Privacy Policy

2.1 Information You Provide

2.2 Information Collected Automatically

2.3 Information From Third Parties

3.1 Provide and Maintain the Service

• Create and manage your account
• Enable couple pairing and shared experiences
• Synchronize data across devices
• Provide reminders and notifications
• Provide customer support

3.2 Improve the Service

• Understand feature usage and improve performance
• Fix bugs and prevent crashes
• Develop new features

3.3 Process Subscriptions

• Verify subscription status
• Enable premium features (as applicable)
• Manage billing-related support issues (e.g., entitlement restoration)

3.4 Security and Fraud Prevention

• Detect, prevent, and address fraud or abuse
• Enforce our Terms of Service
• Protect the safety and integrity of the Service

3.5 Legal Compliance

• Comply with legal obligations
• Respond to lawful requests (e.g., subpoenas, court orders)

4.1 What AI Is Used For

• Creating a weekly plan during onboarding
• Suggesting city-based date ideas

4.2 What We Share With AI Providers

For these AI features, we only share:

• The city you provide, and
• The activity types you select during onboarding (solo activities and couple activities)

4.3 What We Do NOT Share With AI Providers

We do not send:

• Your name, email address, or other identifiers
• Partner details
• Your calendar events, titles, descriptions, notes, locations, checklists, attachments
• Messages or support communications
• Any other personal profile information

5.1 What Your Partner Can See When You Join a Couple

When you join a couple, Duotone is designed to allow shared visibility within the couple based on how you use the app. Depending on your event settings and ownership selections, your partner may see shared items (for example, events marked as “Ours” or otherwise shared in the couple context).

5.2 Private Data

The following remains private and is not shared with your partner by default:

• Your authentication credentials
• Your email address (unless you choose to share it outside the app)
• Your support communications
• Any events you mark as “busy” or private (as supported by the app’s visibility controls)

5.3 Account Deletion and Couple Status

If you delete your account:

• Your account is removed from the couple immediately
• Your partner will not retain access to your account data
• Your partner will keep access only to events and data they created

6.1 Service Providers

We use trusted vendors to operate the Service:

• Supabase (Database, Storage, Authentication)
  • Stores account, event, and couple data
  • Region: US-East-2
• RevenueCat (Subscriptions)

  Manages subscription status and entitlements

• OneSignal (Push Notifications)

  Sends push notifications and manages notification tokens

• PostHog (Analytics)

  Helps us understand product usage to improve the Service

• Sentry (Error Tracking)

  Helps us diagnose crashes and fix bugs

• Resend (Email Delivery)

  Sends transactional emails such as invitations and password resets

These service providers are authorized to process your data only as necessary to provide their services to us.

6.2 Legal Requirements

We may disclose information if we believe in good faith it is necessary to:

• Comply with applicable law and lawful requests
• Protect the rights, property, or safety of Duotone, our users, or others
• Prevent fraud, abuse, or security incidents

6.3 Business Transfers

If Duotone is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will provide notice if your information becomes subject to a different privacy policy.

8.1 Active Accounts

We retain your information as long as your account is active and as needed to provide the Service.

8.2 Account Deletion

When you delete your account, your personal data is removed from our active databases immediately. It may remain in encrypted backups for up to 30 days before being permanently overwritten. You are also removed from the couple at that time.

We may retain limited records where required for legal, tax, security, or fraud-prevention purposes (for example, subscription entitlement logs or security logs), but we do not retain your in-app calendar content after deletion.

9.1 Access and Correction

You can access and update certain information through in-app settings (e.g., profile and preferences).

9.2 Account Deletion

You can delete your account at any time:

Settings → Danger Zone → Delete Account

This action is permanent.

9.3 Notifications

You can control push notifications via:

• In-app notification preferences (if available), and/or
• Device-level notification settings

9.4 Marketing Communications

We do not send marketing emails unless you explicitly opt in. You may opt out at any time via the unsubscribe link or by emailing support@duotoneapp.com.

(Transactional emails such as password resets or invitations may still be sent when necessary.)

10.1 California and Other U.S. State Privacy Rights

If you reside in certain U.S. states (including California), you may have rights to request access to or deletion of your personal information.

Duotone does not sell personal information and does not share personal information for cross-context behavioral advertising.

To make a privacy request, contact: support@duotoneapp.com

We may request information to verify your identity before fulfilling your request.

10.2 European Users (EEA/UK)

If you are located in the EEA or UK, you may have rights under applicable data protection laws, including access, correction, deletion, restriction, objection, and data portability.

To exercise these rights, contact: support@duotoneapp.com

Lawful Bases (EEA/UK)

Where applicable, we process personal data on the following bases:

• Contract: to provide the Service (account, core functionality, subscriptions)
• Legitimate interests: to secure and improve the Service (fraud prevention, reliability, analytics)
• Consent: where required for optional features and marketing communications