Privacy Policy

1. Scope and controller

2HELP INC. is the controller or business responsible for personal information processed for the Platform, except where another company independently determines how it handles information under its own privacy policy. This Policy applies to account holders, visitors, people communicating with support, and other individuals whose information is submitted through the Platform.

This Policy does not govern the independent handling of information by other users or third-party services. Users must handle information obtained through 2Help lawfully and in accordance with the Terms of Service and Community Guidelines.

2. Personal information we collect

Account and identity information

Telephone number, email address, authentication and verification status, account identifier, password hash where password login is used, linked Apple or Google account identifiers, account creation and login dates, and account status. We do not store your plain-text password.

Profile and public content

Name, profile photo and gallery files, date of birth where requested, biography, interests and tags, whether you request or offer help, business status, business description and website, ratings, and other information you choose to add. Depending on your settings and product flow, profile information and submitted content may be visible to other users.

Location information

A location you enter or select on a map; location labels; map place identifiers; and approximate or precise latitude and longitude when you grant device permission or select a point. The Platform may display location or distance information according to your selection and visibility settings. You can choose a location manually instead of granting device location permission.

Interactions and User Content

Requests, offers, selections, matches, relationship choices, messages, message attachments, reviews, ratings, blocks, reports, moderation records, and related timestamps and status information. Messages may be processed to deliver chat, prevent fraud and abuse, investigate reports, and enforce our policies.

Transaction and commercial information

If payment or subscription features are enabled: selected plan, price, currency, transaction status, limited payment-method metadata, payment-provider identifiers, refunds, payouts, and records required for accounting, fraud prevention, and legal compliance. Payment-card or bank credentials are handled by the payment provider identified in the payment flow; we do not intend to store full payment-card numbers or bank login credentials.

Device, network, and usage information

IP address, device and installation identifiers, operating system, app version, language, country, browser or user-agent information, push-notification token, session and security events, screens viewed, feature interactions, diagnostics, crash information, and server logs. Analytics data may be associated with an internal user identifier but must not intentionally include telephone numbers, email addresses, names, or precise location in analytics event fields.

Communications and support

Support requests, legal and privacy requests, survey responses, attachments you send, service messages, delivery status for email, SMS, or push notifications, and our response history.

Device permissions

With your permission, the app may access location to let you select what to share, photos or files that you choose to upload, and notification capability to deliver service updates. We do not access your address book or device contacts as part of the current Platform functionality described by this Policy.

3. Sources of information

We collect information:

• directly from you when you register, create a profile, communicate, upload content, change settings, transact, or contact support;
• automatically from your device and use of the Platform;
• from Apple or Google when you choose their sign-in services, subject to your provider settings;
• from payment, communications, mapping, analytics, security, and cloud providers that support the Platform;
• from other users who interact with, review, block, or report you; and
• from authorities or public sources where necessary to protect safety, investigate suspected illegality, or comply with law.

4. How we use personal information

• Provide the Platform: create and secure accounts, authenticate users, build profiles, support discovery and matching, display appropriate location information, deliver messages and files, maintain preferences, and provide support.
• Communicate: send one-time verification codes, security alerts, account notices, message and match notifications, support responses, policy updates, and product communications consistent with your preferences.
• Safety and integrity: prevent fraud, spam, harassment, abuse, unauthorized access, and policy violations; review reports; moderate content; enforce restrictions; protect users and the public; and preserve evidence.
• Operate and improve: troubleshoot, analyze performance and feature use, improve reliability and matching, develop new features, conduct quality assurance, and maintain business records.
• Payments and compliance: facilitate enabled payment features, maintain transaction records, resolve payment issues, satisfy tax and accounting duties, respond to lawful requests, and establish, exercise, or defend legal claims.
• With consent: use information for another clearly disclosed purpose when you give valid consent and may withdraw it.

We do not use registration telephone numbers or email addresses for third-party advertising, and we do not allow other users to search for or view them merely because they have a 2Help account.

5. Legal bases for processing

Where data-protection law requires a legal basis, we rely on:

6. What other users can see

Depending on your settings and use, other users may see your name, profile and gallery content, business information, interests, help preferences, rating information, approximate or selected location and distance, requests, offers, and messages you send to them.

7. How we disclose personal information

We disclose only what is reasonably necessary for the relevant purpose:

• Other users: information described above when you make it visible or communicate through the Platform.
• Cloud and communications providers: Amazon Web Services supports infrastructure, storage, SMS, push delivery, messaging, and safety or fraud-prevention functions.
• Identity and platform providers: Apple and Google support optional sign-in, app distribution, device services, and related authentication.
• Analytics and diagnostics: Google Firebase supports app analytics and performance measurement. We do not authorize analytics providers to use registration contact details for their own marketing.
• Mapping providers: OpenStreetMap/Nominatim and, where enabled, map-platform providers process location queries or coordinates needed to provide place search, map display, and reverse geocoding.
• Payment providers: if payments are enabled, the payment provider named in the flow processes payment details and returns transaction status and limited account metadata.
• Professional advisers and vendors: auditors, legal advisers, insurers, security specialists, and support vendors subject to appropriate duties.
• Legal, safety, and rights protection: authorities, courts, regulators, affected persons, or others when we reasonably believe disclosure is required by law or necessary to prevent serious harm, investigate fraud or illegality, enforce agreements, or protect rights and security.
• Business transfers: a prospective or actual acquirer, investor, lender, successor, or restructuring participant, subject to confidentiality and applicable notice or choice rights.
• At your direction: a recipient you select or another disclosure you expressly authorize.

Service providers may process information only for contracted purposes and must provide protections appropriate to the information and applicable law.

8. No sale or cross-context behavioral advertising

2Help does not sell personal information for money and does not share personal information for cross-context behavioral advertising or targeted advertising as those terms are defined by applicable U.S. state privacy laws. We have not done so in the preceding 12 months. We do not use sensitive personal information to infer characteristics for advertising, and we do not offer a financial incentive in exchange for personal information.

Where legally required, we treat a recognized browser-based opt-out signal, such as Global Privacy Control, as a request to opt out for that browser or device. Because we do not currently sell or share personal information for targeted advertising, there is no separate advertising opt-out necessary for current practices.

9. Sensitive information

Precise location, private messages, payment information, government identifiers, and content revealing health, disability, religion, ethnicity, sexual orientation, or other protected characteristics may be sensitive under applicable law. We process sensitive information only when necessary for requested features, security, legal compliance, or another disclosed purpose, and with consent where required.

Do not submit sensitive information unless it is necessary. Interest selections may indirectly reveal sensitive characteristics; we use them for user-selected profile and matching functions, not to deny essential services or target third-party advertising.

10. Retention and deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. Retention depends on the type of information, account status, sensitivity, user expectations, operational need, legal requirements, dispute and limitation periods, fraud and safety risk, and whether information can be securely deleted or de-identified.

• Account, profile, and content information is generally retained while the account is active.
• Authentication challenges, session records, security logs, and device records are retained for limited periods appropriate to authentication, troubleshooting, and fraud prevention.
• Messages, reports, moderation records, and safety evidence may be retained after account deletion where necessary to protect users, investigate abuse, enforce policies, resolve disputes, or comply with law.
• Transaction, tax, accounting, and legal records may be retained for statutory periods.
• Backups are protected and deleted or overwritten through normal backup cycles; information is not restored to active use except for continuity, security, or legal reasons.

When retention is no longer justified, we delete or de-identify the information. De-identified information may be retained if we take reasonable measures to prevent re-identification.

11. Account deletion and data export

You can initiate permanent account deletion in the app from Profile → Settings → Delete account. The app shows affected information before confirmation and signs out active devices when deletion completes. Deleting the app alone does not delete your account.

If you cannot access the app, follow the external instructions in the Help Center or email support@2help.app from the registration email or identify the registration telephone number without sending authentication codes.

You may request an account data export from Profile → Support & legal → Request account data. We may need to verify identity before fulfilling an external request.

Deletion removes or de-identifies account-associated data from active use, subject to the limited retention grounds described above. Information other users independently copied or lawfully retained is outside our control. We may preserve a minimal record of a deletion request and enforcement status to demonstrate compliance and prevent abuse.

12. Your privacy rights

Depending on where you live and subject to legal exceptions, you may have rights to:

• know whether we process your information and access a copy;
• correct inaccurate information;
• delete information;
• receive portable information you provided;
• object to or restrict certain processing;
• withdraw consent;
• opt out of sale, targeted advertising, or qualifying profiling;
• appeal a refusal of a privacy request; and
• receive equal service and not be discriminated against for exercising a privacy right.

Exercise rights in the app where available or email support@2help.app. Describe the right and the account concerned. We will verify identity proportionately and respond within the period required by applicable law. An authorized agent may submit a request where permitted, but we may require proof of authority and direct identity confirmation.

If we deny a request, our response will explain available appeal options. You may appeal by replying with the subject “Privacy Appeal.” You may also complain to the data-protection, privacy, or consumer-protection authority with jurisdiction over you.

13. Additional U.S. state disclosures

For applicable U.S. state privacy laws, the categories collected during the preceding 12 months are identifiers; customer records; protected classification information if voluntarily provided or inferred from selected interests; commercial and transaction information; internet or network activity; approximate and precise geolocation; audio, electronic, visual, and similar content; professional or business information; sensitive personal information; and inferences used for matching, safety, and service operation.

We collect these categories from the sources in Section 3, use them for the purposes in Section 4, and disclose them to the recipient categories in Section 7. We do not sell them or share them for cross-context behavioral advertising. These statements apply where the relevant law covers 2Help; we may voluntarily honor equivalent requests more broadly.

14. International processing and transfers

2Help and its providers may process information in the United States, Israel, and other countries where privacy laws may differ from those in your location. Where required, we use recognized transfer mechanisms and safeguards, such as contractual protections, transfer assessments, adequacy mechanisms, and supplementary security measures.

Users in the European Economic Area, United Kingdom, or Switzerland may contact us for information about applicable safeguards and may complain to their local supervisory authority.

15. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including access controls, credential protection, encryption in transit, restricted production access, monitoring, backups, and vendor oversight appropriate to risk. No system is completely secure. You must protect your device and authentication methods and report suspected compromise promptly.

If a personal-data breach creates a legally recognized risk, we will investigate and notify affected individuals and authorities as required by applicable law.

16. Automated processing

We may use automated signals to support matching, recommendations, spam and fraud detection, content moderation, security, and feature analytics. These systems may use location, interests, account activity, content signals, and interaction history. We do not currently make solely automated decisions that produce legal or similarly significant effects on users. Material enforcement decisions may be appealed for review as described in our Terms and Guidelines.

17. Children

The Platform is intended only for people aged 18 or older. We do not knowingly collect personal information from children. If you believe a child has created an account or provided personal information, contact us so we can investigate and delete it as appropriate.

18. Website cookies and analytics

The public legal pages do not currently require non-essential advertising cookies. Web servers may still receive IP address, browser information, requested URL, and timestamps in standard security and access logs. If we introduce non-essential cookies or web analytics requiring consent, we will provide required notice and controls before using them.

19. Changes to this Policy

We may update this Policy to reflect product, security, legal, or operational changes. We will post the revised version and update the effective date. Where required or where changes materially affect your rights, we will provide additional notice and obtain consent if required.

20. Contact