Privacy & security

• Your messages, contacts, calendar, reminders, photos, and files are read on your Mac and never uploaded by Twinly.
• Your voice clone is built and stored on-device (Apple Personal Voice and Twinly's own engine never send your voice anywhere). A paid voice key is the only case where audio goes to a cloud provider you chose.
• Your learned memory, pathways, and failure history live on your Mac, not in a Twinly cloud profile.
• Your provider key and Gmail app password are stored in the macOS Keychain, the same vault macOS uses for your own passwords.

The twin thinks with an AI model, and to reason about a task it sends that model the relevant context, the request, the draft it is writing, the part of the screen it is reading. That is the one thing that leaves your Mac: it goes directly to the AI provider whose key you set (Anthropic, OpenAI, Azure, etc.), under your own account and their privacy terms.

Email is sent directly to Google's servers over an encrypted connection; calls go over your phone line. Nothing routes through a third party Twinly hides from you.

This is the core safety mechanism. The twin drafts and plans freely, that costs nothing and changes nothing, but anything that actually affects the outside world stops and waits for your one-tap approval first:

• Sending a text, an email, or a message in a group.
• Placing a phone call.
• Buying anything or submitting a form that commits you.
• Posting publicly.
• Deleting anything (and Twinly prefers the Trash over a hard delete, so it is reversible).

Approvals arrive as a notification, on the island, or in the app, with the exact draft quoted so you see precisely what would go out before you tap Approve. Learned pathways and replays pass through the same gate, there is no path that skips it.

• Nothing in the list above ever happens without your explicit approval, no exceptions, no quiet auto-send.
• Financial actions (moving money, executing a trade) are never done on your behalf, the twin can prepare and surface them, but you complete them.
• Anticipation only ever suggests; it never acts on its own.
• Twinly does not run an AI in the background watching you, its suggestions come from reading your own calendar and mail locally, not from constant model calls.

• Stop a running task from the island (the Stop button) or in the app, instantly.
• End a call from the Phone tab or the island at any moment.
• Decline an approval and nothing goes out, the draft is simply discarded.
• Turn off learning (pathways) or suggestions (anticipation) with their master toggles.
• Quit the app and the twin does nothing at all until you reopen it.

You are always the one in the loop. The twin is fast and capable, and the controls to slow it down or stop it are always one tap away.