Privacy Policy
This privacy notice for DuoDay ("we," "us," or "our") describes how and why we collect, store, use, and share your personal information when you use the DuoDay mobile application, the website duoday.app, and related services (together, the "Services").
Reading this notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use the Services. Questions or concerns: support@duoday.app.
Summary of key points
- What we process. Your email, profile details, and the household content you and your partner add — meals, lists, activities, and (if you enable family mode) information about your children that you enter yourselves.
- Sensitive information. We do not ask for sensitive information. Free-form notes may contain whatever you choose to write; they are shared only with your household.
- Third-party sources. We do not collect information about you from third parties or data brokers.
- Why we process it. To run the Services, keep your household in sync, send notifications you've allowed, communicate with you, improve the product, and comply with law.
- Sharing. Only with service providers who process data on our behalf. We do not sell personal information, and we do not share it for advertising.
- Your rights. Depending on where you live, you can access, correct, delete, and export your data, and object to or restrict processing. See Your privacy rights.
- Exercising them. Most of it you can do in the app — including full account deletion. For everything else: support@duoday.app.
Table of contents
- 1. What information do we collect?
- 2. How do we process your information?
- 3. What legal bases do we rely on?
- 4. When and with whom do we share it?
- 5. Third-party services and links
- 6. Cookies and tracking technologies
- 7. International transfers
- 8. How long do we keep your information?
- 9. How do we keep it safe?
- 10. Children's privacy
- 11. Your privacy rights
- 12. Do-Not-Track
- 13. United States residents
- 14. Updates to this notice
- 15. How to contact us
- 16. Review, update, or delete your data
1. What information do we collect?
Information you provide to us
- Account information. Your email address, used to sign you in with one-time codes.
- Profile information. Your display name, chosen accent color, and — optionally — a short bio line and a profile photo.
- Household content. The meals, grocery items, activities, notes, and locations you or your household partner add. This content is shared between the two adults in your household by design.
- Family-mode information. If you enable family mode, the child profiles you create (first name, color, and optionally a birthday, stage, and photo), their schedules, and related notes. This information is entered and controlled entirely by the adults in the household — see Children's privacy.
- Communications. If you contact support, the contents of that correspondence.
Information collected automatically
- Device and technical data. Basic technical information needed to operate the Services, such as device type, operating system version, app version, language, and IP address (processed transiently to deliver the Services).
- Push tokens. If you allow notifications, the device token needed to deliver them.
- Diagnostics. If the app crashes or malfunctions, technical reports (stack trace, device model, OS version). These are not used to profile you.
- Usage information. We may collect aggregated or pseudonymized information about how the Services are used (for example, which features are used most) to improve the product. We do not build advertising profiles.
Payment information
Subscriptions are purchased through the Apple App Store or Google Play. Payment is processed entirely by those stores under their own terms and privacy policies; we never receive your card or bank details. We receive only what is needed to confirm your household's subscription status.
Address search
When you search for a place to attach to a plan, the text you type is sent to a geocoding provider to return matching addresses. The query is not linked to your account, and the resulting address is stored only if you attach it.
2. How do we process your information?
- To provide the Services — creating and maintaining your account, syncing content between the members of your household in real time, and delivering the features you use.
- To send notifications you have opted into, about your own household's events.
- To communicate with you — service messages such as sign-in codes, important changes to the Services or these terms, and responses to your requests.
- To send marketing communications — only if and when you opt in. You will always be able to unsubscribe with one tap or click, and declining marketing never affects the Services.
- To improve the Services — understanding, in aggregate, how features are used, and diagnosing crashes and defects.
- To keep the Services safe — preventing fraud, abuse, and unauthorized access.
- To comply with legal obligations and enforce our terms.
3. What legal bases do we rely on?
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information only when we have a valid legal basis:
- Performance of a contract — most processing happens because it is necessary to provide the Services you signed up for.
- Consent — for things like push notifications, optional photos, and any future marketing communications. You can withdraw consent at any time.
- Legitimate interests — improving and securing the Services and communicating essential service information, where those interests are not overridden by your rights.
- Legal obligations — where processing is required to comply with applicable law.
4. When and with whom do we share your information?
We do not sell personal information, and we do not share it with third parties for their own marketing or advertising. We share personal information only in these situations:
- Your household. By design, the content you add is visible to the other adult in your household, attributed to you.
- Service providers. Vendors who process data on our behalf and only on our instructions: cloud hosting and data storage, push notification delivery, email delivery, crash reporting, address search, and the app stores that handle billing. Each provider is bound to use the data only to provide its service to us.
- Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your personal information becomes subject to a different privacy notice.
- Legal requirements. If required by law, legal process, or to protect the rights, safety, and security of DuoDay, our users, or the public.
5. Third-party services and links
The Services may contain links that open third-party apps or websites — for example, opening an address in your maps app. Once you leave DuoDay, this notice no longer applies; the third party's own privacy policy governs. We are not responsible for the practices of services we do not operate.
6. Cookies and tracking technologies
The DuoDay app contains no advertising or cross-app tracking SDKs. Our website uses Vercel Web Analytics, a cookieless measurement tool that counts page visits in aggregate — it sets no cookies, stores no identifiers on your device, and does not track you across sites. Beyond that, the website uses no cookies except what is strictly necessary to serve it. If we introduce other analytics or non-essential cookies in the future, we will update this notice and, where required, ask for your consent first.
7. International transfers
Our service providers may store and process information on servers located outside your country, including in the European Union and the United States. Where personal information of EEA, UK, or Swiss residents is transferred to countries without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
8. How long do we keep your information?
- Account and household data is kept for as long as your account exists.
- When you delete your account, your sign-in and profile are permanently removed. If your household partner remains, the shared household content stays with them (no longer attributed to you); if you are the last member, the entire household — including any child profiles — is deleted.
- Diagnostics (crash reports) are retained only as long as needed to investigate and fix issues.
- Residual copies may persist briefly in encrypted backups before being cycled out, and we may retain limited records where the law requires it.
9. How do we keep your information safe?
We use appropriate technical and organizational measures: encryption of data in transit, strict access controls that limit each household's data to its own members, and least-privilege access internally. That said, no method of electronic transmission or storage is 100% secure — we cannot guarantee absolute security, and you use the Services at your own risk. Protect access to the email account you sign in with.
10. Children's privacy
DuoDay is designed for the adults running a household, and it is not directed to children. You must be at least 16 years old to create an account, and we do not knowingly collect personal information directly from anyone younger. Children referenced in family mode never sign in, have no credentials, and are never contacted by us.
Family mode lets the adults in a household store information about their own children (such as a first name and schedule) to coordinate care. By entering it, you confirm you are the child's parent or legal guardian, or have their permission. This information is visible only to your household, is never used for any other purpose, and can be edited or deleted by either adult at any time. It is deleted with the household.
If you believe a child has provided us personal information directly, contact support@duoday.app and we will delete it.
11. Your privacy rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you.
- Rectification — correct inaccurate or incomplete information (most profile details you can edit directly in the app).
- Erasure — delete your personal information (available directly in the app: Settings → Delete account).
- Portability — receive your data in a structured, commonly used, machine-readable format.
- Restriction and objection — restrict or object to certain processing, including any direct marketing.
- Withdraw consent — where processing is based on consent (such as notifications or marketing), withdraw it at any time without affecting prior processing.
To exercise any right, use the in-app controls or email support@duoday.app. We will verify your identity (normally by confirming control of your sign-in email) and respond within the timeframe required by applicable law. We will never discriminate against you for exercising your rights.
If you are in the EEA, UK, or Switzerland and believe we are processing your personal information unlawfully, you have the right to complain to your local data protection supervisory authority.
12. Do-Not-Track
Some browsers include a Do-Not-Track ("DNT") setting. No uniform technology standard for recognizing DNT signals has been finalized, and we do not currently respond to them. We also do not track our users across third-party apps or websites in the first place.
13. United States residents
If you live in California, Colorado, Connecticut, Utah, Virginia, or another US state with a comprehensive privacy law, you may have specific rights: to know what personal information we collect and how it is used and shared; to access, correct, and delete it; to obtain a portable copy; and to opt out of sales, targeted advertising, and certain profiling.
We do not sell personal information, and we do not share it for cross-context behavioral or targeted advertising — so there is nothing to opt out of. We have not sold or shared personal information in the preceding twelve months, and we do not use or disclose sensitive personal information for purposes requiring a right to limit.
You may exercise your rights through the in-app controls or by emailing support@duoday.app, directly or through an authorized agent. We verify requests by confirming control of the account's sign-in email. If we decline a request, you may appeal by replying to our decision; California residents may also contact the California Privacy Protection Agency.
California "Shine the Light": we do not disclose personal information to third parties for their direct marketing purposes.
14. Updates to this notice
We may update this notice from time to time — for example, if our practices, providers, or legal requirements change. The updated version will be posted here with a new "Last updated" date, and material changes will be flagged in the app or by email. Earlier versions are available on request.
15. How to contact us
DuoDay
Email: support@duoday.app
16. Review, update, or delete your data
You can review and update your profile, household content, and family-mode information directly in the app, and delete your account entirely under Settings → Delete account. To request access, portability, correction, or deletion without the app, email support@duoday.app from your sign-in address.