How TYGA-Liberty v.o.f. handles personal data for twiyo.app and TWIYO.
Last updated: June 2026
Data controller: TYGA-Liberty v.o.f., Lankhorsterweg 13, 7951 PM Staphorst, the Netherlands. Contact: info@twiyo.app or the form at twiyo.app/contact.
App content (photos, words, progress, settings): stored in your browser/device (IndexedDB). We do not receive this data on our servers.
Contact and organization forms: name, email address, and message you submit.
Subscriptions: payment and customer data via Stripe (e.g. email, subscription status, billing details). We do not store card details ourselves.
Website statistics: visit statistics via Google Analytics and Vercel Web Analytics (only after consent in the cookie banner).
Parent account: the email you sign in with, a one-time verification code by email, and a session token in your browser (localStorage) to keep you signed in.
Device and license data: an anonymous device ID (localStorage), a functional cookie (twiyo_cus) to remember your Stripe customer ID for Premium sync, and subscription status in localStorage.
Dynamic speech (Premium): words or sentences you type in the speller or phonetic AAC text are briefly sent to our server to generate mp3 audio (/api/tts). We do not permanently store that text.
Optional: your child’s first name in parent settings (device only) and search terms when picking images (Openverse/Wikipedia); chosen images are stored locally.
Premium trial: you do not need to provide an email address to start the trial. When you start (or use the one-time extension), our server records only an anonymous device ID, start and end dates, and language. Only if you are already signed in to parent settings at that moment may that existing login email appear in our internal summary — we do not ask for it separately for the trial.
AI help assistant: questions you type in the website chat and a short conversation history (max. a few turns) are sent via our server to OpenAI to generate an answer. We do not permanently store those messages.
Providing and improving TWIYO, customer support, subscription management, security, and answering inquiries.
Contract performance (app and Premium), legitimate interest (security, statistics), and consent where required (e.g. forms you submit).
App data stays on your device until you delete it or clear app data. Form messages and Stripe data are kept only as long as needed for support, administration, and legal obligations.
Stripe (payments) — stripe.com/privacy. May process data outside the EU with appropriate safeguards.
Formspree (contact forms) — formspree.io/legal/privacy-policy. Data may be processed in the United States.
Vercel (hosting, website analytics, and API) — vercel.com/legal/privacy-policy. May process data outside the EU with appropriate safeguards.
Resend (transactional email: login code, Premium welcome email; internal weekly summary of expiring trials to TWIYO) — resend.com/legal/privacy-policy.
Upstash Redis (short-term storage of login codes, max. ~10 minutes; and anonymous trial forecast, max. ~90 days — no email unless you are already signed in as a parent) — upstash.com/trust/privacy.html. Via Vercel Storage when configured.
Microsoft (Edge TTS via our /api/tts route for dynamic speech) — privacy.microsoft.com. Text is briefly processed to generate mp3 audio; we do not permanently store that text.
Openverse, Wikipedia, and Wikimedia (in-app image search; search terms) and our image proxy for importing chosen images — see those services’ privacy policies.
Google Analytics (website statistics and ad measurement, only after consent) — policies.google.com/privacy. May process data outside the EU with appropriate safeguards.
OpenAI (website AI help assistant: your question and recent chat history are processed to generate an answer) — openai.com/policies/privacy-policy. May process data in the United States with appropriate safeguards. We do not permanently store chat messages.
You may request access, correction, deletion, restriction, objection, and portability where applicable. Email info@twiyo.app. You may file a complaint with your supervisory authority.
TWIYO is intended for use by or under guidance of parents/caregivers. Adults purchase subscriptions. We do not knowingly collect children’s data via forms.
We use HTTPS, limit system access, and choose reliable processors. No method is 100% secure; report issues via contact.
TWIYO only uses necessary storage for operation and security. For website statistics, we ask permission first via the cookie banner. Without consent, we do not load Google Analytics, Vercel Analytics, or Speed Insights.
You can always change your choice via “Cookie settings” in the footer. We only store your consent choice (statistics on/off) locally in your browser.
Necessary storage and cookies (no separate consent): device ID (localStorage), cookie choice, parent session, settings, subscription cache, twiyo_cus cookie (Stripe customer ID for license sync, max. ~400 days), and anonymous server logging when a Premium trial starts (see “What data?”).
We may update this policy. The date above will change. Material updates will be noted on the site.
De app kon niet starten. Vernieuw de pagina of open twiyo.app opnieuw in de browser.
The app could not start. Refresh or open twiyo.app again in your browser.