Privacy Policy

Person in charge of the protection of personal information: Privacy Officer, Reev Tech Inc., reachable at privacy@duolove.app

duolove is a small app for two people who love each other. You pair with your partner, draw for each other, share how you feel, and play together. This Privacy Policy explains what information Reev Tech Inc. ("duolove", "we", "us" or "our") collects when you use the duolove iOS app, its widgets and related services (the "Service"), why we collect it, who can see it, how long we keep it, and the choices and rights you have.

We have tried to write this in plain language. If anything is unclear, email us at privacy@duolove.app.

1. Who We Are

The Service is operated by Reev Tech Inc., a corporation based in Toronto, Ontario, Canada. We are responsible for (the "controller" of) the personal information described in this policy.

Our Privacy Officer is responsible for how we protect personal information and for handling your questions, requests and complaints. You can reach them at privacy@duolove.app.

Users in the EU/EEA and the UK. We have not appointed a representative in the EU or the UK. You can contact us directly at privacy@duolove.app about anything in this policy, and you can complain to your local data protection supervisory authority (see Section 11.6).

2. Information We Collect

We collect only what we need to run the features you use. Here it is, by category.

2.1 Account identifiers

• No sign-up details. You do not create an account with an email address, phone number, password or social login.
• Anonymous account. On first launch, the app creates an anonymous account made of a random user ID and a random secret token. They are stored on your device in the iOS Keychain (shared with the duolove widgets and notification extension) and on our servers.
• Keychain persistence. On iOS, Keychain items survive deleting the app, so if you reinstall duolove on the same device, you may return to the same account.

2.2 Your name

You can set an optional display name (up to 50 characters). Your partner sees it, and it appears in some push notifications (for example, "Sam sent you a new drawing!").

2.3 Pairing

• Codes. To pair, one of you shares an 8-character code (letters and digits), for example through the share sheet or as a link like duolove.app/join/CODE. An invite code is valid for 4 hours.
• Rooms. Once you pair, we create a "room" record that links your two accounts.

2.4 Drawings, photos and the photo booth

• Drawings. When you send a drawing, we store the final image, the replay data (so it can be watched being drawn), text boxes, and any photos you place on the canvas, whether taken with the camera or picked as a single photo from your library. We also store basic details such as when it was sent and when it was viewed.
• Photo booth strips (Duolove+). We store the camera frames (4 to 10) and the poster image.
• Location. duolove does not ask for location permission and does not use your location. Photos are resized and re-encoded on your device for the app before they are uploaded.

2.5 Moods and notes

You can share one of nine moods with an optional note (up to 60 characters). We store it so your partner can see it.

2.6 Play (couples questions)

When you play In Sync or Know You, we store:

• your answers and guesses;
• the questions used in a round;
• any custom questions you write, including your private question library.

2.7 Optional AI features (Duolove+)

If you choose to use AI question drafts or result insights, we process the text described in Section 9. We store the validated AI output, not the prompts.

2.8 Streaks and activity

We keep your streak counts and the basic activity needed to calculate them, such as when drawings were sent and viewed.

2.9 Feedback and problem reports

If you send feedback or report a problem in the app, we collect:

• your message (up to 2,000 characters);
• the category you choose;
• your answer to "How's duolove making you feel?", if you were asked;
• your email address, only if you choose to give it so we can reply;
• your app version, iOS version and device model, which are attached automatically. The form tells you this.

Feedback is linked to your account and room on our servers. See Section 10.

2.10 Push notifications

If you allow notifications, we store your device's push token so we can deliver notifications. To deliver them, the Firebase Cloud Messaging software in the app and Google's servers may also process device and app identifiers needed for delivery, such as a Firebase installation ID, along with basic app and device details (see Section 6).

2.11 Purchases

If you subscribe to Duolove+, purchases are handled by Apple. We record whether your Duolove+ subscription is active and when it expires. Our subscription provider, RevenueCat, receives your duolove user ID and Apple purchase data to validate it. We never receive your payment card details.

2.12 IP address, security and rate limiting

• Our host. Like any internet service, our host (Cloudflare) receives your IP address when the app connects to our servers.
• Rate limiting. We use your IP address (and, for some features, your user ID) as short-lived keys to limit abuse. These keys last from a few minutes up to 1 hour. For example, creating new accounts is rate-limited per IP address.

2.13 Server logs

Our servers keep request logs for a limited period set by our hosting plan. They contain:

• the address requested, which can include room codes and drawing IDs;
• the request method and result status;
• the country of the request.

Our application does not write names, notes, answers, messages or tokens to these logs.

2.14 Permissions on your device

duolove asks for iOS permissions only when you use a feature that needs them:

• Camera: for photos on the canvas and the photo booth.
• Photos (add only): to save drawings to your photo library when you ask. Picking a photo for a drawing uses the iOS photo picker, which shares only the photo you select and does not give duolove access to your library.
• Microphone and speech recognition: for dictating AI question requests. Dictation happens on your device, and audio is never sent to us. Only the text you choose to send is transmitted.
• Notifications: to tell you when your partner sends something.

2.15 Sensitive information

We don't ask for sensitive information such as health, religion, or sexual orientation or sex life. Because duolove is for couples, the content you choose to share with your partner (drawings, photos, notes, answers) may reveal such information. We process it only to provide the Service to you and your partner at your direction, not for any other purpose. Please share only what you are comfortable sharing.

3. What We Do Not Collect

• No email/password or social accounts. We do not create email, password or social login accounts.
• No location. We do not request location permission or use your location.
• No contacts. We do not access your contacts.
• No analytics. The current version of duolove (1.0.11 and later) does not include any analytics software. Earlier versions included Google Analytics for Firebase, which could automatically collect basic usage events and device details (such as an app instance ID, app version, device model, iOS version and approximate country). It has been removed; please update the app if you are on an older version.
• No advertising or tracking. We do not show ads, track you across other apps or websites, use the advertising identifier (IDFA), or ask for App Tracking Transparency permission.
• No selling. We do not sell your personal information or share it for advertising.

4. How We Use Your Information and Our Legal Bases

We use your information only to provide, support and protect the Service. Where laws such as the GDPR or UK GDPR require a "legal basis", ours are:

Where content you choose to share reveals sensitive information (Section 2.15), we process it only because you have chosen to share it with your partner through the Service.

Under Canadian law (PIPEDA and Quebec's Law 25), we rely on your consent for these uses. You give it by using the Service, and expressly for the optional features above. You can withdraw consent at any time, subject to legal or contractual limits. Withdrawing may mean you can't use some features.

5. What Your Partner Can See

duolove is built for sharing with one person. Once you pair, your partner can see:

• your display name;
• the drawings, photos and photo booth strips you send;
• your current mood and note, for 12 hours;
• your Play answers and guesses, only after you have both answered;
• custom questions you deliberately choose for a round. Your private question library otherwise stays private to you;
• AI insights for a Play round you completed together;
• your shared streaks.

5.1 Widgets on the Home Screen and Lock Screen

Your partner's widgets show what you share, outside the app:

• Home Screen widgets show your latest drawing, your name, your mood and your note.
• Lock Screen widgets show your mood, and the larger one can show your name and note.

On the Lock Screen, the mood note is marked as private, so iOS can hide it while the iPhone is locked if your partner has turned that on. The mood itself stays visible.

This means anyone who can see your partner's phone may see your mood, and possibly your name and note, even when it is locked. Your own widgets work the same way for your partner's content. Please keep this in mind when writing a note.

5.2 Notifications

Push notifications can show your partner's name and streak counts, and they may appear on the Lock Screen depending on your iOS settings. Mood updates are delivered silently, without a banner.

6. Service Providers and Other Recipients

We use a small number of service providers to run duolove. They process data on our behalf under contracts or terms of service that include data protection commitments, or, in Apple's case, as the platform you use.

While the app is open, it keeps a live connection to Cloudflare that carries only change signals (type, room ID and event ID), with no content.

We may also disclose information if required by law or a valid legal request, to protect the safety of any person, to investigate abuse, or as part of a merger, acquisition or sale of assets. In that last case, the information would remain subject to this policy.

6.1 International processing

We are based in Canada, and our providers operate around the world. Your information may be stored or processed in the United States and other countries, which may have different data protection laws than where you live. Authorities there may be able to access it under their laws.

For transfers of personal information from the EU/EEA or the UK, we rely on the transfer mechanisms our providers offer, such as standard contractual clauses (and the UK addendum) or, where applicable, adequacy decisions including the EU-US Data Privacy Framework and its UK extension. Canada is also recognised by the EU and the UK as providing adequate protection for commercial organizations covered by PIPEDA. You can ask us for more information at privacy@duolove.app.

7. How Long We Keep Information

8. Children

duolove is not intended for anyone under 16. You must be at least 16 to use it, and we do not knowingly collect personal information from anyone under 16. We do not verify age beyond asking users to confirm they meet our Terms.

If we learn that we have collected personal information from someone under 16, we will delete their account and that information. If you believe someone under 16 is using duolove, please contact privacy@duolove.app.

9. Optional AI Features

duolove offers two optional AI features for Duolove+ members in Play. They are off unless you choose to use them, and the app asks for your consent before the first use.

• AI question drafts. You describe what you'd like to ask, by typing or by dictating on your device. The text you send, and any draft you are refining, is sent for processing. You review the drafts and decide what to save.
• AI insights. After you and your partner complete a round, either of you can ask for a short reflection. We send the round's question text, answers and guesses. Players are labelled "A" and "B". We do not add your names or account IDs. If you wrote a name into a question or answer, that text is sent as written.

Where it runs: AI processing runs on Cloudflare Workers AI, using Meta's Llama 3.3 70B model, on Cloudflare's infrastructure. Meta does not receive your data.

What we keep: We do not store your prompts. We store only the validated results, for the periods in Section 7.

Training: We do not use your content to train AI models.

Suggestions only: The AI features generate suggestions (question drafts and short reflections) for you to read and use as you like. They do not make decisions about you, and we do not use automated processing to make decisions that have legal or similarly significant effects on you. AI output can be wrong or odd. It is meant for fun and conversation, not professional or relationship advice.

You can stop using the AI features at any time. Results already created are kept for the periods in Section 7, or until you delete your account.

10. Feedback and Reviews

When you send feedback or report a problem, it is saved on our servers and a copy is shared with the duolove team's private team chat on Telegram, so the people who build duolove see it quickly. The copy shows only the first 8 characters of your user ID, and no room code.

• Telegram copies. These are not deleted automatically, including when you delete your account. If you'd like them removed, email privacy@duolove.app and we will make reasonable efforts to delete them.
• Keep it non-sensitive. Please don't include sensitive information, or anyone else's personal information, in feedback.
• Your email. If you give your email, we use it only to reply to you about your feedback.

App Store reviews. At most once, duolove may ask how it's making you feel. If you choose "Love it", we ask Apple to show its standard App Store rating prompt. Apple decides whether to show it. We do not see whether you rated or what you wrote unless you publish a public review, and nothing is sent to our servers for that answer. If you choose another answer, you can send us feedback as described above.

11. Deleting Your Data and Your Rights

11.1 Deleting your account in the app

You can delete your account at any time in Profile → Delete account. Deletion is immediate and:

• Removes:
  • your name, push token and subscription status;
  • your moods and streaks;
  • Play data in your rooms, your private questions and your AI records;
  • your feedback;
  • the drawings you sent (files and records).
• Closes your rooms.
• Keeps an anonymous placeholder record (a random ID and creation time) and closed room records with no content.

Drawings your partner sent to you remain under your partner's control. They follow the 30-day and Duolove+ rules in Section 7. Copies may also persist for a limited time in Cloudflare's logs and backups, and feedback copies in our Telegram team chat are not deleted automatically (see Section 10).

Deleting the app from your phone does not delete your account.

Subscriptions. Deleting your account does not cancel a Duolove+ subscription. Subscriptions are billed by Apple, so please cancel in your Apple account settings (Settings → your name → Subscriptions) to stop future charges.

11.2 Unpairing

Unpairing:

• closes your room;
• deletes the room's moods and Play rounds;
• clears the widget data, drafts and unsent drawings on your device.

Drawings and streaks remain on our servers under the retention rules in Section 7.

11.3 Making a request

You can email privacy@duolove.app to ask us to:

• access the personal information we hold about you, or get a copy;
• correct inaccurate information;
• export your information in a structured, commonly used format, where applicable;
• delete information, including individual drawings, which you can't yet delete in the app;
• restrict or object to certain processing, or withdraw consent;
• learn how we process your information, including the information used for any automated processing.

How we verify requests. duolove accounts have no email address or password, so we can't confirm who you are from your email alone. When you send a request, we will reply with a short confirmation code. To confirm the request comes from your account, send that code to us from inside the app using Profile → Report a problem, which is linked to your account. We act on the request once we receive it. We may ask for this step before disclosing or changing any information. If you just want to delete your whole account, you can do it yourself in the app at any time, without any verification.

You can also authorize someone else to make a request on your behalf where the law allows; we will still need the in-app confirmation from your account.

We will respond within 30 days, or within any shorter period the law requires where you live. If we need more time where the law allows it, we will tell you why. We do not charge for requests, unless they are clearly unfounded or excessive and the law allows a fee. We will not discriminate against you for exercising your rights.

11.4 Your rights under privacy laws

Depending on where you live, you may have the following rights.

• Canada (PIPEDA) and Quebec (Law 25): to access and correct your information and to withdraw consent. Under Law 25, you can also ask us to stop disseminating your information or to de-index it where applicable, and to receive your computerized information in a structured, commonly used technological format.
• EU/EEA (GDPR) and UK (UK GDPR): rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time without affecting earlier processing.
• California and other US states: see Section 12.

11.5 Quebec residents (Law 25)

• Person in charge. Our Privacy Officer (Section 1) is responsible for protecting personal information and can be reached at privacy@duolove.app.
• Confidentiality incidents. If a confidentiality incident (unauthorized access, use, disclosure or loss of personal information) happens, we take reasonable measures to reduce the risk of harm and prevent it happening again, keep a record of incidents, and, where an incident presents a risk of serious injury, promptly notify the Commission d'accès à l'information and the people affected.
• Automated processing. We do not make decisions about you based exclusively on automated processing. The AI features only generate suggestions for you (Section 9). If that changes, we will tell you, and you will be able to ask about the information and reasons involved and to have the decision reviewed by a person.
• Location and profiling. duolove does not use technology that locates you or builds a profile of you.
• Outside Quebec. Your information is processed outside Quebec, by our providers listed in Section 6, under contractual or equivalent protections.

11.6 Complaints

If you have a concern, please contact us first at privacy@duolove.app so we can try to fix it. You also have the right to complain to a data protection authority, for example:

• the Office of the Privacy Commissioner of Canada;
• the Commission d'accès à l'information du Québec;
• your local data protection supervisory authority in the EU/EEA;
• the UK Information Commissioner's Office;
• the California Privacy Protection Agency, or your state attorney general.

12. California Residents

This section applies to California residents to the extent California privacy law (the CCPA, as amended by the CPRA) applies to us. It supplements the rest of this policy.

Categories collected in the last 12 months. We have collected the following categories, from you and your device, for the business purposes described in Section 4 (providing and supporting the Service, security and preventing abuse, and fixing problems):

• Identifiers: the anonymous user ID, push token and device/app identifiers used for notification delivery, IP address, and your email address only if you give it with feedback.
• Personal records: your display name.
• Commercial information: your Duolove+ subscription status and Apple purchase data.
• Internet or other electronic network activity: server request logs, and in-app activity needed for features such as streaks and viewed times; for app versions before 1.0.11, basic analytics events (Section 3).
• Audio, electronic, visual or similar information: photos and drawings you send. Dictation audio stays on your device and is not collected.
• Other information you provide: moods, notes, Play answers and questions, AI inputs and outputs, and feedback with app, iOS and device details.
• Sensitive personal information: the secret account token, used only to sign you in. Content you share may also reveal sensitive information (Section 2.15).

We do not collect precise geolocation. Retention for each category is described in Section 7. We disclose these categories only to the service providers in Section 6, for the purposes described there.

No sale or sharing. We do not sell your personal information, and we do not "share" it for cross-context behavioural advertising. We have not done so in the last 12 months, and we have no actual knowledge of selling or sharing information of consumers under 16.

Sensitive personal information. We use it only to provide the Service you request, as permitted by law, and not to infer characteristics about you.

Your rights. You can ask to know what personal information we have collected and how we use and disclose it, and to access, correct or delete it. You can submit a request, or authorize an agent to submit one, as described in Section 11.3. We will not discriminate against you for exercising these rights.

13. Security

We protect your information with reasonable technical and organizational measures, including:

• encrypted connections (HTTPS) between the app and our servers;
• a secret account token stored in your device's Keychain and required for every request;
• access controls that let only you and your partner reach your room's content.

Your content is not end-to-end encrypted. It is stored on our servers so it can be delivered, shown in history and on widgets. A small number of authorized people at duolove can access stored data when needed for maintenance, troubleshooting, safety, and responding to abuse reports or legal requests.

No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security. If we become aware of a breach that affects your information, we will notify you and the authorities where the law requires it. Because accounts have no email address, we may notify you in the app or on duolove.app.

You can help by keeping your device locked and protected, and by sharing pairing codes only with your partner.

14. Changes to This Policy

We may update this policy as duolove changes or as the law requires. When we do, we will update the effective date at the top. If the changes are significant, we will tell you in the app or on duolove.app before they take effect, and ask for your consent where the law requires it. Earlier versions are available on request.

15. Contact Us

Questions, requests or concerns about your privacy:

• Privacy Officer: privacy@duolove.app
• Company: Reev Tech Inc., Toronto, Ontario, Canada