Duo Privacy Policy

by humans for humans, inc. ("BHFH," "Duo," "we," "us," or "our") has adopted this Privacy Policy to describe how we collect, use, disclose, and otherwise process personal information when you access or use Duo, our iOS application for couples, including its widgets and Live Activities, and any services, features, and functionality made available through it (collectively, the "Services"). Saga, our other app, has its own privacy policy.

By accessing or using the Services, you acknowledge that you have read and understand this Privacy Policy. This Privacy Policy is incorporated into and forms part of our Duo Terms of Service.

Capitalized terms not defined in this Privacy Policy shall have the meaning set forth in our Duo Terms of Service.

1. The Information We Collect and How We Use It

We may collect the following information about you, either because you provide it to us, it is directly necessary to provide our services, or because it helps us improve and secure the Services. We may use this information for the purposes described below and, where applicable, to comply with legal obligations, enforce our agreements, protect our rights and the rights of others, and in connection with a merger, acquisition, reorganization, financing, sale of assets, or other corporate transaction involving all or part of our business.

Information You Disclose To Us

The following categories of personal information are collected directly from you when you register with the Services, pair with a partner, use features of the Services, or otherwise contact us:

Account Information: You create an account with your phone number. Our sign-in provider, Google Firebase Authentication, sends you a one-time code by text message and confirms it. We store your phone number with your account and use it to create and manage your account, authenticate your identity, and help protect against unauthorized access or misuse. We do not show your phone number to your partner.

Profile Information: This includes your first name, your photo if you add one, and optional details you choose to give us: pronouns, your anniversary, whether you and your partner live in the same city or long distance, how you heard about Duo, and a nickname you set for your partner. We also store your time zone so your day starts and ends at your own midnight. Your photo is stored on our servers and shown to your partner in the app and in widgets. When you invite your partner, anyone who opens your invite link while it is open (up to 48 hours) can see your first name and photo.

Communications Data: When you contact us, we collect information about your communications, requests, and preferences. We use this information to respond to you, provide support, and improve the Services.

Location and Motion: With your permission, Duo collects your precise location, including in the background when the app is closed. This covers location samples (coordinates, accuracy, speed, and direction), visits detected by iOS, and whether you are walking, cycling, or driving, which comes from your iPhone's motion sensors. Place and area names are looked up on your iPhone through Apple's location services. We use this information to show your partner your day: the places you stop, the route between them, how far you traveled, and how long ago each reading was taken. We also suggest your Home and Work from where you spend nights and weekday hours, for you to confirm, and send arrival notifications you and your partner turn on. Your partner can ask for a fresh update, in which case Duo may send your current location in the background, within your sharing settings. When you choose "Go live," Duo shares your live location, distance, estimated arrival, and, if you share heart rate, your current heart rate with your partner in the app and in a Live Activity on their Lock Screen. A live share ends when you stop it, when you arrive, or after 8 hours.

Apple Health: With your permission, Duo reads heart rate, resting heart rate, sleep, and workouts (type, start and end times, distance, active energy, heart rate during the workout, and the name of the app or device that recorded it). Duo sends hourly heart-rate summaries (lowest, average, and highest), your daily resting heart rate, your latest reading, your sleep sessions and stages, and your workouts to our servers. Duo does not write to Apple Health. We use Apple Health data only to run Duo: to show your partner how your day is going. Apple Health data is never sold, and never used or shared for advertising, marketing, data mining, or third-party analytics. It is never sent to our analytics, crash reporting, or subscription screen providers, and it is filtered out of our logs. We share it only with your partner, as you choose, and with the infrastructure providers that host and deliver the Services. You can choose which categories to share in Duo's settings, and revoke access in the Apple Health app.

Push Notifications: We store the push notification tokens Apple gives your iPhone, including tokens for Live Activities, and your notification settings. Notifications and Live Activities may include your partner's name, arrivals, distance, estimated arrival, and heart rate. Apple's push notification service delivers them.

Subscription Information: Payment is handled by Apple, and we never receive your card or payment details. When you subscribe, restore a purchase, or your subscription changes, we receive signed transaction records from Apple, including the plan, an original transaction ID, whether you are in a free trial, whether the plan renews, and when it expires. We verify these records on our servers and use them to give you and your partner access and to remind you before a free trial ends.

Information Automatically Collected

We may automatically collect, ourselves or through third party service providers, the following types of personal information when you use the Services.

Log and Usage Data: This includes the date and time of requests to our servers, the features you use, your Internet Protocol (IP) address, device identifiers, your device model, operating system, and app version, whether you have added a Duo widget, and your location permission level. We use this information to operate and secure the Services, tell you and your partner when sharing is off, and improve the Services. Health and location values are filtered out of our server logs.

Crash Reports: We use Sentry to find and fix crashes and errors. Crash reports include technical details such as the error, device model, operating system, and app version. Health values, location, and phone numbers are filtered out before a report is sent, and we do not attach screenshots.

Information You Provide Us About Others

The Services are intended for you to submit information about yourself. If you submit information about other individuals, such as a nickname for your partner or the name of a place, we process it only as necessary to provide and operate the Services. Your partner's information is collected from your partner, under their own settings. You represent and warrant that you have obtained all legally required permissions and consents for any personal information about others that you submit.

2. How We Share Your Information

We may disclose your personal information to the following categories of third parties for the purposes described below. We do not "sell" or "share" your personal information as those terms are defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, or under any other applicable U.S. state privacy law. We do not show ads.

Your partner. Duo shares your day only with the one person you are paired with. Sharing is always two-way: if either of you shares only a rough area (about a 1 km area and a neighborhood name, with no place names or route), both of you see each other that way, except that if you start a live share on your way home, your partner is told when you get home; if either of you pauses, neither sees the other's location or heart rate; a health category shows only when both of you share it; and stops inside a place you mark as private are left out of your partner's view entirely. Your partner may see your latest information in widgets on their Home Screen and in Live Activities on their Lock Screen, which anyone who can see their iPhone may also see.

Vendors, consultants, and service providers. Our service providers include Railway (hosting and database, in the United States), Google Firebase (phone number sign-in and text message codes), Apple (push notifications, Live Activities, App Store purchases and subscription records, and on-device place names), Amplitude (product analytics), Sentry (crash reporting), and Superwall (the subscription screen). Superwall receives your Duo account ID, first name, whether you and your partner live in the same city or long distance, whether you were invited by your partner, and how you interact with the subscription screen. These providers process information on our behalf to operate the Services.

Product analytics. We analyze how people use Duo with our analytics provider, Amplitude. This covers app opens and sessions, the screens you open, and the actions you take (for example, finishing onboarding, pairing, or sending a nudge), with a small, fixed set of properties such as the onboarding step, your sharing precision setting, or whether you have a wearable. Amplitude also receives standard device and app information and an approximate location derived from your IP address. We never send health data, coordinates, place names, or anything you type to Amplitude, and we do not record your screen. Analytics data is linked to your Duo account ID, not your name or phone number. To opt out, or to ask us to delete your analytics data, contact us as described in Section 11.

Legal and protective disclosures. We may disclose personal information as required or permitted by law, including:

• With government authorities, law enforcement agencies, or our legal counsel to comply with any court order, law, or legal process;
• To enforce or apply our Terms of Service and other agreements, including to investigate, prevent, or take action regarding potential violations, fraud, or security issues;
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Duo, our users, or others; or
• To a buyer, prospective buyer or other successor in the negotiation or effectuation of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.

3. Your Privacy Choices

Sharing Controls. In Duo, you can share precisely, share only a rough area, or pause sharing; mark places as private; choose which Apple Health categories to share and which notifications to receive; delete your history; unpair; or delete your account. You can also change or withdraw location, motion, Apple Health, camera, photo, and notification permissions in iPhone Settings. Some features stop working without them.

Do Not Track and Universal Opt-Out Signals. Some web browsers may transmit "Do Not Track" ("DNT") signals to Services. At this time, we do not respond to DNT signals because there is no uniform industry standard governing their interpretation. Separately, we honor universal opt-out preference signals, such as browser- or device-based mechanisms that communicate your choice to opt out of targeted advertising, the sale or sharing of personal information, or certain profiling activities, to the extent required by applicable law.

Exercising Your Privacy Rights. You may contact us to exercise your privacy rights or to relay any questions or concerns as set forth in Section 11.

4. How We Protect the Information

We implement reasonable technical and organizational measures designed to help protect personal information from loss, unauthorized access, use, alteration, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Your security also depends on you. You are responsible for keeping your phone and account secure. While we strive to protect your data, any transmission over the internet is at your own risk, and we are not responsible for circumvention of security measures on or through the Services.

5. External Sites

The Services may also contain hyperlinks to other third-party websites or apps ("External Sites"). We have no control over the privacy practices or the content of any of our business partners, or External Sites to which we provide hyperlinks. As such, we are not responsible for the content or the privacy policies of those External Sites. You should check the applicable third-party privacy policy and terms of service when visiting any External Sites.

6. Children's Information

We do not knowingly collect personal information from children under the age of 16 or, if higher, the age at which an individual is considered a "child" under applicable data protection or privacy laws in your jurisdiction (the "Minimum Age"). If you are under the Minimum Age, do not provide us with personal information. Parents and guardians should monitor their children's online activity and instruct them not to share personal information without permission. If you believe a child under the Minimum Age has provided us with personal information, please contact us as described in Section 11 so we can delete it.

7. Data Retention

We retain your personal information for as long as reasonably needed to fulfill the purposes for which the personal information was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. In addition:

• Deleting history. When you delete history from the last hour, today, the last 7 days, or everything, we delete your stops, visits, location samples, heart rate, sleep, workouts, and live shares from that range. Your saved places, private places, settings, and pairing stay. If you turn on automatic deletion, we delete history older than the number of days you choose.
• Unpairing. When either of you unpairs, sharing stops right away. We keep the history each of you recorded while paired for 30 days, so that if you pair with each other again you can both choose to restore it. If either of you chooses to start fresh, or after 30 days, we delete it.
• Deleting your account. When you delete your account in the app, we end your pairing and notify your partner, then delete your account, profile, photo, history, places, settings, devices, invites, and subscription records from our database. Your partner's own history from while you were paired is kept for 30 days and then deleted, as with unpairing. Deleting your account does not cancel an App Store subscription.
• Held by providers. Deleting your account does not automatically remove your sign-in record, including your phone number, held by Google Firebase; analytics held by Amplitude; crash reports held by Sentry; information held by Superwall; or copies in routine backups, which expire on their normal schedule. To ask us to delete these, contact us as described in Section 11.

8. Important Notice to Non-U.S. Residents

The Services and its servers are operated in the United States. If you are located outside of the United States, please be aware that your information, including your personal information, may be transferred to, processed, maintained, and used on computers, servers, and systems located outside of your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as those in your country of origin. If you are located outside the United States and choose to use the Services, you consent to any transfer and processing of your personal information in accordance with this Privacy Policy, and you do so at your own risk.

9. U.S. State Privacy Laws

Depending on your place of residence, you may have certain rights regarding how we collect, use, and share your personal information under applicable U.S. state privacy laws. These rights may be subject to limitations or exceptions, and not all rights may apply in every circumstance. Precise location and health information may be sensitive personal information under some of these laws; we use them only to provide the Services you request.

Subject to applicable law, these rights may include:

• The right to confirm whether we process your personal information and to access such personal information.
• The right to request correction of inaccuracies in your personal information.
• The right to request deletion of your personal information.
• The right to request a copy of certain personal information you have provided to us, where required by law.
• The right to opt out of certain types of processing, including processing for targeted advertising purposes, where applicable.
• The right to opt out of profiling or automated decision-making in furtherance of decisions that produce legal or similarly significant effects, where provided by law.
• The right to opt out of the sale or sharing of personal information, as defined under applicable law.
• The right to limit the use or disclosure of sensitive personal information, where required by law.
• The right to designate an authorized agent to submit a request on your behalf, where permitted by law.
• The right to appeal a decision regarding your privacy rights request, where required by applicable law.
• The right not to receive discriminatory treatment for exercising your privacy rights.

To request to exercise your rights, please contact us as described in Section 11. We may take reasonable steps to verify your identity before responding to your request. We will respond to verified requests within the timeframes required by applicable law.

10. Changes to This Privacy Policy

This Privacy Policy is effective as of the date stated at the top of this Privacy Policy. We may change this Privacy Policy from time to time with or without notice to you. Any such changes will be posted on this page and reflected by an updated "Effective" date above. If we make material changes to how we collect, use, or disclose your personal information, we may provide additional notice, such as by posting a prominent notice in the app, where required by applicable law. By continuing to access or use the Services after any updates become effective, you acknowledge the revised Privacy Policy. Please refer back to this Privacy Policy on a regular basis.

11. How to Contact Us

If you have any questions about this Privacy Policy or to report a privacy issue, please contact us in one of the following ways:

Email: contact@yoursaga.co