Privacy Policy
Last updated: October 19, 2026
The short version
- What you write in Duet is shared with your partner and no one else. We store it with Google Firebase so it syncs between your two phones.
- No ads, no ad networks, no tracking across apps. We don't sell your data.
- You start without an account. Signing in with Apple or Google is optional and only backs it up.
- You can delete your account and your data in the app at any time.
1. Who we are
Duet is an app for couples on iPhone, iPad and Android. It is operated by Adam Neumann Software Engineering, a sole proprietorship registered in Poland (CEIDG), NIP 5833558438, REGON 543762548 ("we", "us"). We are the data controller for the data described here. Write to us at adaskososik@gmail.com.
2. What we collect
Your account
When you tap Get started, Firebase Authentication creates an anonymous account with a random identifier. No name, email or password is needed. If you back up with Sign in with Apple, we receive Apple's identifier for you and, if you share them, your name and email address (or Apple's private relay address). If you back up with Sign in with Google on Android, we receive Google's identifier for you and your Google Account's name, email address and profile photo link. Some older accounts sign in with an email address and password instead; Firebase stores those passwords in hashed form and we never see them.
What you tell Duet
- Profile: your name, your partner's name as you entered it, an optional profile photo, the date you got together, which lovebird you are, and the app language.
- Your plan: the answers you give at the start (what you'd like more of, how long you've been together, how often you really talk), which we use to build your 30-day plan, and which days you've done.
- Weekly check-ins: your 1 to 5 ratings for closeness, talking, fun, affection and support.
What you share with your partner
Your answers to questions and Who's More Likely, love notes, drawings and doodles, challenge answers and the photos you add to them, dates and anniversaries, kisses and nudges. While you draw together, the app also shares whether you're on the canvas. All of this is stored in a space that only you and your partner can open.
Purchases
Apple (App Store) or Google (Google Play) processes payments. We receive whether you have Premium, which plan, when it renews or ends, and a transaction identifier, never your card details. Because one purchase covers both of you, your partner sees that Premium is active and who unlocked it.
Device data
A push notification token so we can notify you, and your time zone so reminders arrive at a sensible hour.
What we don't collect
- No advertising identifier and no tracking across other apps or websites. Duet never asks for tracking permission.
- No location, no contacts.
- No analytics today. The app includes Google Analytics for Firebase, but collection is switched off. If we turn it on, we'll update this policy first, and it would only receive pseudonymous usage events (such as "finished onboarding"), never your answers, notes or drawings.
3. How we use it
- To run Duet: sync what you share between your phones, build your plan and keep your streak.
- To send the notifications you'd expect (section 6).
- To unlock and restore Premium for both of you.
- To answer you when you contact us.
We rely on performing our contract with you (GDPR Art. 6(1)(b)) for all of the above. We don't use your data for advertising or profiling, and we don't use what you write to train AI models. Duet has no AI features.
4. Who processes it for us
| Provider | What for | What they get |
|---|---|---|
| Google Firebase (Authentication, Firestore, Storage, Cloud Functions, Cloud Messaging) | Accounts, storage and sync, push notifications | Everything in section 2 except payment details |
| RevenueCat | Checks and shares Premium between partners | Your account identifier and App Store or Google Play purchase records |
| Apple | Sign in with Apple, App Store payments, delivering notifications on iPhone and iPad | Covered by Apple's own privacy policy |
| Sign in with Google and Google Play payments on Android | Covered by Google's own privacy policy | |
| Vercel | Hosts this website and invite links | Standard request logs such as IP address |
We don't share your data with advertisers, data brokers or anyone else, and we don't sell it.
5. Where it's stored
Our Firebase project and Cloud Functions run on Google Cloud in the United States. RevenueCat is also based in the US. These transfers rely on the EU Standard Contractual Clauses and, where the provider is certified, the EU-U.S. Data Privacy Framework. Data is encrypted in transit and at rest.
6. Notifications
If you allow notifications, we tell you when your partner answers, sends a love note, a kiss or a doodle, joins you, unlocks Premium or changes their photo; when a date is coming up; when your free trial is about to end; and, if you've been away a while, a gentle reminder. Notifications show names, not what your partner wrote. A doodle travels inside its notification so it can appear on your Home Screen widget. Your daily reminder and weekly check-in reminder are scheduled on your phone. You can turn any of them off in your phone's settings.
Widgets read a copy of your names, dates, plan and latest doodle that the app keeps on your device.
7. Keeping and deleting data
- Delete your account in Duet: Us, then the gear, then Delete account. On iPhone we revoke Sign in with Apple. We delete your profile and photos, everything you wrote or drew, the dates you added, your notification tokens, your RevenueCat record and your login. Your partner keeps what they wrote, but your shared space closes.
- Disconnect from your partner: the shared space closes and neither of you can open it again. Your content in it is deleted when you delete your account, or sooner if you ask us.
- Sign out without backing up: the app warns you first, because there is no way back into an anonymous account. Email us if you want its data deleted.
Can't open the app? See Delete your account to ask us by email.
Otherwise we keep your data for as long as you have an account, so it's there when you come back.
8. Your rights
The GDPR applies to us. You can ask to access, correct, delete or receive a copy of your data, restrict or object to processing, and withdraw consent where we rely on it. Most of it you can see and change in the app; for anything else, email adaskososik@gmail.com. You can also complain to your data protection authority; in Poland that is the President of the Personal Data Protection Office (Prezes UODO). California residents have equivalent rights under the CCPA; we don't sell or share personal information as the CCPA defines it.
9. This website
This site sets no cookies and runs no analytics. The invite page reads the code from its link and, when you tap Get Duet, copies it to your clipboard on your device.
10. Security
Connections use HTTPS, data is encrypted at rest, and access rules let only the two partners in a space read it. Treat your invite code like a password: anyone who joins with it becomes your partner in the app. No system is perfectly secure, but we work to keep yours safe.
11. Children
Duet is for adults in a relationship. It isn't directed to children under 16 and we don't knowingly collect their data. If you think a child has used Duet, tell us and we'll delete the account.
12. Changes
When this policy changes we update the date at the top. For important changes we'll also tell you in the app.
13. Contact
Adam Neumann Software Engineering
Gen. Władysława Andersa 10/21, 80-175 Gdańsk, Poland
NIP 5833558438 · REGON 543762548
adaskososik@gmail.com