Try on Web

privacy policy

Last updated: 6 July 2026 · Effective: 6 July 2026

The short version

  • We collect your account details and the conversations you have with the AI, and we store them so the AI can remember you over time.
  • Your conversations are private to you. We never show your partner what you said or felt. The only things that can ever reach your partner's side are facts you allow to be shareable (e.g. interests, for gift hints).
  • To generate replies, your messages are sent to our AI provider (DeepSeek) and other service providers. We do not sell your data.
  • You can access, correct, export, or delete your data at any time.
  • thrdwheel is a wellbeing companion, not a licensed therapist or medical service.

The full policy below governs. If anything conflicts, the full policy controls.

Contents
  1. Who we are
  2. What we collect
  3. How we use it
  4. The partner-privacy model
  5. Consent & legal basis
  6. Who we share with
  7. AI processing & transfers
  8. Retention & deletion
  9. Your rights
  10. Security
  11. Children
  12. International users
  13. Changes
  14. Contact & grievances

1. Who we are

thrdwheel (“thrdwheel”, “we”, “us”) is operated by Antilayers Pvt. Ltd., a company incorporated in India, with its registered office at [registered office address, City, State, PIN]. We are the “data fiduciary” / data controller for the personal data described here. You can reach us at hello@thrdwheel.app.

This policy explains what personal data we process when you use the thrdwheel web app and website (the “Service”), why, and the choices and rights you have.

2. What data we collect

Information you give us

  • Account data: your name (or nickname), email address, and password. Passwords are stored in hashed form by our authentication provider; we never see them in plain text.
  • Relationship / pairing data: the pairing code you generate or enter, and the link between you and your partner’s account (your “couple”).
  • Conversation content: the messages you send to the AI and the AI’s replies. These are stored so the Service can maintain your history and personalize over time.

Information we generate

  • Memory / profile: facts the AI distills from your conversations (for example: interests, preferences, important dates, communication style). Each fact is classified as private or shareable (see §4).
  • Usage data: basic logs such as timestamps and feature usage needed to run and secure the Service.

Information collected automatically

  • Technical data: IP address, device/browser type, and similar information collected by our hosting/CDN provider for delivery and security.
  • Local storage: we store a session token in your browser to keep you signed in. We do not use third-party advertising or tracking cookies.

We do not intentionally collect special-category data (such as health, religion, or sexuality). However, because this is a relationship-support service, you may choose to share sensitive information in conversation. Anything you share is treated under the protections in this policy, and you control it (§9).

3. How we use your data

  • To provide the Service — create your account, pair you with your partner, and deliver AI conversations.
  • To personalize — remember what matters to you so the AI becomes more helpful over time.
  • To enable consented sharing — surface only the facts you mark shareable to help your partner (e.g. gift ideas).
  • To keep the Service safe and reliable — prevent abuse, debug, and secure accounts.
  • To communicate with you — service messages (e.g. account, security). Marketing emails, if any, are opt-in and you can unsubscribe.
  • To comply with law — where we have a legal obligation.

We do not sell your personal data, and we do not use your private conversations to serve advertising.

4. The partner-privacy model (“never snitch”)

This is central to how thrdwheel works, so we spell it out clearly:

  • Your conversations are private to you. Your partner cannot read your messages, and the AI on your partner’s side is never given your raw conversations or your feelings.
  • The only data that can ever influence your partner’s experience is the subset of facts marked shareable — non-sensitive preferences you allow to be used for hints (e.g. “likes Hot Wheels”). Sensitive facts are kept private and never cross.
  • This boundary is enforced technically at the database level (row-level security), not merely by policy. You can review, change, or delete what is shareable at any time in the app.
  • Note: this partner-to-partner privacy does not limit our own access as the operator. Our authorized personnel and processors may access data as needed to run, support, secure, and improve the Service, subject to this policy and confidentiality obligations.

Where required (e.g. under India’s Digital Personal Data Protection Act, 2023, or the EU/UK GDPR), we process your personal data on these bases:

  • Your consent — which you give when you create an account and use the Service, and which you can withdraw at any time (see §9).
  • Performance of a contract — to provide the Service you signed up for.
  • Legitimate interests / legal obligations — to secure the Service and comply with law.

6. Who we share your data with

We share data only with service providers (“processors”) that help us run the Service, under contracts requiring them to protect it. Our key providers are:

  • Supabase — database, authentication, and storage hosting.
  • DeepSeek — the AI model that generates replies. Your conversation content is sent to DeepSeek to produce responses. See §7.
  • Cloudflare — website hosting, content delivery, and serverless functions.

We may also disclose data if required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you). We do not sell your data or share it with advertisers.

7. AI processing and international transfers

Important: to generate replies, the messages you send are transmitted to our AI provider, DeepSeek, whose processing may occur outside India (including in the People’s Republic of China). This means your conversation content leaves our primary systems and is processed by a third party abroad, subject to that provider’s terms and the laws of the jurisdictions where it operates.

Our other providers (Supabase, Cloudflare) may also store or process data in regions outside your country. Where we transfer personal data internationally, we take steps intended to protect it consistent with applicable law. By using the Service, you understand and consent to these transfers. If you are not comfortable with your conversation content being processed by a third-party AI provider abroad, please do not use the Service.

8. Retention and deletion

  • We retain your account data, conversations, and derived memory for as long as your account is active, so the Service can function and personalize.
  • You can delete individual remembered facts in the app at any time.
  • When you unpair, the shared couple link is dissolved.
  • When you delete your account (email us to request it), we will delete or irreversibly anonymize your personal data within a reasonable period, except where we must retain limited data to comply with law, resolve disputes, or enforce our agreements.
  • Backups and logs are retained for a limited period and then purged on a rolling basis.

Deleting your data affects your account only. It does not delete your partner’s own separate data.

9. Your rights

Subject to applicable law, you have the right to:

  • Access a copy of your personal data;
  • Correct inaccurate data;
  • Delete your data (“right to erasure”);
  • Export / port your data;
  • Withdraw consent at any time (this won’t affect processing already carried out);
  • Object to or restrict certain processing;
  • Nominate another person to exercise your rights in the event of death or incapacity (as provided under the DPDP Act);
  • Complain to a data protection authority (in India, the Data Protection Board; in the EEA/UK, your local authority).

To exercise any right, email hello@thrdwheel.app. We may need to verify your identity before acting, and we will respond within the timeframes required by law.

10. Security

We use reasonable technical and organizational measures to protect your data, including encryption in transit, database-level access controls (row-level security), and restricted internal access. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a personal data breach affecting you, we will notify you and the relevant authority as required by law.

11. Children

The Service is intended for adults. You must be at least 18 years old (or the age of majority in your jurisdiction) to use thrdwheel. We do not knowingly collect data from children. If we learn we have collected data from someone under this age, we will delete it.

12. International users

thrdwheel is operated from India. If you access the Service from elsewhere, you are transferring your data to India and to our providers’ locations, and you consent to this policy and to processing under applicable Indian law and this policy.

13. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the “Last updated” date and, where appropriate, notify you in the app or by email. Your continued use after changes take effect means you accept the updated policy.

14. Contact and grievances

For any privacy question, request, or complaint, contact our Grievance Officer / Data Protection contact:

  • Name: [Grievance Officer name]
  • Entity: Antilayers Pvt. Ltd.
  • Email: hello@thrdwheel.app
  • Address: [registered office address]

We will acknowledge and address grievances within the timeframes required under the DPDP Act and other applicable laws.

See also our Terms of Service.