Privacy Policy

1. Information We Collect

We do NOT collect, transmit, or store:

• Your encrypted messages or message content
• Your username or identity information
• Your private encryption keys
• Your paired contacts list
• Your passcode or biometric data
• Morse code, steganography, or transformed text content
• QR codes or pairing data
• Backup codes or encrypted backup data

Twistext does not use analytics or telemetry beyond standard App Store and Google Play Store reporting, which is managed by Apple and Google respectively.

2. How Your Data is Stored

All Twistext data is stored locally on your device using encrypted storage (MMKV):

• Username: Stored only on your device, never transmitted to any server
• Encryption keys: Generated and stored in your device's secure enclave (iOS Keychain / Android Keystore)
• Paired contacts: Stored locally; only you have access to this list
• Settings and preferences: Stored locally on your device

There is no Twistext account server. Your identity exists only on your device.

3. Encryption & Message Processing

All message transformations (Morse code, invisible steganography, text reversal/flipping, Matrix-style encoding) happen locally on your device in real-time.

4. Sharing & Transmission

Twistext generates encrypted messages (or transformed text) that you can share through any communication channel you choose — WhatsApp, email, SMS, social media, etc.

Important: When you share encrypted messages or content through third-party platforms, those platforms' privacy policies apply. Twistext does not transmit, route, or store your messages. We do not control what happens to content after you share it.

Messages may include an optional share watermark ("✨ Twistext") which can be toggled off by Premium subscribers.

5. QR Code Pairing

To securely pair with contacts, Twistext uses a QR code exchange system:

• You can display your pairing QR code or scan another user's QR code
• Camera access is used only for scanning QR codes during the pairing process
• Paired contact data is stored locally on your device only
• No pairing information is transmitted to Twistext servers

6. Device Permissions

Twistext requests the following device permissions:

• Camera: Used only for scanning QR codes during contact pairing. No photos or videos are captured or stored.
• Photo Library: Used only when you explicitly choose to decode hidden steganographic data from an image. Access is limited to images you select.
• Face ID / Touch ID (Biometric Authentication): Optional. Used to unlock the app if you enable biometric authentication in Settings. Biometric data is handled entirely by your device's operating system — Twistext never stores or accesses your biometric information.

Twistext does not use your microphone, location, contacts list, or any other sensitive permissions.

7. Passcode & Authentication

During onboarding, you set a numeric passcode to protect your app. This passcode is stored securely on your device and is never transmitted to any server. Biometric authentication (Face ID/Touch ID) is optional and managed entirely by your device's operating system.

8. Backup & Restore (Premium Only)

Premium subscribers can create encrypted account backups that include:

• Your encryption keys
• Paired contacts list
• App settings

Backup codes are generated and encrypted locally on your device. You are responsible for storing your backup code securely. Twistext does not store or have access to your backup codes.

9. Subscriptions & Payments

Twistext offers Free and Premium subscription plans (monthly or annual):

• All in-app purchases are processed by Apple App Store or Google Play Store
• Subscription management is handled by RevenueCat
• Twistext does not store or process your payment details
• Payments are processed securely by Apple and Google

10. Third-Party Services

Twistext integrates with:

• RevenueCat: For subscription management and in-app purchase processing
• App Store / Google Play: Standard analytics and crash reporting provided by Apple and Google

Twistext does not use third-party analytics, tracking, or advertising services. We do not share your messages, identity, or usage patterns with third parties.

11. Data Security

Twistext is designed with security and privacy as foundational principles:

• All encryption and decryption happens locally on your device using native cryptographic modules
• Private keys are stored in your device's secure enclave (Keychain on iOS, Keystore on Android)
• Local data is encrypted using MMKV encrypted storage
• By operating without servers, we eliminate the risk of server-side data breaches
• Your messages, keys, and identity never leave your device unless you explicitly share encrypted content

12. Children's Privacy

Twistext is not intended for children under the age of 13. Because we do not collect or store user data on servers, we do not knowingly collect personal information from anyone, including children. If you are a parent or guardian with concerns, please contact us at the email below.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, features, or legal requirements. We encourage you to review this page periodically. The “Last updated” date at the top indicates when this policy was last revised.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or how Twistext handles data, please contact us at: