♥ Duo

Privacy Policy

Last updated: 28 June 2026

Duo is a private space for two paired partners. This policy explains what we collect and how we protect it. We do not sell your data, show ads, or share your content with third parties for marketing.

What we collect

• Account: email, a securely hashed password, display name, and optionally a birth date and profile photo.
• Pairing: the link to your one partner (your shared "couple").
• Shared content you create: moods (and optional mood photos), moments (photos and captions), calendar events, countdowns, goals & wishes (and images), travel pins (and images), and date invites.
• Notifications: a device push token so we can notify you of your partner's activity.

How your media is protected

• End-to-end encryption: your photos and mood images are encrypted on your device with a key that only you and your partner's devices hold. We — and our storage provider — only ever store encrypted data and cannot view your photos.
• Passwords are hashed; all traffic is encrypted in transit (HTTPS/TLS).

Service providers

We use a small number of processors strictly to run the app:

• Railway — application servers and database hosting.
• Cloudflare R2 — stores your media (only as encrypted blobs).
• Firebase Cloud Messaging (Google) — delivers push notifications.

How we use your data

Solely to provide the shared private experience between you and your partner — nothing else.

Your choices & deletion

• You can delete your account anytime in the app (Settings → Delete account). This permanently removes your account and, if paired, the shared content for both of you, and unpairs your partner.
• You may request data access or deletion by emailing us.

Children

Duo is not directed to children and is intended for users aged 13 and older (16 where required).

Changes

We may update this policy; material changes will be reflected on this page with a new date.

Contact

Questions? Email support@duocross.com.

DuoCross team