Together Privacy
Updated · iOS
Together is operated by Changsha Wushi Cultural And Creative Co., Ltd. This notice explains the information used to pair two people and coordinate consensual app restrictions. Together is a personal focus and connection app for adults; it is not intended for children or parental monitoring.
Information we process
- Your chosen display name and a random app identity. The phone stores its authentication credential in Keychain; the server stores a hash of that credential.
- Your profile message (whisper), selected built-in avatar and theme.
- Pairing records, shared relationship and session rules, invitation activity or message text, chosen duration, session deadlines, responses and early-ending messages. The service also stores thinking-of-you activity and tap counts, small mood interactions, and shared appointment details and responses.
- Whether each person chose all restrictable apps or a selected set, and a random version reference for that choice, so changes can require both people’s agreement. The reference does not contain app names or selection tokens. A shared choice does not copy the specific apps selected on one phone to the other phone.
- Status reports that a participating phone restricted selected apps, failed to do so or released its restrictions. These reports contain session and identity references, not your app selection.
- If you allow notifications, your Apple push notification device token and its association with your app identity, so we can send interaction reminders.
We use these records to provide pairing, shared sessions and reliable responses. Network requests expose your IP address. General request rate limits use in-memory records; email verification also stores a hash of the IP address with rate-limit counters and time windows in the service database to prevent abuse. Web server error logs may retain IP addresses, request paths and error details for technical troubleshooting. These security and diagnostic records are not used for advertising or cross-app tracking.
What stays on your phone
Your Screen Time app, category and website selection tokens stay in the app’s local storage and are not uploaded to our server. Together does not collect your browsing history or upload your Screen Time selection list. Your saved identity, cached shared state, local start confirmation and app preferences are also stored on the phone. Photos and written notes you add to Our diary stay on this phone and are not uploaded to our server. Session summaries and thinking-of-you activity may be drawn from the service records described above; your added diary photos and notes have no cloud backup in Together.
Together has no advertising, cross-app tracking or Sign in with Apple. Core pairing and shared sessions do not require email sign-in; guests can change their display name and profile message. The app asks for email verification when you use PRO purchases or restoration, save a PRO avatar or theme, or add another connection. We use a one-time verification code to confirm your email address and let you sign in again. Linking an email to your current identity keeps your existing connections and agreements. We do not automatically merge separate identities.
Sharing and hosting
Your paired partner can see your display name, profile, shared rules, invitations, session status and messages exchanged through the app. Only share text you are comfortable showing to that person.
The pairing and session service is hosted on Tencent Cloud in Beijing, China. The app connects to this service over HTTPS. Verification and reminder emails are delivered through Tencent Enterprise Mail. Optional push notifications are sent through Apple Push Notification service. The notification contains a general interaction reminder and identifiers used to open the app, rather than your private invitation text or Screen Time selections. Delivery depends on Apple and your notification settings. If you enable email reminders, we use your verified email address to send general reminders about invitations and agreement responses. Reminder emails do not include private invitation text, app selections or device usage data. You can turn reminders off without disabling sign-in verification emails. Email delivery and reading are not guaranteed. Verification codes expire and may only be used once. We apply sending and verification limits to protect accounts and control abuse. If you email support, we receive the information you choose to send and use it to handle your request.
Purchases and subscriptions
If you purchase PRO, Apple processes your payment. We do not receive payment-card details. Our server verifies Apple-signed app and purchase records and notifications and keeps an account token, order and transaction identifiers, product, price and currency when supplied by Apple, purchase and expiry times, environment, and refund or revocation status to provide and restore your access. These records are associated with your app identity. We retain the purchase ledger after identity deletion to handle purchase ownership, duplicate delivery, restoration and refunds; it cannot reactivate a deleted identity or transfer a purchase to a different identity. Contact support for purchase-record privacy requests.
Deleting an app identity does not cancel an App Store subscription. Manage or cancel it in your Apple account. Apple’s standard end-user licence agreement applies unless a separate agreement is provided.
Keeping and deleting information
Your identity and profile remain while that identity exists. Unpairing removes the shared pairing records; deleting an identity removes that identity and its shared pairing records. A session ending does not automatically erase your identity or every related record.
While connected, open your profile and choose Delete identity. Successful deletion removes your server identity, profile and related pairing records, including shared invitations, session state and stored action responses. Your partner’s separate identity and profile remain. Deletion also removes your registered notification tokens and notification records. Unpairing removes notifications for that pairing; the notification token can remain associated with your identity until you delete it or unregister notifications. The app also removes the local diary for this identity, including its added photos and notes, and clears its saved identity and active restrictions on this phone; local preferences and Screen Time selections may remain. Keep any diary memories you want before deleting the identity.
Start Again, shown when this version cannot use an identity saved for another service, only removes that phone’s saved identity and restrictions. It does not delete the old service’s records. Deletion from the active service does not erase copies your partner has made or correspondence sent to support, and does not guarantee erasure from any earlier backup.
Contact
For privacy questions or deletion help, email leon@cswushi.cn. Do not send passwords, authentication credentials or pairing codes.