Page

Privacy Policy for Two Notes

Latest update: October 30, 2026

Owner and Data Controller

CWTI Ltd
24 Tax Suite 137b Westlink House 981 Great West Road
Brentford, TW8 9DN
UK
UTR: 7166128503

Official app name: Two Notes: Ear Training Game

Overview

Two Notes is an ear-training game. It plays two notes and you name the distance between them. There is no account and no sign-in: your rating, your streak, your rivals and every run you have played are stored on your own device and nowhere else.

We cannot see your progress, your answers or your results. Our own server receives only the feedback you choose to send, described in Feedback you send.

The app shows one optional advertisement, offers an optional paid upgrade, and uses Google Firebase for usage statistics and for app settings. These involve third parties, described below.

Types of Data collected

Data you provide directly

No profile. The app has no registration and no profile. It never asks for your name, your email address or your phone number.
Feedback: the text you write in Send feedback (in Settings) or in “Not getting Pro? Tell me why” (on the Pro screen), if you choose to send it.
Support messages: information you choose to send if you contact us by email.

Data stored locally on your device

Play history: the runs you have played, the questions you answered, your rating, your best streak, your bands and your rivals.
Preferences: app settings such as sound volume, whether pitch is shown on screen, theme, and whether you asked for a daily reminder.
Purchase state: whether the paid upgrade is active on this device.

This information never leaves your device by way of the app. Uninstalling Two Notes deletes it.

Data collected automatically by third parties

Advertising data: when you choose to watch the optional video that grants an extra life, Google AdMob processes device and advertising identifiers, IP address, approximate location derived from that address, device and app information, and interaction with the ad.
Purchase data: when you buy the upgrade, the app store processes the transaction and RevenueCat receives the receipt together with an anonymous identifier the app generates for your installation. That identifier is not linked to a name or an email address.
Usage statistics: if the consent rules allow it (see Google Firebase), Google Analytics for Firebase receives an app-instance identifier, device and app information, approximate location derived from your IP address, how often you open and use the app, and when the “Tell me why” form on the Pro screen opens or sends. The app never sends it what you write.
App settings: Firebase Remote Config receives a Firebase installation identifier and device and app information when the app checks its settings.
App verification: when you send feedback, vote or report, Apple App Attest (on iPhone) or Google Play Integrity (on Android), through Firebase App Check, confirms that the request comes from the real Two Notes app.

Feedback you send

When you send feedback, we receive the text you write, the app version, your phone's platform (Android or iOS) and a random ID that the app makes for this installation. The ID is not linked to your name, your email address or your purchases. We store feedback on our feedback server in Germany (Hetzner).

Send feedback posts to a board inside the app. A post appears on the board only after we approve it. Then other Two Notes players can read its text, its date and its number of votes, and they can vote for it or report it. The board never shows your ID or anything else about you, so do not write personal details in a post.

When you vote for a post or report it, we receive which post it is and your random installation ID, so that each installation counts once. A report does not include a reason.

“Not getting Pro? Tell me why” answers are private. Only we read them. With each answer we also receive which Pro screen you saw and whether you opened the form yourself or it opened when you closed the Pro screen.

How your data is used

Playing the game: to keep your rating, streak, rivals and history between sessions, on your device.
Reminders: to schedule a local notification at the time you usually play, if you asked for one. Reminders are scheduled by your device and are not sent from a server.
The optional advertisement: to show and measure the rewarded video you choose to watch in exchange for an extra life. The video is never forced, and the game is fully playable without watching it.
Purchases and restoring them: to unlock the paid upgrade, to keep it unlocked, and to restore it if you reinstall the app or change device.
Feedback: to read what players ask for, and to decide what to fix and build next.
Usage statistics: to count how many people use the app and how often the “Tell me why” form opens and sends.
App settings: to turn features, such as the “Tell me why” form, on or off without an app update.
Support: to answer you if you write to us.

How your data is shared

We do not sell your data and we do not share it for anyone else's marketing. Data reaches third parties only through the features described in this policy.

Google AdMob (Google LLC)

Used to serve and measure the single optional rewarded video. Data processed may include advertising identifier, IP address, device and app information, and ad interaction. Where required, the app asks for your consent before personalised advertising, and you can change your advertising choices in your device settings.

Google Firebase (Google LLC)

Google Analytics for Firebase counts app use, as described above. In the regions where the consent form applies (such as the European Economic Area, the UK and Switzerland), it runs only if you agree to measurement in that form. If the app cannot read your choice, Google Analytics stays off. The app does not send your advertising identifier to Google Analytics, and it turns off Google Analytics advertising features. Firebase Remote Config sends the app its settings. Firebase App Check checks that feedback comes from the real app.

Apple App Attest (Apple Inc.) and Google Play Integrity (Google LLC)

Used through Firebase App Check when you send feedback, vote or report: App Attest on iPhone, Play Integrity on Android. They check that the request comes from the real Two Notes app on a real device. Play Integrity also checks that the app was installed from Google Play.

Hetzner Online GmbH

Hosts our feedback server in Germany. Hetzner stores the feedback on our behalf and does not use it for anything else.

RevenueCat (RevenueCat, Inc.)

Used to validate purchases and to keep the upgrade available across your devices and reinstalls. Data processed may include the purchase receipt, the product bought, purchase and renewal timestamps, country, platform, and the anonymous installation identifier generated by the app.

Apple App Store (Apple Inc.) and Google Play (Google LLC)

Used to take payment and to manage subscriptions and refunds. The store handles the payment itself; we never see your card details. Purchases are governed by the store's own terms and privacy policy.

Cloudflare Web Analytics (Cloudflare, Inc.)

Used on the app's website, twonotesapp.com, to count visits and to see which pages and links bring visitors. It does not use cookies or local storage, and it does not run inside the app. Personal Data processed may include the page address, the referring page, browser and device type, and the approximate country derived from your IP address. We use it on the basis of our legitimate interest in knowing how visitors find the website. See Cloudflare's privacy policy.

Data retention

Play history and preferences: kept on your device until you delete them in the app or uninstall it. We hold no copy.
Feedback, votes and reports: kept on our feedback server until you ask us to delete them.
Purchase records: retained by RevenueCat and by the store for as long as needed to keep your purchase valid and to meet accounting and legal obligations.
Advertising data: retained by Google according to its own policies.
Usage statistics: retained by Google for the retention period set in our Google Analytics account.
Website visit data: retained by Cloudflare according to its own policies. We see only totals, not individual visits.
Support messages: retained as needed to answer you and to keep a support record.

Data deletion

There is no account to delete. Uninstalling the app removes everything it stored on your device: rating, streak, rivals, history and settings.

Uninstalling does not delete feedback you sent. To delete it, write to privacy@ivanmorgillo.com with the subject line Two Notes data request. Tell us what you wrote and about when you sent it, so we can find it. We then delete it from our feedback server.

Write to the same address if you want a purchase record removed, or if you have a question about data held by a third party, and we will help you address it to the right party.

Your choices and controls

You can play the whole game without watching a single advertisement.
You can play the whole game without sending feedback.
Where the consent form applies, you can say no to measurement and advertising in it, and change your answer later in Settings > Ad privacy choices.
You can reset or limit your advertising identifier in your device settings.
You can turn the daily reminder off in the app, or in your device notification settings.
You can buy nothing: unlimited runs, rivals, duels and the Daily Challenge are free.
You can uninstall the app, which deletes everything it holds on your device.

Children's privacy

Two Notes is not directed to children under 13, and we do not knowingly collect personal data from children under 13.

International transfers

Our feedback server is in Germany. Third-party providers may process data in countries other than your own, including the United States and other countries where Google, Apple, RevenueCat and Cloudflare operate infrastructure.

Changes to this policy

We may update this Privacy Policy to reflect operational, legal, or platform changes. The updated version will be posted on this page with a new update date.

Contact us

For questions about this Privacy Policy or your data, contact privacy@ivanmorgillo.com.