PRIVACY POLICY
This Privacy Notice for Duette App ("we," "us," or "our") describes how and why we may access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
- Download and use our mobile application, Duette: For Couples, or any other application of ours that links to this Privacy Notice.
- Use Duette as a private space for couples to capture and relive memories together, save photos, create shared bucket lists, track special moments, and stay connected through daily snapshots.
- Engage with us in other related ways, including marketing or events.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, contact us at support@duette.app.
SUMMARY OF KEY POINTS
This summary provides key points from our Privacy Notice. You can use the table of contents below to jump to the full section you want.
- Personal information we process: We process information you provide directly, such as email addresses, usernames, passwords, and contact or authentication data.
- Sensitive information: We do not process sensitive personal information.
- Third-party data: We do not collect personal information from third parties except where you choose to use social login features.
- How we use information: We use your information to provide, improve, administer, and secure our Services; communicate with you; prevent fraud; and comply with legal obligations.
- Sharing: We may share personal information with specific service providers and in limited situations such as business transfers.
- Security: We use organizational and technical measures to protect personal information, but no system is completely secure.
- Your rights: Depending on where you live, you may have rights to access, correct, delete, or request a copy of your personal information.
- How to exercise rights: Submit a data subject access request or contact us directly.
TABLE OF CONTENTS
- What Information Do We Collect?
- How Do We Process Your Information?
- What Legal Bases Do We Rely On?
- When and With Whom Do We Share Information?
- How Do We Handle Social Logins?
- Is Your Information Transferred Internationally?
- How Long Do We Keep Your Information?
- How Do We Keep Your Information Safe?
- Do We Collect Information From Minors?
- What Are Your Privacy Rights?
- Controls for Do-Not-Track Features
- Do United States Residents Have Specific Privacy Rights?
- Do Other Regions Have Specific Privacy Rights?
- Do We Make Updates to This Notice?
- How Can You Contact Us About This Notice?
- How Can You Review, Update, or Delete Your Data?
1. WHAT INFORMATION DO WE COLLECT?
Personal Information You Disclose to Us
We collect personal information that you voluntarily provide when you register on the Services, express interest in obtaining information about us or our Services, participate in activities on the Services, or otherwise contact us.
The personal information we collect may include:
- Email addresses
- Usernames
- Passwords
- Contact or authentication data
Sensitive Information. We do not process sensitive information.
Social Media Login Data
We may provide the option to register or sign in using an existing social media account. If you choose to do so, we will collect certain profile information from your social media provider as described in Section 5.
Application Data
If you use our application(s), we may collect the following if you grant access or permission:
- Mobile Device Data. We may automatically collect device information such as device ID, model, manufacturer, operating system, version information, system configuration, application identifiers, browser type and version, IP address or proxy server, mobile carrier, and information about application features you accessed.
- Push Notifications. We may request permission to send push notifications about your account or application features. You can disable these in your device settings.
This information is primarily needed to maintain security and operation of our application(s), troubleshoot issues, and support internal analytics and reporting.
Google API
Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
2. HOW DO WE PROCESS YOUR INFORMATION?
We may process your personal information to:
- Facilitate account creation, authentication, and account management.
- Request feedback and contact you about your use of the Services.
- Protect our Services through fraud monitoring and prevention.
- Save or protect an individual's vital interests where necessary.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
If You Are Located in the EU or UK
Under the GDPR and UK GDPR, we may rely on the following legal bases:
- Consent. We may process your information when you have given us permission for a specific purpose.
- Legitimate Interests. We may process information when reasonably necessary to achieve legitimate business interests, such as diagnosing problems, preventing fraud, and improving user experience.
- Legal Obligations. We may process information to comply with legal obligations or defend legal rights.
- Vital Interests. We may process information to protect the safety of an individual.
If You Are Located in Canada
We may process your information with your express or implied consent, depending on the context and applicable law. In some cases, Canadian law may permit us to process information without consent, including for investigations, fraud prevention, business transactions, legal compliance, protecting injured or vulnerable individuals, journalistic or artistic purposes, or where information is publicly available.
We may also disclose de-identified information for approved research or statistics projects subject to ethics oversight and confidentiality commitments.
6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
Our servers are located in the United States. Your information may be transferred to, stored, and processed in the United States and other countries where we or our service providers operate.
If you are located in the EEA, UK, or Switzerland, those countries may not have data protection laws as comprehensive as those in your jurisdiction. We will take appropriate steps to protect your personal information in accordance with this Privacy Notice and applicable law.
We use the European Commission's Standard Contractual Clauses where required. Supabase's Data Processing Agreement is available at https://supabase.com/legal/dpa.
7. HOW LONG DO WE KEEP YOUR INFORMATION?
We will not keep personal information longer than necessary for the purposes described here. In general, we keep personal information for as long as the user has an account with us.
When we no longer have an ongoing legitimate business need to process your personal information, we will delete or anonymize it, or if that is not possible, we will securely store it and isolate it from any further processing until deletion is possible.
8. HOW DO WE KEEP YOUR INFORMATION SAFE?
We have implemented appropriate and reasonable security measures designed to protect the security of personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You should access the Services only within a secure environment.
9. DO WE COLLECT INFORMATION FROM MINORS?
By using the Services, you represent that you are at least 18 or the equivalent age in your jurisdiction, or that you are the parent or guardian of a minor who is permitted to use the Services. If we learn we have collected data from a minor in violation of applicable law, we will deactivate the account and delete the data as soon as reasonably possible.
If you believe we may have collected data from a child, contact us at support@duette.app.
10. WHAT ARE YOUR PRIVACY RIGHTS?
In some regions, including the EEA, UK, Switzerland, Canada, and some US states, you may have rights to request access to, correction of, deletion of, restriction of processing of, or portability of your personal information. You may also have the right to object to certain types of processing.
If a decision that produces legal or similarly significant effects is made solely by automated means, we will inform you, explain the main factors, and offer a way to request human review.
If you are located in the EEA or UK and believe we are unlawfully processing your data, you may complain to your local data protection authority. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing Your Consent
Where we rely on your consent, you may withdraw it at any time by contacting us. This will not affect the lawfulness of processing carried out before withdrawal or any processing based on another legal ground.
Account Information
If you would like to review, change, or terminate your account, you can contact us using the contact information provided below.
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases, subject to any lawful retention requirements.
Questions about privacy rights can be sent to support@duette.app.
11. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. Because no uniform technology standard for recognizing and implementing DNT signals has been finalized, we do not currently respond to DNT browser signals or similar mechanisms.
California law also requires us to disclose this position. We do not respond to DNT signals at this time.
12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
Categories of Personal Information We Collect
The following table reflects the categories identified in the policy you provided and whether we collected them in the preceding twelve months.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Real name, alias, email address, IP address, online identifier, account name | YES |
| B. California customer records information | Name, contact information, education, employment history, financial information | YES |
| C. Protected classification characteristics | Gender, age, date of birth, race, ethnicity, national origin, marital status | NO |
| D. Commercial information | Transaction information, purchase history, payment information | NO |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or similar network activity | Browsing history, search history, interactions with sites or ads | NO |
| G. Geolocation data | Device location | NO |
| H. Audio, electronic, sensory, or similar information | Images, audio, video, or call recordings | NO |
| I. Professional or employment-related information | Business contact details, job title, work history | NO |
| J. Education information | Student records and directory information | NO |
| K. Inferences drawn from collected personal information | Profiles or summaries about preferences and characteristics | NO |
| L. Sensitive personal information | Sensitive personal information | NO |
We may also collect personal information outside these categories when you interact with us through support, surveys, contests, or service delivery communications.
We retain Category A and Category B information for as long as the user has an account with us.
Your Rights
You may have rights including:
- The right to know whether we process your personal data
- The right to access your personal data
- The right to correct inaccuracies
- The right to request deletion
- The right to obtain a copy of your personal data
- The right to non-discrimination for exercising your rights
- The right to opt out of targeted advertising, the sale or sharing of personal data, or certain profiling activities, where applicable
Depending on your state, you may also have additional rights regarding categories of data processed, lists of third parties, profiling, and sensitive data controls.
How to Exercise Your Rights
You may exercise your rights by submitting a data subject access request, emailing support@duette.app, or using the contact details below.
Request Verification
We may need to verify your identity before processing your request. If you use an authorized agent, we may require proof of authorization and additional identity verification.
Appeals
If we decline to act on your request and you live in a state that grants appeal rights, you may appeal by emailing support@duette.app.
California "Shine The Light" Law
California residents may request, once per year and free of charge, information about categories of personal information disclosed to third parties for direct marketing purposes and the names and addresses of those third parties, if applicable.
13. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?
Australia and New Zealand
We collect and process personal information under Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. If you do not provide information necessary for the relevant purpose, it may affect our ability to offer products or services, respond to requests, manage your account, or confirm your identity.
You may request access to or correction of your personal information by contacting us. If you believe we are unlawfully processing your information, you may complain to the Office of the Australian Information Commissioner or the Office of New Zealand Privacy Commissioner.
Republic of South Africa
You may request access to or correction of your personal information by contacting us. If you are unsatisfied with how we handle your complaint, you may contact the Information Regulator (South Africa):
The Information Regulator (South Africa)
General enquiries: enquiries@inforegulator.org.za
Complaints: PAIAComplaints@inforegulator.org.za and POPIAComplaints@inforegulator.org.za
14. DO WE MAKE UPDATES TO THIS NOTICE?
We may update this Privacy Notice from time to time. The updated version will be indicated by a revised date at the top of this page. If we make material changes, we may notify you by posting a notice or sending a direct notification where appropriate.
15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, you may email us at support@duette.app or contact us by post at:
Duette App __________ __________
16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
Depending on applicable law in your country or US state of residence, you may have the right to request access to the personal information we collect from you, learn how it has been processed, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent in some circumstances.
To request to review, update, or delete your personal information, please fill out and submit a data subject access request.
5. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
Where you choose to use a third-party login, we may receive profile information such as your name, email address, profile picture, friend list, and other information you choose to make public. We use this information only for the purposes described in this Privacy Notice or otherwise made clear in the Services.
We do not control how your third-party social media provider uses your personal information. You should review that provider's privacy notice directly.