Privacy Policy
Last updated 9 October 2026 · 2U is operated by Growthpond Technology Private Limited, Bengaluru, India.
2U is anonymous text chat with people in your contacts. This policy describes exactly what reaches our servers, who can see it, and what you can have deleted. It describes the software as it is actually built, not as it would be convenient to describe.
What other people on 2U can see
Only two things: the random pseudonym we picked for you (for example "Velvet Meteor") and whether you chose 👨 or 👩. That is the whole profile. There is no name, photo, bio or age, and your phone number is never shown to anyone you talk to. Nobody learns who you are unless you tell them yourself in a message.
A chat may also carry one label: "🔒 In your contacts" (you saved their number), "🔒 Has your number" (they saved yours). The label never says which contact, and nothing else about your address book is ever shown to anyone.
Your contacts
2U pairs you with people you know first, so it needs your contacts. Here is exactly what happens to them.
- How they arrive. On Android, the app reads each contact's phone number and the name you saved it under. On the web you choose: sign in with Google (we read the names and numbers in your Google Contacts once, and do not keep any access to your Google account), or upload a contacts file, which your browser reads so that only names and numbers are sent. Nothing else in your address book — photos, emails, notes — is read.
- Names are used once, then thrown away. Each name is sent once to TypeSafe, whose AI model (Jev) judges two things from it: whether the person is a man or a woman, and what they are to you — family, work, a business, a friend, or unknown. We keep only those two answers, never the name. That is what keeps you from ever being paired with someone you saved as family, a colleague or a business.
- Numbers. Every number is turned into a one-way code (an HMAC with a secret key — the same kind of code accounts are keyed by), and the code is what links contacts to accounts. For Indian (+91) numbers we also keep the number itself, because that is what lets 2U send someone in your contacts an invitation when they are not on 2U yet (below).
- Re-synced at most once a day on Android. You can update them at any time from the You tab.
- Deleting your account deletes the contacts you uploaded.
Inviting someone who isn't on 2U. When nobody suitable is on 2U, tapping Talk to someone may invite one of your contacts — never someone judged to be family, work or a business. They get one WhatsApp, "Someone who has your number wants to talk to you on 2U 👋", with a button that opens the chat. It never says who you are. A number is invited at most once a week, and there is a daily limit across all of 2U. If you are invited and never sign in, the invitation simply expires; you can ask us to remove your number at any time.
The other direction matters too: if someone who saved your number taps Talk to someone, you may be paired with them, and the chat will show them "🔒 In your contacts" and you "🔒 Has your number". Neither of you is told who the other is.
What we store
| Data | Why |
|---|---|
| Your phone number, in full | To sign you in with a WhatsApp code, and to send you WhatsApp messages when someone wants to talk to you or you have a new message. It is never shown to other users. |
| Your contacts: a one-way code per number, the AI's gender and relationship judgement from each name (the name itself is discarded), and the number itself for Indian numbers | To pair you with people you know first, keep family, work and businesses out, label chats "in your contacts", and invite contacts who aren't on 2U yet. See "Your contacts" above. |
| Your pseudonym and gender | Shown to the people you chat with, and used to pair you (the Women / Men / Anyone filter). Gender is chosen once and cannot be changed. |
| Which chats you are in, and when they started and ended | So your conversations appear on every device you sign in on. |
| The messages themselves | So chats persist across devices and sessions. See the note below. |
| Blocks and reports | So someone you blocked is never paired with you again, and so reported chats can be reviewed. |
| Login codes | Deleted the moment they are used, and expire in ten minutes. |
| A record of each WhatsApp message we sent you, and what it cost | So we do not message the same person too often, and so we can see what the service costs to run. |
| Usage events — screens opened, buttons pressed, errors | To find where the app is broken. These never contain the text of your messages. |
Messages are not end-to-end encrypted. They travel over TLS, but they are stored as plain text in our database, because that is what lets a chat follow you from the Android app to the web. Our team does not browse conversations: the only place our admin tools show message text is a chat that one of its two participants has reported. If that is not good enough for what you want to say, don't say it on 2U.
What we do not collect
No photos, files, voice notes or links — the app accepts text and emoji only. No photos, emails or other details from your address book, and no contact names kept — see "Your contacts" above. No location. No payment details — 2U is free and takes no payments.
Messages we send you
We send WhatsApp messages through AiSensy on Meta's official WhatsApp Business Platform: your login code; a message with a button that opens the chat when someone is paired with you while you are not in the app (at most three of these a day) — "Someone who has your number wants to talk to you 👋" when that person saved your number, and "Someone on 2U wants to talk to you 👋" otherwise; and a reminder that you have a new message, at most once every 30 minutes. These messages never contain the text of any chat or the other person's pseudonym. Your number is shared with AiSensy and Meta only to deliver them.
If you use the Android app, we send notifications through Google's Firebase Cloud Messaging instead whenever the app can be reached, and fall back to WhatsApp only when it can't. A message notification shows the sender's pseudonym and the text of the message, like any messenger, so it passes through Google to reach your phone and can appear on your lock screen. Your phone's notification settings control that. We store a device token for this, deleted when you sign out or delete your account.
Filling in your login code (Android, optional). If you tap "Fill my code automatically" and give 2U notification access, the app looks only at WhatsApp notifications that contain a verification code and takes the 6-digit code from them. Nothing else is read, and nothing from your notifications leaves your phone. Without that access the app can instead pick up the code when you tap WhatsApp's "Copy code" button. You can turn notification access off in Android settings.
Who else sees anything
No advertising networks, no data brokers, no sale of personal data — ever. We use AiSensy and Meta for WhatsApp delivery, Google Firebase for app notifications, TypeSafe to judge contact names (each name once, not stored by us), Google for the optional Google Contacts import, and Hostinger for the server that hosts 2U. Each receives only what it needs to perform that function.
How long we keep it
Your account, messages and contact codes until you delete your account. Login codes for ten minutes. Usage events until you delete your account. After you delete your account we keep a few bare records — which chats existed and when, blocks, reports, and which WhatsApp messages we sent — tied to a one-way code of your number rather than the number itself. That is what keeps a block or a report in force if the same number signs up again; none of it contains message text. If other people saved your number and allowed contacts, their address-book codes belong to their accounts and are deleted when they delete theirs.
Your choices
- Delete your account from the You tab in the app, or without the app — see how to delete your account. Every chat you are in ends, every message you sent is erased, and your account, number, contact codes and usage events are removed. Messages the other person sent stay in the ended chat on their side.
- Contacts. 2U only pairs people through their contacts, so it can't be used without them. You can revoke the permission in Android settings at any time; deleting your account removes the codes already stored.
- End, block or report any chat at any time from inside it.
- Get a copy of your data. Ask, and we will send what we hold.
- Stop the WhatsApp messages. Delete your account, or write to us and we will stop them.
Children
2U is for adults. You must be 18 or older to use it, and we delete accounts we learn belong to minors.
Security
Everything travels over TLS. Message content is stored unencrypted on our server, as explained above. No system is perfect, and we will tell you if something happens that affects you.
Changes
If this policy changes in a way that matters, we will say so in the app rather than quietly editing this page.
Contact
Growthpond Technology Private Limited, Bengaluru, Karnataka, India · hello@2uapp.site