Privacy policy

Effective November 4, 2026

In short: 2Sentence reads your email only to write two-line summaries. Email text is discarded after it's summarized, except email you forward to a 2Sentence forwarding address, which is kept encrypted for 30 days so you can open it. By default, email is summarized on 2Sentence's private server: our own AI model, with Cloudflare Workers AI (our cloud provider) sharing the work when ours is busy or offline, and Google's Gemini API or OpenRouter as backups when neither can answer. With 2Sentence Pro, it's summarized by Anthropic's Claude, unless you choose the private server in Settings. Either way, it's never sold, used for advertising or used to train AI models. You can delete your data at any time.

Who we are

2Sentence ("2Sentence", "we", "us") is operated by Jethin Productions, a business registered in Andhra Pradesh, India (Udyam Registration Number UDYAM-AP-04-0151506). This policy covers the 2Sentence website and the 2Sentence app, including its web, installed and mobile versions. For questions about this policy, contact jethinproductions@2sentence.space.

Information we collect

Your 2Sentence account

You can sign in with Google, with Apple, or with your email address. With Google or Apple we receive only your name, your email address (with Apple, this can be a private relay address that forwards to you), an identifier for your account with that company, which we use to recognise you next time, and, with Google, your profile picture, which we show so you can see who is signed in. With your email address, we send a one-time code to it (through our email provider, Resend) to confirm it's yours; the code is stored only in scrambled form and expires after 10 minutes. Signing in never gives us access to your email; connecting a mailbox is a separate step that asks for your permission.

If you continue without signing in, we create a guest account identified only by a random code and the sign-in cookie on your device. Guest accounts whose sign-in has expired are deleted automatically, along with their connected accounts and summaries.

Connected email accounts

The email addresses of the accounts you connect and, for IMAP accounts, the mail server address and port.

Sign-in credentials

Information created from your email

For each email we store the sender, subject, date, the two-line summary, a confidence level, any tasks found, and, unless you turn it off in Settings, up to three short sentences quoted from the email so you can check the summary.

Facts read from your email

When a new email arrives, 2Sentence also reads a few facts out of it with fixed rules (not AI, and nothing is sent anywhere), and keeps only those facts with its summary: for a placement or internship drive, the company, role, pay, eligibility rules, apply-by date and application link; for a bill, renewal, free trial or payment, the amount, currency, due date and who it's from; for a registration or form, its link and closing date; and, if an email looks like a scam, the reasons why. These are used only to show you the Placement drives, Money and Forms lists and scam warnings, and to remind you the day before a date. They're deleted with the summary.

Your placement profile

If you choose to add it, we keep your CGPA, branch, number of backlogs and passing-out year, only to tell you which placement drives you're eligible for. You can change or clear it at any time, and it's deleted with your account.

Email content

For Gmail, Outlook and IMAP accounts, the full text of an email is processed in memory to create its summary and is then discarded. It is not written to storage. When you open one of these emails in 2Sentence, it's fetched again from your email provider and shown to you without being saved.

Email you forward to 2Sentence

If you set up a 2Sentence forwarding address (for example, for a school or work mailbox that can't be connected directly), the emails your mailbox forwards to it can't be fetched again later, so we keep a copy to show you when you open them. Each copy is encrypted with AES-256-GCM using a key unique to you, and is deleted automatically after 30 days, when you erase that email, when you remove the forwarding account, or when you delete your 2Sentence account. Only you can open them in the app. Emails that arrive at your address without coming through your own mailbox are marked as possible spam. You can get a new forwarding address at any time, which stops the old one working. If you later connect the same mailbox directly, its forwarding address and stored copies are deleted automatically. Before forwarding school or work email, check that your school or employer allows it.

Payments for 2Sentence Pro

If you buy Pro on our website from India, the payment is handled by Razorpay. From anywhere else, Pro is sold to you by Dodo Payments, which acts as our reseller (merchant of record): it takes the payment, charges and pays any local VAT, GST or sales tax, and sends your receipt. Your card, UPI or bank details go to the payment company, not to us. We keep a record of each payment: the payment and order or checkout IDs, the plan, the amount and currency, the date and the account it was for, so we can give you Pro, issue refunds and keep the accounts the law requires.

Information stored on your device

The app stores your settings, tasks and a copy of your summaries in your browser's local storage, kept separately for each person who signs in on that browser. If you turn on notifications, your browser creates a push subscription (an address used to deliver notifications to your device), which we store to send you notifications.

Technical information

The 2Sentence server doesn't keep logs of your ordinary requests. To fix sign-in problems and app crashes, it keeps a short diagnostic record of failed sign-in checks and of the app's start-up steps: the time, the step or page, and your browser or phone type, without your IP address, email address or email content. These records are deleted automatically after 14 days. Our hosting provider and network infrastructure may record IP addresses and request times for security and reliability. The server records error messages to help us fix problems; these don't contain email content.

How we use information

We use the information above only to:

We do not sell your information. We do not use email content, or information derived from it, to show or target advertising, and we do not use it to train or improve AI models.

How email is processed by AI

To write a summary, 2Sentence sends that email's sender, subject and message text to a language model. The model is asked to do three things only: write the two-line summary, pull out requests as tasks, and name the sentences it relied on. 2Sentence then checks those sentences against the email. Quotes it cannot find are removed, and the confidence is lowered.

Without 2Sentence Pro, summaries are written by the AI model running on infrastructure operated for 2Sentence, together with Cloudflare Workers AI: when our model is busy or offline, the sender, subject and text of a new email may be sent to Cloudflare's AI to write its summary. Cloudflare processes it only to return the summary, doesn't use it to train AI models and doesn't share it with other customers. When neither can answer, the same information may be sent to a backup AI: Google's Gemini API (on a paid plan, under which Google doesn't use it to improve its products), or through OpenRouter to an AI provider that doesn't train on or keep what it's sent. When none can answer, you get a basic summary made from sentences in the email. Explanations work the same way; timetable reading without Pro is done by our own model only. With 2Sentence Pro, they're written by Claude, Anthropic's AI, whenever it's available: the sender, subject and text of each new email (and the pictures, when you ask for an explanation) are sent to Anthropic's Claude API for that. If you have Pro but choose the private server in Settings → Summaries, or Claude isn't available, the private server is used instead. Anthropic processes this data to provide the service, doesn't use it to train its models, and deletes it under its own data retention terms. You can switch back at any time. In both cases email content is not used to train or improve any model, and 2Sentence discards it from memory once the summary is stored. Filters you set for senders, domains and keywords are applied first; filtered emails are never passed to the model.

The audio brief. When you press Listen, the summaries in your brief (the sender’s name, the two lines and any due date, never the emails themselves) are sent to the same AI that writes your summaries (Claude with Pro, otherwise Cloudflare Workers AI) to write a short spoken script. While the day’s allowance lasts, each line of that script is turned into speech by a voice model run on Cloudflare Workers AI (Deepgram Aura); the audio is held briefly in our server’s memory (until newer audio replaces it or the server restarts) so replaying it costs nothing, and is never saved to disk or stored with your account. Otherwise your device’s own voice reads it.

Ask 2Sentence and the composer. When you ask the assistant something, your question, the conversation so far and the summaries of your 40 newest emails (sender, the two lines, the date, the category and any due date) are sent to the same AI that writes your summaries (Claude with Pro, otherwise Cloudflare Workers AI, our own AI, or the backup AIs described above) to answer it. The full text of an email is sent only when you ask about that email from inside it, or ask for a reply to it. When you use the AI in the composer, your draft is sent the same way. Conversations and drafts are not saved on our server; they stay in the app until you close it. 2Sentence never sends email for you: a finished draft opens in Gmail or your own mail app, where you choose whether to send it. None of this is used to train AI models.

AI summaries can be incomplete or wrong. Always check the original email before acting on anything important.

Google user data

When you sign in with Google, 2Sentence requests only your basic profile (openid, email and profile) to create your account. Signing in does not give us access to your email.

Only if you choose Connect Gmail does 2Sentence request read-only access to your Gmail messages (gmail.readonly). We use Gmail access only to check for new messages about once a minute, create summaries, and show you the original email when you open it.

2Sentence's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Gmail content is sent to Anthropic's Claude API only if you have 2Sentence Pro, and only to write your summaries and explanations. Without Pro, it may be sent to Cloudflare Workers AI, or to the backup AIs (Google's Gemini API or OpenRouter), only to write its summary. Summaries of it may be sent to Google Cloud Translation only to translate them into your language. It is never used to develop, improve or train AI models. We do not use Google user data for advertising, we do not sell it, and no person reads it unless you ask us to for support, it's needed for security, or the law requires it.

When you remove a Gmail account or delete your 2Sentence account, we revoke our access at Google automatically. You can also remove access at any time from your Google Account permissions page.

Microsoft user data

If you connect an Outlook.com or Microsoft 365 account, 2Sentence requests permission to read your mail (Mail.Read), read your basic profile (User.Read) and stay connected (offline_access). We use it only as described in this policy. Microsoft notifies our server when new mail arrives, and we fetch that message to summarize it.

You can remove access at any time: for personal accounts at account.live.com/consent/Manage, and for work or school accounts at myapps.microsoft.com.

Cookies, storage and ads

In the app

The 2Sentence app uses one essential cookie to keep you signed in. It contains a random identifier, is not used for tracking or advertising, and expires after 30 days or when you sign out. The app also uses your browser's storage to keep settings and summaries on your device, and a service worker to deliver notifications and to let the app open without an internet connection. So that you can read them offline, the app also keeps a copy of emails you open and of your newest emails, with their explanations, in your browser's storage on that device only (at most 400 items, oldest removed first). They never leave your device this way, and Settings → Clear this device or signing out removes them. No ads are shown to anyone with 2Sentence Pro.

No ads in the web app

The 2Sentence web app (your inbox, brief, deadlines, settings and sign-in) shows no ads and loads no advertising code.

Ads on our public pages

Our public reading pages, the home page, the Help guides and the Articles, each show one clearly labeled ad from Google AdSense, between sections. Sign-in, legal and error pages have none. These ads never use your email, summaries or anything in your account, and we don't share any of it with Google.

Visitors from the European Economic Area, the United Kingdom and Switzerland are asked for consent through a Google-certified consent message before personalized ads are shown, and can change their choice at any time using the privacy options link on the page. If your browser sends a Global Privacy Control signal, we ask Google to show you only non-personalized ads.

Ads in the free Android and iPhone apps

Without Pro, the phone apps show one small, clearly labeled banner from Google AdMob just above the bottom bar, on your email lists only. It hides when you open an email, Deadlines, Settings or anything else, and it's never shown inside an email. These ads are never personalized: we ask Google for non-personalized ads only, so they aren't based on you, your device's advertising ID or your activity in other apps, and they are never based on your email, summaries or anything else in your account. We don't share any of that with Google. To show the ad, measure it and prevent fraud, Google AdMob receives basic device and network details (such as your IP address and device type). In the European Economic Area, the UK and Switzerland, Google's consent form asks you first, and you can change your choice later. The iPhone app never asks to track you. See how Google uses information from apps that use its services.

Why we're allowed to use it

Where laws such as the EU and UK General Data Protection Regulation require a legal basis, we rely on:

2Sentence doesn't make decisions about you that have legal or similarly significant effects based only on automated processing. Summaries, categories and tasks only help you sort your own email.

School calendars and reminders

If you connect a school calendar (for example Moodle, Canvas, Blackboard or Google Calendar), we store its private link encrypted and read it about every two hours to get your due dates. We keep only each item's title, course, date and link, and use them to show your deadlines and send you a reminder the day before. Tasks you add in the app are also kept on our server for these reminders. Remove the calendar in the app to delete its link and dates.

Deadlines in your calendar (only if you tap Allow). In the Android app, 2Sentence asks the phone for calendar access and then keeps its own calendar on your phone, "2Sentence deadlines", with only the deadlines it found. It never reads or changes your other calendars or events, and turning it off deletes that calendar. On iPhone, the web and laptops, we make a private calendar link with your deadlines' titles and dates for your calendar app to subscribe to. Anyone with that link could see those titles, so keep it to yourself; turning it off in Settings makes the link stop working.

The brief by email (only if you turn it on). Once a day, 2Sentence sends one email from its own address to the address you signed in with, listing the two-line summaries of the emails that need you. It is sent through our email provider, Resend. It is never sent from or as you.

Sharing a deadline with your class. When you tap Share on a deadline, we keep only what's on the card: its title, the course line, the due time and your first name, at a public link (2sentence.space/d/...) that anyone you send it to can open, and count how many times it was opened and added to a calendar. The picture itself is made on your device. The link is deleted three days after the deadline.

Home-screen widget and countdown (Android app). Your next deadlines and your count of important unread email are saved on your phone for the widget and the countdown notification, and never leave it.

When 2Sentence sends you a deadline reminder, it notes the deadline's title, where it came from (email or calendar) and when it reminded you, so the Deadlines tab can show what it caught for you. It keeps the last 300 and deletes them with your account.

If you add your class timetable, the screenshot or text you share is read once to find your classes (by 2Sentence's own AI, or by Claude if you have Pro) and then discarded. We keep only the classes you save (day, time, course, room and teacher) to show your timetable and, if you turn them on, send class reminders. We never ask for or store your student portal password.

When information is shared

We share information only in these cases:

Where information is processed

2Sentence is run from India, and our server and the information it stores are located in India. Some of the providers listed above, including Anthropic, Google, Apple, Microsoft, Cloudflare, OpenRouter and Resend, process information in the United States and other countries. When information about people in the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum) in those providers' data processing terms.

How long we keep it

Security

Saved passwords, sign-in tokens and forwarded emails are encrypted with AES-256-GCM; forwarded emails use a separate key for each person. Connections use HTTPS, sign-in sessions use a secure, HTTP-only cookie, only a hash of each session identifier is stored, each person can only reach their own data, and email access is read-only. No system is perfectly secure, but we work to protect your information and will notify affected users of a breach as required by law.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict how it's used, and to complain to your data protection authority. To make a request, contact jethinproductions@2sentence.space. We'll respond within the time the law requires. We may need to confirm your identity first, usually by asking you to write from the email address on your account. We don't discriminate against anyone for exercising these rights. If you're in the EU, the UK or Switzerland, you can complain to the data protection authority where you live or work.

Your privacy choices (United States)

Residents of California and other US states with privacy laws have the right to know what personal information we collect, use and disclose (described in this policy), to access, correct and delete it, and to opt out of its "sale", its "sharing" for cross-context behavioral advertising and its use for targeted advertising.

You, or an agent you authorize, can make a request at jethinproductions@2sentence.space. If we deny your request, you can appeal by replying to our answer with the subject "Appeal", and we'll respond within the time the law requires.

Users in India

We process personal data in line with India's Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023 as its provisions come into force. You can ask to access, correct, complete or erase your personal data, withdraw your consent, and nominate another person to exercise your rights if you die or become unable to. Questions and complaints go to our Grievance Officer (details below), who will acknowledge them within 24 hours where required and resolve them within the time the law sets. If you aren't satisfied with the answer, you can complain to the Data Protection Board of India.

Children

2Sentence is not intended for children under 13, or under the minimum age for consent to data processing in your country (for example, 16 in some EU countries). If you're under 18, or under the age of majority where you live, you may use 2Sentence only with the permission of a parent or guardian. We don't knowingly collect information from children below these ages without that permission, and we never show them personalized ads. If you believe a child has given us information, contact us and we'll delete it.

Changes to this policy

We may update this policy as 2Sentence changes. We'll change the effective date above and, for significant changes, tell you in the app before they take effect.

Contact

Jethin Productions is the data controller (data fiduciary) responsible for your information.

Jethin Productions
Andhra Pradesh, India
Udyam Registration Number: UDYAM-AP-04-0151506
Email: jethinproductions@2sentence.space

Grievance Officer: Eddula Jethin
Email: jethinproductions@2sentence.space (subject "Grievance")