Twine Privacy Policy
Last Updated: May 2025
Our Privacy Commitment
At Twine Campus, we believe privacy is fundamental to building trust within college communities. This policy explains how we collect, use, protect, and share your information.
Key Principles:
- We never sell your personal data
- You control your information
- Transparency in our practices
- Security by design
1. Information We Collect
1.1 Account Information
What we collect:
- Name and email address
- University affiliation
- Phone number (for verification)
- Profile photo (optional)
- Year of study
- Major/interests (optional)
Why we collect it:
- Verify your student status
- Connect you with classmates
- Provide personalized experiences
- Ensure community safety
1.2 Content You Create
- Messages and chat history
- Posts in Circles
- Event details you create
- REMI conversation history
- Photos and files you share
1.3 Usage Information
Automatically collected:
- App interactions and features used
- Event attendance (via QR check-ins)
- Study session duration in Circles
- REMI query patterns
- Device information (type, OS, app version)
- IP address and approximate location
Analytics we track:
- Feature popularity
- User engagement patterns
- Performance metrics
- Error reports
1.4 REMI AI Interactions
- Text queries and responses
- Voice recordings (temporarily, for transcription)
- Study preferences and patterns
- Academic interests
2. How We Use Your Information
2.1 Core Services
- Enable connections: Match you with classmates and study groups
- Deliver features: Messaging, events, Circles, REMI assistance
- Personalize experience: Recommend events, groups, and content
- Maintain safety: Detect and prevent harmful behavior
2.2 REMI AI Processing
- Provide academic assistance
- Generate study plans
- Answer questions
- Improve AI responses
- Detect crisis situations for support resources
2.3 Communications
- Service announcements
- Security alerts
- Feature updates
- Event reminders (if enabled)
- Community guidelines updates
2.4 Improvements
- Develop new features
- Fix bugs and issues
- Optimize performance
- Understand user needs
3. Information Sharing
3.1 What Others See
Public to verified students at your university:
- Your name and profile photo
- Year and major (if provided)
- Public posts in Circles
- Events you create
Private unless you share:
- Direct messages
- Private Circle discussions
- REMI conversations
- Contact information
3.2 When We Share Information
We may share data with:
- Service providers: Hosting, analytics, payment processing
- AI providers: OpenAI/Anthropic for REMI (anonymized)
- Legal requirements: Court orders, legal obligations
- Safety: Imminent harm prevention
- Business transfers: Mergers or acquisitions (with notice)
We never share with:
- Data brokers
- Advertisers
- Universities (unless legally required)
- Other students without your consent
3.3 Third-Party Integrations
- University SSO: For verification only
- Payment providers: Website payment processors for subscriptions
- Cloud services: AWS for secure storage
4. Data Security
4.1 Protection Measures
- End-to-end encryption for sensitive data
- TLS/SSL for data transmission
- Regular security audits
- Access controls and authentication
- Secure cloud infrastructure
4.2 Data Breaches
If a breach occurs, we will:
- Notify affected users within 72 hours
- Provide details of compromised information
- Offer guidance on protective steps
- Implement measures to prevent recurrence
5. Your Rights & Controls
5.1 Access Your Data
Request a copy of your information:
- Profile data
- Content you've created
- REMI conversation history
- Account activity logs
5.2 Control Your Information
You can:
- Edit or delete your profile
- Delete messages and posts
- Leave Circles and events
- Clear REMI history
- Adjust privacy settings
- Opt out of analytics
5.3 Delete Your Account
Via app settings:
- Tap "Delete Account"
- Confirm deletion
- 30-day recovery period
- Permanent deletion after 30 days
What happens:
- Profile removed
- Messages deleted from your view
- Events you created remain (anonymized)
- Some data retained for legal/safety reasons
5.4 Data Portability
Export your data in JSON format:
- Messages
- Profile information
- REMI conversations
- Event history
6. Children's Privacy
- Minimum age: 16 years old
- Under 18 requires parental consent
- We don't knowingly collect data from children under 16
- Parents can request deletion: support@twinecampus.com
7. REMI AI Specific Privacy
7.1 How REMI Works
- Queries processed by AI partners
- No personal info sent with queries
- Conversations stored for continuity
- Voice converted to text immediately
7.2 Your Control
- Delete individual conversations
- Clear all REMI history
- Opt out of REMI improvements
- Request human support instead
7.3 Safety Features
- Crisis detection triggers resources
- No human review without consent
- Academic integrity preserved
- Mental health resources prioritized
8. Data Retention
8.1 Active Accounts
Retained while active:
- Profile information
- Recent messages (1 year)
- REMI history (6 months)
- Event history (1 semester)
8.2 Inactive Accounts
- Reminder after 6 months inactive
- Deletion after 12 months inactive
- University verification expires yearly
8.3 After Deletion
May be retained for:
- Legal obligations (up to 7 years)
- Safety investigations (90 days)
- Aggregated analytics (anonymized)
9. Location Information
9.1 How We Use Location
- Show nearby events
- Connect with local students
- Provide campus-specific content
- Emergency notifications
9.2 Your Control
- Precise location optional
- Use university location only
- Disable location services
- Clear location history
10. California Privacy Rights (CCPA)
California residents have additional rights:
- Know what personal information is collected
- Know if information is sold (we don't sell data)
- Request deletion of personal information
- Non-discrimination for exercising rights
- Authorized agent requests accepted
To exercise rights: privacy@twinecampus.com
11. European Users (GDPR)
EU residents have rights to:
- Access personal data
- Rectification of inaccurate data
- Erasure ("right to be forgotten")
- Data portability
- Object to processing
- Withdraw consent
Data controller: Twine Campus, Inc. Contact: privacy@twinecampus.com
12. International Data Transfers
- Data processed in the United States
- EU-US Data Privacy Framework participant
- Standard contractual clauses implemented
- Appropriate safeguards in place
13. Cookies & Tracking
13.1 Technologies Used
- Essential cookies for functionality
- Analytics cookies (optional)
- No advertising cookies
- Local storage for app preferences
13.2 Your Choices
- Disable analytics in settings
- Clear app data anytime
- Browser cookie controls
- Do Not Track honored
14. Changes to Privacy Policy
- Review updates in-app
- Email notification for material changes
- 30-day notice for significant changes
- Previous versions available on request
15. Contact Us
Privacy Questions
Email: privacy@twinecampus.com
Response time: Within 48 hours
Data Requests
Email: privacy@twinecampus.com
Portal: twinecampus.com/privacy
General Support
Email: support@twinecampus.com
In-app: Settings > Help
Mailing Address
Twine Campus, Inc.
Attn: Privacy Team
[Address to be determined]
Data Protection Officer
legal@twinecampus.com
16. Specific State Rights
16.1 Nevada
Nevada residents may opt out of sale of personal information (we don't sell data): privacy@twinecampus.com
16.2 Vermont
Vermont residents have additional data broker rights (we're not a data broker).
16.3 Virginia
Virginia Consumer Data Protection Act rights available: privacy@twinecampus.com
17. Legal Basis for Processing
We process data based on:
- Consent: You agree via Terms of Service
- Contract: Necessary to provide Services
- Legitimate interests: Safety, improvements
- Legal obligations: Compliance requirements
18. Special Categories
We don't intentionally collect:
- Health data (except crisis support)
- Religious or political views
- Sexual orientation
- Genetic/biometric data
If shared in messages/posts, you control this information.
19. Security Reports
Found a vulnerability? Report to: safety@twinecampus.com
- Responsible disclosure program
- Bug bounty available
- Hall of fame recognition
20. Accessibility
This policy is available in:
- Screen reader compatible format
- Large print version
- Plain language summary
Request alternatives: help@twinecampus.com
Your Privacy Matters
We're committed to protecting your privacy while helping you make the most of your college experience. If you have questions or concerns about our privacy practices, please don't hesitate to contact us.
Effective Date: This Privacy Policy is effective as of May 2025 and replaces all previous versions.
Twine Campus, Inc. is committed to transparency, user control, and data protection in accordance with global privacy standards.