TwoPillows helps two parents share the nights, the everyday tasks and the hard first years with a baby. To do that, the app keeps some personal information — including information about pregnancy, your baby and how you are feeling. This policy explains what we collect, why, who helps us run the service, and the choices you have.
The service is provided by Lypii Apps, a sole proprietorship (eenmanszaak) of Serhii Lypii registered in the Netherlands (KvK 99817039, VAT NL005412268B54), Juliana van Stolbergstraat 28, 4532 AZ Terneuzen, the Netherlands ("we", "us"). We are the controller of your personal data. Contact: serhii@lypii.nl.
The short version
- We collect what the app needs to work for the two of you, and nothing to sell. We do not sell or rent personal data, and we do not use it for advertising.
- What you share with your partner (night plan, tasks, thank-yous, check-in answers) is visible to your partner. What is marked "Only you can see this" is not.
- Wellbeing screening results are encrypted on your phone with a key that never leaves it. We store only the encrypted result and cannot read it.
- Usage analytics are off until you turn them on.
- You can export your data and delete your account in the app at any time.
What we collect
Information you give us
| What | Examples | Who can see it |
|---|---|---|
| Account | Your name, your role ("pregnant or gave birth", "partner", "we're adopting", "something else"), the colour you picked; if you sign in with Apple or Google, the account identifier and, if shared, your email and name | You and your partner (name, role, colour) |
| Family and stage | Due date or birth date, whether it's your first child, the baby's name (optional), adoption and the date the baby came home | You and your partner |
| Shared planning | Night plans and changes you suggest, how you feed (breast, formula, mixed), task cards and who owns them, notes on tasks, "invisible" tasks you log, thank-yous and the words you add, lesson progress | You and your partner |
| Daily check-in | How you feel, your energy, what you need from your partner; your rating of the night | You; your partner once you both answered (or right away, if your couple chose that) |
| "Need help" requests | That you asked your partner for help, when, and whether they answered | You and your partner |
| Wellbeing screening | Your answers and score | Only you. Encrypted on your device; we store only ciphertext we cannot decrypt |
| Settings | Notification choices, check-in reminder time, sensitive topics you turned on, pregnancy-loss mode | You (pregnancy-loss mode applies to both of you) |
| Invites | A six-digit code and the message you send with it (kept for up to 48 hours) | Whoever you give the code to sees your name, your baby's age or due date and your message |
Information collected automatically
- Device and notifications: a push-notification identifier for each of your devices, the device platform, its language and your time-zone offset (so notifications come in your language, at the right time and not during your quiet hours).
- Technical logs: our servers and our hosting provider record standard request data such as IP address, time and the page or function requested, for security and to keep the service running.
- Usage analytics (only with your consent): a small set of product events — for example that an account was created, a partner was invited or joined, a night plan was created — linked to a random account identifier. No names, emails, notes, answers, dates of pregnancy or birth, or screening results are sent. Session recording is off. You can turn analytics on or off in your profile.
Purchases
Subscriptions are bought through the App Store or Google Play. We never see your card details. We receive from the store, through our payment processor, which plan you bought, its status, renewal and expiry dates, and a transaction identifier, so that both partners get access.
Gift codes are bought on our website through Paddle, the merchant of record. Paddle collects the buyer's email address, country and payment details; we never see card details. We receive from Paddle the transaction identifier, the gift bought, and the names and message the buyer typed for the card, and we keep them with the code so the right couple can redeem it.
Information about your baby
You may enter your baby's name and date of birth or due date. We use it only to show the right lessons and stages and to personalise texts (for example, "Leo is 6 weeks"). The app is for parents; it is not directed to children, and we do not knowingly collect information from anyone under 16.
Why we use it, and on what legal basis
| Purpose | Legal basis (EU/UK) |
|---|---|
| Running the app for you and your partner: accounts, pairing, syncing plans and tasks, notifications | Performance of our contract with you |
| Processing health-related information: pregnancy and birth dates, check-in answers about mood and energy, wellbeing screening, pregnancy-loss mode | Your explicit consent, which you give when you enter this information. You can withdraw it at any time by deleting the information or your account |
| Subscriptions and access for both partners | Performance of contract; legal obligations (tax, accounting) |
| Usage analytics | Your consent |
| Security, preventing abuse, keeping logs | Our legitimate interest in a safe, working service |
Who helps us run the service
We use the following service providers ("processors"). They may only use your data to provide their service to us.
| Provider | What for | Where |
|---|---|---|
| Google (Firebase: Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging) | Accounts, storing and syncing app data, server logic, push notifications | Data stored in the EU (Netherlands, europe-west4); some processing by Google in other countries |
| Apple | Sign in with Apple, push notifications to iPhone, App Store purchases | United States and other countries (Apple's privacy policy) |
| Google Play | Sign-in with Google, Android purchases | United States and other countries (Google's privacy policy) |
| RevenueCat | Verifying store purchases and subscription status | United States |
| Paddle | Selling gift codes on our website (payment, tax, receipts, refunds) | United Kingdom |
| PostHog (EU cloud) | Usage analytics, only if you consent | European Union |
| Hostinger | Delivering lesson and task content to the app, invite link and gift pages | Netherlands (backups in France) |
When data is transferred outside the EU/UK, we rely on the safeguards the provider offers, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework where the provider is certified.
We may also disclose information if the law requires it, or to protect someone's safety.
Your partner
TwoPillows is built for two. When you join a couple, the shared parts listed above become visible to your partner. If you end the couple, shared plans, tasks and the effort feed are archived; your private information stays with you. If you subscribed, the subscription stays with the person who paid.
How long we keep it
- While your account exists, we keep your data so the app keeps working.
- If you delete your account, you have 30 days to change your mind. After that we delete your account and personal data from our systems. Backups and logs that may contain it are overwritten within 30 days after that.
- Invite codes expire after 48 hours. Purchase records are kept as long as tax and accounting law requires.
- When a couple ends, shared data of the archived couple is kept for as long as either former partner's account exists and then deleted.
Your rights and choices
- Access and portability: Profile → Export data gives you a copy of your data.
- Correction: you can change your name, colour, stage and dates in the profile.
- Deletion: Profile → Delete account.
- Consent: turn analytics off in the profile; delete check-ins, notes or screening results, or your account, to withdraw consent to health-related processing.
- Notifications: each type can be turned off in the profile or in your phone's settings.
- Depending on where you live (for example the EU, the UK, or US states such as California and Washington), you may also have the right to object, to restrict processing, to know what we collected, and to appeal a decision we make about your request. Write to serhii@lypii.nl; we answer within the time the law sets (for example one month in the EU and UK).
- You can complain to your data protection authority — in the Netherlands the Autoriteit Persoonsgegevens, in the UK the Information Commissioner's Office.
Consumer health data (US)
Some information in TwoPillows can be "consumer health data" under laws such as Washington's My Health My Data Act: pregnancy and birth dates, check-in answers about mood and energy, wellbeing screening and pregnancy-loss mode. We collect it only to provide the features you use, with your consent, we do not sell it, and we share it only with the processors listed above and with your partner as described. You can withdraw consent and ask for deletion as described in "Your rights and choices".
Security
Data is encrypted in transit and at rest by our providers. Access to your couple's data is limited by security rules to the two of you; screening results are additionally encrypted on your device. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
When you are in crisis
The "I'm having a really hard time" screen shows helplines for your country. Calls and messages go directly from your phone to those services; we do not record them and they are not part of your app data.
Changes
If we change this policy in a way that matters, we will tell you in the app before the change takes effect.
Contact
Lypii Apps, Juliana van Stolbergstraat 28, 4532 AZ Terneuzen, the Netherlands · KvK 99817039 · VAT NL005412268B54 · serhii@lypii.nl
RomaTalk
Vistadose
TwoPillows