Privacy Policy
Last updated: November 11, 2026
Keys for Two is run by Complete OS LLC. You can play without an account or an email address. We don't sell data or show ads, and the game doesn't use AI. Echo, the practice partner, is built-in game logic.
What we collect, and why
- A random device ID, stored on your device. We store only a scrambled (hashed) copy, so your progress and games stay yours.
- Your first name or nickname, if you enter one. Your partner sees it, and it appears on links you share.
- Game progress: your games with a partner, streaks and settings.
- A username and scrambled passcode, only if you save a username, so you can sign in on another device.
- Notification details, only if you turn on notifications: a push address from your browser (or, in the iPhone and iPad app, an Apple push token for your device) and the timing you chose.
- Unlock status. On the website, Stripe takes your payment details. In the iPhone and iPad app, Apple takes the payment and sends us a signed receipt with a transaction number, price and currency, which we check and keep. In the Android app, Google Play takes the payment; we check the purchase with Google and keep only a one-way fingerprint of Google's purchase token, and we give Google a one-way code for your device so it can match the purchase to you. Either way we never see your card and only record that the unlock was paid for.
- Free trial, if you start it: when it started and ends, against your device's random code (in the iPhone and iPad app, also Apple's transaction number for the free trial item, so a reinstall doesn't start a new one).
- Usage and error data: anonymous gameplay events (not names or game links), error reports, and normal server logs including IP addresses.
Who handles it
- Supabase: stores the game data.
- Vercel: hosts the site.
- Stripe: takes payments on the website.
- Apple: takes payments in the iPhone and iPad app, and delivers its notifications.
- Google: takes payments in the Android app (Google Play).
- PostHog: anonymous usage analytics.
- Sentry: error reports.
- Your browser's push service (such as Apple, Google or Mozilla): delivers notifications if you turn them on.
These companies process data for us, mostly in the United States. We may also share data if the law requires it, or with a buyer if the business is ever sold.
How long we keep it
We keep game and account data while you use the game, and until you ask us to delete it. If you ask, we delete it within 30 days. We keep payment records for as long as tax and accounting law requires. Analytics and error data follow those providers' retention periods.
Your rights
You can delete your username in your account. Signing out clears this device. To ask for a copy, a correction or deletion of your data, email hello@completeos.app and we will respond within 30 days. Because we hold no email address, we may ask you to prove the data is yours, for example from the device that created it. Depending on where you live, you may have further rights under local privacy law.
Security and age
Data is encrypted in transit, and your passcode is stored only in scrambled form. No system is perfectly secure, and anyone with a game link can open that game. The game is for ages 13 and up, and we don't knowingly collect data from younger children. If you think we have, email us and we will delete it.
Changes and contact
If this policy changes, we will update this page and its date. Questions: Complete OS LLC, hello@completeos.app.