Privacy Policy

Duet is made by Octo8. We ask for the minimum we need, and nothing more. This is the same policy you’ll find inside the app.

What we collect

Account: the identifier from Sign in with Apple or Google — whichever you choose — plus a display name and emoji you pick.
Content you create: notes, reminders, lists, plans, nudges, bills and the memories you pin in Journey — private to you and your partner.
Location, only when you tap: an approximate area when you share it with your partner, or the exact place when you pin a Journey memory to where you are.
Technical: notification tokens so your partner’s notes can reach you, and crash and performance reports so we can fix what breaks.
Usage analytics: which screens and features you use, linked to your account. Never the content of your notes, your names, what is on your lists or your bills. You can switch this off in Settings.
Subscription status: whether you have Duet Premium, handled by Apple and reconciled by RevenueCat. We never see your card details.

How we use it

To run the app: deliver your notes and reminders, sync your shared lists, and send notifications.
We never sell your data, and we never mine or train models on your notes. Your notes are yours.

This is the part people ask about most, so plainly:

Nothing happens unless you tap Share. Duet never reads your location in the background, and asks only for “While Using the App” permission — it is not capable of following you.
What we store is deliberately imprecise. Your position is rounded to roughly a one-kilometre area on your device, before it is sent. When you share, your exact spot never leaves your phone.
No history is kept, ever. Only your most recent share exists. Each new share replaces the last one — there is no trail to look back through, for your partner or for us, because none is stored.
Only your partner can see it, and only you can share your own — neither of you can publish a location on the other’s behalf.
You can stop at any time. “Stop” deletes the shared area outright; afterwards “not sharing” and “never shared” look identical.
It is removed with everything else when you unpair or delete your account.

Journey (the map of places you’ve been)

Journey keeps the moments you pin — a place, a date, and whatever you write about it.

Nothing is ever pinned for you. A memory exists because you typed it and saved it; Duet does not watch where you go, and never creates a memory from a location share.
A memory’s place is the one you choose: wherever you move the map to, or, if you tap “Use my location”, the exact spot where you are. That exact place is saved with the memory, so you both see where it happened. Duet reads your location only at that tap.
These are kept until you delete them — that is the point of them. This is different from live location sharing above, which keeps no history at all, and the two never mix.
Only the two of you can see them, and they are removed when you unpair or delete your account.

Bills

When you add a bill or record a payment, the amount, the due date and who paid are stored so that both of you see the same thing. You type these in yourselves: Duet never connects to your bank, never sees card details and never moves money. Bill amounts are visible only to you and your partner, are never used for analytics or advertising, and never appear in notifications. They are deleted with the rest of your couple’s data when you unpair or delete your account.

Usage analytics, and how to turn it off

Duet measures how the app is used with Mixpanel and with Google’s Firebase Analytics: which screens you open, which features you use, when you open the app, whether a purchase happened, and the rough area your connection comes from (worked out from your IP address). This is linked to your account, but it never includes what you write or draw, your bills or the location you share with your partner. You can switch it off at any time in Settings → “Share anonymous analytics”; from then on the app stops sending it, and so do the things below that depend on it.

Days you open the app. While you are paired and analytics is on, Duet notes on your couple’s record the days you opened the app, so we can see how often couples use it together. It is deleted with your couple’s data.
Where you heard about us. When you set up your profile, Duet may ask where you heard about it. Answering is optional; the answer is kept with your analytics profile and helps us understand which channels bring couples to Duet.
Invite links. If someone opens your invite link before installing Duet, we record that the invite page was viewed, on your account, so we can see whether invitations reach people. We store nothing about the person who opened it: not their IP address, browser or device. Nothing is recorded if you have switched analytics off.
Notification delivery. When your partner’s note reaches your phone as a notification, Duet records that it arrived and whether its picture could be shown — never the note itself — so we can keep delivery reliable. Nothing is sent while analytics is off.
Apple Search Ads. If analytics is on, Duet passes a token from Apple’s own attribution service to RevenueCat, which asks Apple whether you installed Duet from an Apple Search Ads ad and stores the answer with the subscription record. This uses no advertising identifier and does not track you across other apps or websites. Switching analytics off stops it from the next time you open the app.

Crash reports

Duet sends crash reports and performance measurements from the app, its widgets and its notification extension to Sentry, so we can fix what breaks: what went wrong, how long things took, the device model and system version, and your IP address. They do not include the contents of your notes, lists or bills. This happens whether or not analytics is on.

Offers and purchases

Subscriptions and offer codes are handled by Apple and reconciled by RevenueCat. When you redeem an offer code, such as the one Duet offers after a few days in a row, we record that a purchase came through that offer and which plan it was. We never see your payment details.

Support requests

When you write to us from Settings → Get help, your message reaches us with your name, your account id, whether you have Premium and your device and app version, so we can answer it.

With your partner, by design. With the services that run the app for us — Firebase (Google) for accounts, sync, notifications and app analytics; Mixpanel for product analytics; RevenueCat for subscriptions; Sentry for crash reports; and Telegram, where support requests reach us.

Never with advertisers, and never for cross-app tracking. Duet does not follow you across other companies’ apps or websites — which is why it never asks for App Tracking Transparency permission.

Where it is kept

Your couple’s data — notes, lists, plans, bills and memories — is stored by Firebase in the European Union. Crash reports are processed by Sentry in Germany, and usage analytics by Mixpanel in the United States.

Keeping & deleting

You can export your data on request.
If either partner unpairs, couple data enters a 30-day grace period, then is permanently deleted.
Signing out deletes nothing: sign back in with the same method and everything is there. Deleting your account is the one that removes data.
Deleting your account removes your data, including any shared location.

Access, export, correct, or delete your data — contact us to exercise these rights.

Children

Duet is intended for people 18 and older.

Contact

[email protected]