Privacy

twoseats is a small, invite-only app for finding things to do in Barcelona each week. This page explains in plain language what data we keep, why, who receives it and how you can delete it.

Who is responsible

Alejandro Mata, Barcelona, is responsible for your data (the data controller). Contact: alemalvarez@icloud.com.

What we keep and why

• Your email address, so you can sign in with a magic link (no password) and so we can write to you if something went wrong for you.
• The waitlist. If you join it, we keep your email and the date, only to send you your invite.
• Your profile: the name and emoji shown next to your hearts.
• Hearts and seen marks: the events you save with a heart and the ones you mark as seen. People who follow you can see them. Right now the app has no way to search for or follow people; when it does, we will explain it here.
• Your scores: for each event, a number from 0 to 100 for how likely you are to enjoy it. Only you see them, and they order your board.
• Your taste profile: an internal text describing what you like, which we use to work out your scores. Nobody sees it in the app, not even you: it is a working tool, not a file about you. It is written from your answers to the onboarding questionnaire and from your marks.
• Coming soon: your answers to the onboarding questionnaire and the events you mark as “not for me”. They are used to write your taste profile.
• How you use the app: which pages you open, where you tap, the errors you hit, and session recordings (a replay of what happens on screen). Once you accept these terms at your first sign-in, this is linked to your user ID and your email, so we can see where you got stuck and write to you. Before that (on the home page, the waitlist and the sign-in page) we only count visits and clicks anonymously: nothing is stored in your browser, nothing links them to you, and there are no session recordings. The events we send carry IDs, not the text you type.
• Technical logs: the servers log requests (IP address, browser, time) to run the service and keep it secure.

Why we are allowed to

• Your account, profile, marks, scores and taste profile: they are what the app is, so we need them to provide it to you under the terms of use.
• Analytics and session recordings linked to you: your consent, which you give at your first sign-in. You can withdraw it by writing to us or by deleting your account.
• The waitlist: you asked us to send you an invite.
• Anonymous visit counts, technical logs and the human check on the waitlist: our legitimate interest in knowing whether the site works and keeping it secure.

Cookies

We use the session cookie (to know you are signed in), a cookie that remembers you have accepted these terms, and, once you have accepted, an identifier our analytics provider stores in your browser. There is no advertising and no third-party cookies that follow you around other sites.

Who receives the data

We use these services to run twoseats. Each one receives only what it needs to do its job. We do not sell data to anyone.

• Hosting and database providers. Run the app, store your data and send the sign-in email. Receives: Everything described above, plus technical logs (IP address, browser). Your data is stored in the European Union.
• An analytics provider. Usage analytics and session recordings, hosted in the European Union. Receives: Before you accept these terms, only anonymous visit counts. After, what you do in the app, linked to your user ID and email.
• An AI provider. The language model that scores events for you. Receives: Your taste profile and public event information, never your email or your user ID.
• Developer tools. Run the nightly scoring job, keep its logs and store database backups. Receives: Your user ID, taste profile and scores; the backups also hold your account data.
• An anti-spam service. Checks that you are a person when you join the waitlist, on that form only. Receives: Your IP address and technical signals from your browser.

Some of these providers are based in the United States. Data sent there is protected by the safeguards EU law requires, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. For the list of providers, write to alemalvarez@icloud.com.

How long we keep it

• Account data (email, profile, marks, scores, taste profile): for as long as you have an account. We delete it when you delete your account or ask us to.
• The waitlist: while the waitlist exists. You can ask us to remove you at any time.
• Analytics: up to 1 year. Session recordings: up to 30 days.
• Logs of the scoring job: we use the last 30 days. The provider may store them longer under its own policy; we delete yours when you delete your account.
• Technical logs: kept by our hosting providers for a short time, hours to a few days.
• Database backups: 30 days, then they are deleted automatically.

How to delete your account

Deleting your account removes your email, your profile, your hearts and seen marks, your follows, your scores and your taste profile. We also delete your profile in our analytics tool (the analytics and recordings linked to you). Backups that still contain them disappear within 30 days.

Soon you will be able to do this yourself from the app’s settings. Until then, write from your account’s email address to alemalvarez@icloud.com and we will delete it by hand.

Your rights

You can ask for a copy of your data (including your taste profile), correct it, delete it or object to a use of it, by writing to alemalvarez@icloud.com. If you think we are not handling it properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Changes

If we change what we keep or who receives it, we will update this page and the date at the top. If the change is significant, we will let you know in the app. The terms of use cover the rest.