Privacy Policy
Last updated: October 13, 2026
1. Who we are
Dualo (“we”, “us”) provides a mobile app for couples. This Privacy Policy explains what data we collect, why, and how you can control it. Contact: hello@getdualo.site.
2. Data we collect
Account data: email and authentication identifiers (via Supabase Auth). Profile data: first name, birthday, gender, relationship details you choose to share during onboarding, and optional profile photo. Couple data: invite codes, membership, answers to questions, favorites, timeline memories (including photos you upload), and special days / reminder preferences. Device / tech data: push tokens when you enable notifications, and basic diagnostics when crash reporting is enabled.
3. How we use data
We use your data to create and secure your account, pair you with your partner, sync shared content between your devices, personalize the experience, send optional reminders you enable, improve reliability, and comply with legal obligations. We do not sell your personal data.
4. Sharing
Your partner sees content shared in your couple space. We use infrastructure providers (currently Supabase for auth, database, and storage; Firebase for push notifications) as processors under their terms. We may disclose data if required by law or to protect the safety of users or Dualo.
5. Retention
We keep your data while your account is active. When you delete your account, we delete or anonymize personal data within a reasonable period, except where we must retain records for legal reasons. Backups may persist briefly before expiry.
6. Security
We rely on industry-standard controls (encrypted transit, row-level security on couple data, access-controlled storage). No method of transmission or storage is 100% secure; please use a strong password and keep your invite code private.
7. Your rights
Depending on your region (e.g. GDPR/UK GDPR, CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Request these via in-app account deletion or hello@getdualo.site.
8. Children
Dualo is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided data, contact us and we will delete it.
9. International transfers
Your data may be processed in the EU (our current Supabase region) or other regions where our providers operate. Where required, we rely on appropriate safeguards for cross-border transfers.
10. Changes
We may update this Privacy Policy. We will revise the “Last updated” date on this page. Continued use after changes means you acknowledge the updated policy.