through Twoself when it decides it needs to, under its own privacy terms, and can save notes, tasks and drafts into Twoself. Private items reach a connected assistant only as counts unless you ask for them. You can revoke the connection in Settings at any time.
When Gmail or Google Calendar is connected, Twoself’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide and improve user-facing features of Twoself; we do not transfer it except to provide those features with your consent, for security, or as the law requires; we do not use it for advertising; no person at Twoself reads it unless you ask us to for support, or for security or legal reasons; and we do not use it to develop, improve or train generalised AI or machine-learning models. Scopes requested: read your Gmail (gmail.readonly), send from your Gmail only on your tap or schedule (gmail.send), read your calendars (calendar.readonly), and your email address (userinfo.email). Until Google’s review of Twoself is complete, Gmail connects through Google’s testing mode and asks you to reconnect every seven days. Disconnecting Google in Settings stops collection at once and deletes the Google-derived records within 30 days.
Twoself reads and, only on your tap or schedule, sends mail through Microsoft’s APIs with the permissions you grant at connection. Disconnecting in Settings stops collection at once. Work accounts may require your organisation’s administrator to approve the connection.
Our sub-processors (hosting, AI, payments, email delivery, error reporting), each named on the Sub-processors page, under contracts that limit them to our instructions. Professional advisers under confidentiality. Authorities, where the law requires. A buyer of the business, after notice to you. No one else, and never for their own purposes.
Your information is stored in a database in Sydney, Australia. AI providers process questions where they operate. We do not say your data “stays in Australia”, because that part does not.
For as long as your account exists. Disconnect a source and new data stops at once. Delete an item and it is removed from your account. Delete your account and everything is kept for 30 days in case you change your mind, then permanently deleted, with backup copies removed within a further 30 days; we keep a one-way hash of your email address to prove the deletion. Billing records are kept for seven years as Australian tax law requires. Helper run details are kept for 90 days, then archived without content.
Data encrypted in transit and at rest; access rules enforced in the database for every door into Twoself (the app, connected assistants and helpers); keys held in a secrets vault, never in code; sign-in tokens for your mailbox stored encrypted; staff access to customer data limited, logged and used only for support you ask for or for security; independent security review before public launch. Twoself never sends a message unless you tap Send or schedule it. If we discover a breach that is likely to cause you serious harm, we will tell you without undue delay, and the Office of the Australian Information Commissioner where the law requires. The plain-words version is on Is it safe?
See everything we hold: it is your account. Correct it: edit it. Export it: Settings, in open formats (from public launch). Delete items, sources or your whole account: Settings, or write to us. Turn helpers, briefings and emails off: Settings. Ask us a question or make a complaint: team@twoself.ai; we answer within 30 days. If you are not satisfied you may complain to the Office of the Australian Information Commissioner (oaic.gov.au). Residents of the UK or EU: we do not currently offer Twoself to you.
twoself.ai uses only what it needs. The website sets no advertising or tracking cookies and uses no third-party analytics that profile you. The app sets a sign-in cookie and uses your browser’s local storage to remember your settings, such as your colour scheme; it would not work without them. You can clear cookies and local storage in your browser at any time; you will be signed out.
When you join the waitlist we hold your email address, which mail service you use, and anything you type in the optional box, to confirm the address, invite you, and send at most one note a month. Every email has an unsubscribe link, and we delete your details when you ask or when the waitlist closes.
Twoself is for people 18 and over. We do not knowingly hold a child’s account; tell us and we will delete it.
We will post changes here with the date. If a change reduces your privacy, we will email you at least 30 days before it takes effect.