Privacy Policy
Third Wheel is built for intimate daily use between partners. We take your privacy seriously. This policy explains exactly what data we collect, why, and how you can control it.
1. Who we are
Third Wheel ("we", "us", "our") is an AI assistant service for couples.
2. What data we collect
📱 Registration data
- • Your name and WhatsApp phone number
- • Your partner's name and WhatsApp phone number
- • Preferred language (detected from messages)
💬 Conversation data
- • Your WhatsApp messages sent to Third Wheel (stored up to 100 recent messages per user)
- • Voice messages (transcribed to text; the audio file is not stored)
- • Receipt photos (processed to extract text; the image is not stored after processing)
🏠 Household data
- • Shopping list items and purchase history
- • Expenses (amounts, categories, merchants, who paid)
- • Saved contacts (name, phone, service notes)
- • Saved places (addresses, coordinates)
- • Personal preferences (shoe size, gift ideas, private notes)
- • Relationship milestones and important dates
- • Shared notes and decisions
- • Meal plans and saved recipes
- • Reminders and their schedules
📊 Usage data
- • Which features you use and how often (anonymised event names — e.g. "expense_logged")
- • Message volume and timing (for pattern-based suggestions)
- • Agent response quality flags (used to improve the service)
📅 Google Calendar data (optional)
- • We request access only to your calendar's free/busy times and the ability to create events
- • We never read the titles or details of your existing events
- • OAuth tokens are stored encrypted at rest
- • You can revoke access at any time from your Google Account settings
3. How we use your data
- •To deliver the core service — responding to your messages, managing your lists and expenses, setting reminders
- •To personalise suggestions — learning your shopping habits, spending patterns, and date night frequency
- •To send proactive notifications — reminders, smart nudges, and the weekly summary
- •To improve the service — identifying AI quality issues and usage trends (using anonymised data)
- •To communicate with you — service updates, if necessary, via WhatsApp
We do not sell your data to third parties. We do not use your data for advertising.
4. Third-party processors
We use the following services to operate Third Wheel. Each acts as a data processor on our behalf:
| Service | Purpose | Data shared |
|---|---|---|
| Twilio / WhatsApp | Message delivery | Phone numbers, message content |
| Anthropic (Claude) | AI responses | Message content, context |
| Supabase | Database storage | All stored data (encrypted at rest) |
| Google (Calendar & Maps) | Calendar & location features | Free/busy times, place searches |
| OpenAI (Whisper) | Voice transcription | Audio content (not stored) |
| PostHog | Usage analytics | Anonymised event names, no message content |
| Sentry | Error monitoring | Error logs, phone number as user ID |
5. Private vs. shared data
Within a couple, some data is shared between both partners (shopping lists, expenses, notes) and some is personal (private preferences you mark as private). Your partner cannot read data you have marked private. Conversation history is always personal — your partner cannot read your individual messages.
6. Data retention
- •Conversation history: last 100 messages per user (older messages are automatically removed)
- •Household data (expenses, shopping, contacts, etc.): retained until you delete your account
- •Usage analytics: retained for up to 2 years in anonymised form
- •Receipt images: deleted immediately after processing
- •Google OAuth tokens: deleted when you revoke access or delete your account
7. Your rights
You have the right to:
- •Access all data we hold about you — send "my data" via WhatsApp
- •Correct inaccurate data — just tell the bot to update it
- •Delete your account and all associated data — send "delete my data" via WhatsApp
- •Export your data — send "export my data" via WhatsApp
- •Opt out of analytics — send "opt out analytics" via WhatsApp
- •Revoke Google Calendar access at any time via Google Account settings
If you are in the EU or EEA, you also have the right to lodge a complaint with your local data protection authority.
8. Security
All data is stored in Supabase with encryption at rest. Google OAuth tokens are additionally encrypted using AES-256-GCM before storage. All connections use TLS in transit. We enforce server-side request validation and rate limiting on all endpoints.
9. Children
Third Wheel is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has registered, please contact us immediately.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will notify active users via WhatsApp for material changes. The "last updated" date at the top reflects the most recent revision.
11. Contact
Questions or requests about your data? Message the bot directly via WhatsApp.