Is it safe?

You’re trusting me with your inbox. Here’s what that means.

What I promise, in plain words. The full list of who handles what is on the privacy page, where it belongs.

DRAFT · to Mei Tanaka
SEND
your tap
Mei’s inbox
nothing arrives until you tap
The one line I never cross. The same gate stands in front of every double and every route.

Nothing is sent until you tap Send.

I draft. I never send. An email leaves your mailbox when you tap Send or at the time you chose, after a screen that names who it goes to. My doubles can draft too; none of them can send.

Your data is stored in Sydney.

Everything I remember lives in a database in Sydney. When I write an answer or a draft, an AI provider sees the question and the records needed to answer it. The providers and their terms are named on the privacy page.

Private stays private.

Health, family and money are kept out of answers, out of my doubles and out of Claude unless you ask. You decide what counts as private, and you can change your mind.

Some things I never read.

Put a company or a word on your Never-read list and anything that matches is never read: not in answers, not by my doubles, not when you share a space with someone.

You choose how far back I look.

When you connect a mailbox (Outlook, Microsoft 365, Outlook.com or Gmail), you pick what I read: nothing from the past, or the last 1, 3, 6 or 12 months. I show you how much that is before I start.

Only you, and the assistant you connect, can read your account.

Access rules are the same for the app, for connected assistants and for my doubles. No person at Twoself reads your data unless you ask for support, or for a security or legal reason.

The keys to your mailbox are locked away.

They are stored encrypted, and you can revoke them in Settings at any time.

Google data.

Twoself’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The detail is in the privacy policy.

What’s still to come.

Export of everything in open formats, then permanent deletion on request with backups cleared within 30 days: from launch. An independent security review before public launch, with the result summarised here. Until then, write to us and we will delete your account by hand.

Found a problem?

Tell me first.

team@twoself.ai. You’ll get a reply from a person within two working days. Please don’t test against other people’s accounts.

The full version

Privacy policy and terms.

Who handles what, for how long, and how to ask for your data to be deleted. Read the privacy policy