IOCODO Back to site

Duamo

Privacy policy

Effective date:

In brief: Duamo keeps your account, your couple and what you write in Google's Cloud Firestore, in data centers in the European Union, under a random user ID it creates when you first open the app; signing in with Apple or Google is optional and lets you keep your archive on a new phone. Your name, your answers and your messages are shown to the person you paired with, and to no other user of the app; your partner can read your answer to the day's question only after answering it too. Usage statistics and crash reports are optional. In the European Economic Area (which includes the European Union), Canada and Brazil, both stay off until you allow them on a page the app shows once. In Türkiye both stay off, and in the United Kingdom usage statistics stay off, until you turn them on in Settings, then Privacy choices. In other countries, on an iPhone or iPad and on any device in Switzerland, both start only when you tap OK on a notice the app shows once, and on Android both are on unless you turn them off; in the United Kingdom this rule applies to crash reports. You can change either at any time in Settings, then Privacy choices.

1. Who we are

Duamo is made by IOCODO LLC, a limited liability company registered in Wyoming, United States. We decide why and how the data described on this page is used, so under European data protection law we are its controller.

Postal address: 30 N Gould St Ste N, Sheridan, WY 82801-6317, United States
Email: support@iocodo.com
Report criminal or illegal content: iocodo.com/report/

Use this email for anything about your data, including the requests described in Your rights.

2. What this policy covers

This policy covers the Duamo app on iOS and Android, and this page. Duamo is a daily question for two people in a relationship: each of you answers on your own, your partner's answer opens only after you have answered too, and then you can talk about it underneath.

Here, "personal data" means any information about you as a person who can be identified, directly or indirectly. That includes identifiers such as a user ID, an installation ID, an App Check token or a device token, even when they do not contain your name.

3. Data kept on your device

Duamo keeps the following on your device, in the app's own storage:

  • your settings, including your privacy choices, the consents you gave when pairing or switching on a topic, and the hour of your daily reminder
  • a copy of your couple's questions, answers and messages that Cloud Firestore keeps so that the app works without a connection, with the answers and messages you write offline until they are sent
  • the daily reminder that your phone schedules for the next question

We do not receive any of this, unless another section of this policy says otherwise. If you back up your device with iCloud or Google, the backup can include a copy of this data, under Apple's or Google's terms. Uninstalling the app deletes this data from your device.

Before you send an answer or a message, the app checks its words against a list kept in the app, on your device, and may suggest that you rephrase it. Nothing is sent anywhere for this check.

The daily reminder is a notification that your phone schedules and shows by itself: nothing is sent to us or to Google to show it.

4. Accounts and sign-in

Duamo uses Firebase Authentication, a Google service, to recognise your account.

Firebase Authentication gives your installation a random user ID when you first open the app. It does not contain your name or email address, but it is a pseudonymous identifier: it links the data the app keeps on our servers to your installation.

If you sign in with Google, we receive from Google your email address, the name and profile picture of your Google account and a Google user ID, and Firebase Authentication stores them to keep you signed in.

If you sign in with Apple, we receive an Apple user ID and, the first time only, the name and email address you choose to share. If you choose to hide your email address, Apple gives us a private address that forwards to yours.

5. What we use data for, and on what legal basis

European data protection law (the GDPR and the UK GDPR) requires a legal basis for each use of personal data. For each use, here is the data involved and the basis we rely on.

  • Running the app: your account, pairing with your partner, the day's question, your answers, the conversation under each question, your couple's archive and streak, and notifications from your partner if you allow them

    Data: your random user ID; the name your partner sees; your language and time zone; the couple profile you fill in (since when you have been together, whether you live together, whether you have children, whether you live apart) and the topics you switch on, including faith and spirituality; invite codes; the questions of each day; your answers and the messages you write; your streak; the hour of your daily reminder; your answers to the consent page; if you allow notifications, a device token; and, if you sign in with Apple or Google, the account details described in Accounts and sign-in.

    Legal basis: Performance of our contract with you, that is, providing the app you asked for (GDPR art. 6(1)(b)).

    Two of these data can reveal sensitive information, and in some places we process them only with your explicit consent, which each of you gives in the app. That the two of you are a couple, with your names, can reveal your sexual orientation: in the European Economic Area and the United Kingdom we process it only with the consent you give on the line shown when you invite your partner or join them (GDPR and UK GDPR art. 9(2)(a)). That you switched on the faith and spirituality topic can reveal your religious beliefs: in the European Economic Area (GDPR art. 9(2)(a)) and in Brazil (LGPD art. 11, I) we process it only with the consent you give on the sheet shown when you switch the topic on, and there the topic counts only when each of you who is there has switched it on. You can withdraw your consent at any time by deleting your account in the app, which deletes these data at once, and the topic's by switching it off, which deletes your choice. Withdrawing does not affect what happened before.

  • Duamo Plus: knowing whether your couple has the subscription

    Data: whether your couple has Duamo Plus, which of you bought it, through which store, and until when it runs.

    Legal basis: Performance of our contract with you, that is, providing the app you asked for (GDPR art. 6(1)(b)).

  • Keeping the app configured and confirming that requests come from the genuine app

    Data: installation identifiers, the app's version, the operating system version, your device's language, country setting and time zone, App Check tokens and an attestation from Apple's App Attest or Google Play Integrity.

    Legal basis: Performance of our contract with you, that is, providing the app you asked for (GDPR art. 6(1)(b)).

  • Keeping people safe: handling reports and blocks

    Data: the answer or message you report, the reason you choose, who reported it, who wrote it and when, the app's language and, if your app store or your phone's region is South Korea, that region; and the accounts you blocked.

    Legal basis: Our legitimate interests (GDPR art. 6(1)(f)): keeping Duamo safe for the people who use it, acting on reports and enforcing our terms of use. You can object at any time by writing to us.

  • Keeping reported content when the law requires it

    Data: the reported content and the details of the accounts involved, only when a law requires us to keep them, for example for content that may involve the sexual exploitation of a minor.

    Legal basis: Compliance with a legal obligation (GDPR art. 6(1)(c)).

  • Counting how the app is used

    Data: usage events, device model, operating system version, an approximate location that Google derives from your IP address (the app has no access to your device's location), the app-instance identifier and installation identifiers.

    Legal basis: Your consent, which the app asks for before this starts in the European Economic Area, Canada and Brazil (in the European Union and the European Economic Area, GDPR art. 6(1)(a)). In Türkiye, it stays off until you turn it on in the app (Settings, then Privacy choices). In other countries it is on unless you turn it off, except in the United Kingdom, where it stays off until you turn it on in the app (Privacy choices), and on an iPhone or iPad and on any device in Switzerland, where it starts when you tap OK on the notice the app shows once, the first time it opens. In Thailand and Saudi Arabia, the legal basis is our legitimate interests (section 24(5) of Thailand's Personal Data Protection Act; article 6(4) of Saudi Arabia's Personal Data Protection Law). Everywhere, you can turn it off at any time in the app (Settings, then Privacy choices).

  • Fixing crashes

    Data: crash reports with their diagnostics (memory and disk state), a record of each app session start, device model, operating system and app version, and installation identifiers.

    Legal basis: Your consent, which the app asks for before this starts in the European Economic Area, Canada and Brazil (in the European Union and the European Economic Area, GDPR art. 6(1)(a)). In Türkiye, it stays off until you turn it on in the app (Settings, then Privacy choices). In other countries it is on unless you turn it off, except on an iPhone or iPad and on any device in Switzerland, where it starts when you tap OK on the notice the app shows once, the first time it opens; in the United Kingdom, the next row applies. In Thailand and Saudi Arabia, the legal basis is our legitimate interests (section 24(5) of Thailand's Personal Data Protection Act; article 6(4) of Saudi Arabia's Personal Data Protection Law). Everywhere, you can turn it off at any time in the app (Settings, then Privacy choices).

  • Fixing crashes in the United Kingdom

    Data: crash reports with their diagnostics (memory and disk state), a record of each app session start, device model, operating system and app version, and installation identifiers.

    Legal basis: Our legitimate interests (UK GDPR art. 6(1)(f)): finding and fixing the crashes you hit. The app does not ask first in the United Kingdom, because the Privacy and Electronic Communications Regulations (PECR) allow storing and reading this data on your device without consent when it is needed only to find and fix technical faults. On Android, crash reports are on unless you turn them off in the app (Settings, then Privacy choices); on an iPhone or iPad, they start when you tap OK on the notice the app shows once, the first time it opens, and you can turn them off the same way. You can object at any time by writing to us.

  • Answering you when you write to us

    Data: your email address, your message, anything you attach and, when you write from the app's update screen, the app version in the subject.

    Legal basis: Our legitimate interests (GDPR art. 6(1)(f)): answering your request, and keeping a record of how we handled it. You can object at any time by writing to us.

6. Who receives data

We use these service providers to run Duamo. Each one receives only the data listed, for the purpose listed:

  • Firebase Authentication (Google LLC)

    What for: creates your random user ID when you first open the app and, if you choose to, links it to your Apple or Google account, so that you can keep your couple's archive on another phone or after reinstalling the app.

    Data: your random user ID; if you sign in with Apple or Google, the account details described in Accounts and sign-in; and the IP address and user agent of each sign-in request, which Firebase Authentication keeps for a few weeks.

    Google LLC processes this data on our behalf, under its data processing terms. Firebase Authentication privacy information

  • Cloud Firestore (Google LLC)

    What for: stores your account and your couple, and shows your partner what you write.

    Data: the name your partner sees; your language and time zone; the couple profile and the topics you switch on; invite codes; the questions of each day; your answers and messages; your streak; the hour of your daily reminder; your answers to the consent page; your device token, if you allow notifications; whether your couple has Duamo Plus; the reports you send and the accounts you block; and your random user ID.

    Google LLC processes this data on our behalf, under its data processing terms. Cloud Firestore privacy information

  • Cloud Functions for Firebase (Google LLC)

    What for: runs Duamo's tasks on our server, such as telling your partner's phone that you answered or wrote, completing the deletion of an account, and deleting data when its retention ends.

    Data: the data stored in Cloud Firestore that each task needs, such as your random user ID, your couple, the name your partner sees and your partner's device token.

    Google LLC processes this data on our behalf, under its data processing terms. Cloud Functions for Firebase privacy information

  • Firebase Cloud Messaging (Google LLC)

    What for: delivers the notifications that tell you when your partner has answered or written.

    Data: a device token and the text of each notification.

    Google LLC processes this data on our behalf, under its data processing terms. Firebase Cloud Messaging privacy information

  • Google Analytics for Firebase (Google LLC)

    What for: counts how the app is used.

    Data: the events Firebase records by itself (such as app opens and sessions) and events the app records about which features are used (such as answering the day's question), never the text of your answers or messages and never your user ID; an app-instance identifier, the installation identifier, device model, operating system version and an approximate location that Google derives from your IP address (the app has no access to your device's location).

    Google LLC processes this data on our behalf, under its data processing terms. Google Analytics for Firebase privacy information

  • Firebase Crashlytics (Google LLC)

    What for: reports crashes so we can fix them.

    Data: crash reports and diagnostics (device model, operating system, app version, memory and disk state), a record of each app session start, and installation identifiers.

    Google LLC processes this data on our behalf, under its data processing terms. Firebase Crashlytics privacy information

  • Firebase Remote Config and Firebase Installations (Google LLC)

    What for: keeps the app configured, for example switching a feature off remotely.

    Data: an installation identifier and its token, the app's version, the operating system version, and the language, country setting and time zone of your device; while usage statistics are on, also when you first opened the app, as Google Analytics recorded it.

    Google LLC processes this data on our behalf, under its data processing terms. Firebase Remote Config and Firebase Installations privacy information

  • Firebase App Check (Google LLC)

    What for: confirms that requests come from the genuine app.

    Data: a short-lived App Check token and an attestation of the app and the device, from Apple's App Attest, which Firebase checks with Apple, or from Google Play Integrity, which Google Play produces under its own terms from the app's name, version and signing certificate and from information about the device.

    Google LLC processes this data on our behalf, under its data processing terms. Firebase App Check privacy information

  • Sign in with Apple (Apple Inc.)

    What for: lets you sign in with your Apple Account, if you choose to.

    Data: Apple confirms who you are and gives us an Apple user ID and, the first time only, the name and email address you choose to share, or a private address that forwards to yours.

    Apple Inc. decides for itself how it uses this data, under its own privacy policy. Sign in with Apple privacy information

  • Google Sign-In (Google LLC)

    What for: lets you sign in with your Google Account, if you choose to.

    Data: Google confirms who you are and gives us your Google user ID, email address, name and profile picture.

    Google LLC decides for itself how it uses this data, under its own privacy policy. Google Sign-In privacy information

  • GoDaddy Professional Email (GoDaddy Operating Company, LLC)

    What for: receives and keeps the emails you send to support@iocodo.com and our replies.

    Data: your email address, your message and anything you attach, and our replies.

    GoDaddy Operating Company, LLC processes this data on our behalf, under its data processing terms. GoDaddy Professional Email privacy information

  • IT service providers (United States)

    What for: tools we may use to read the emails you send us and to draft our replies.

    Data: the text of your email and your email address, when we use these tools for it.

    These providers handle this data under their own terms.

Apple (App Store) and Google (Google Play) also handle your download, any purchase and the integrity and age checks the app asks them for, under their own privacy policies.

We do not sell your personal data.

7. Notifications

If you allow notifications, Firebase Cloud Messaging (a Google service) gives your device a token, and the app stores it with your account so that we can send you the notifications you asked for. We delete the token when you turn notifications off in the app, sign out or delete your account.

You can turn notifications off at any time in your device settings.

8. Where data is processed

IOCODO LLC is registered in the United States. Our service providers may process your personal data in the United States and other countries where Google, GoDaddy or their subcontractors have facilities.

Where European, UK or Swiss data protection law requires a safeguard for this, we rely on:

  • the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework, for providers certified under them (you can check a provider on dataprivacyframework.gov)
  • the Standard Contractual Clauses approved by the European Commission, with the UK Addendum and the Swiss adjustments, which are part of our providers' data processing terms

You can ask us for a copy of these safeguards at support@iocodo.com.

9. How long we keep data

Here is how long we keep each kind of personal data. Items marked automatic are deleted on a fixed schedule, without anyone having to ask.

  • Your answers and messages, the questions of each day and your couple's streak

    Until you delete your account in the app, which deletes your answers and messages for both of you, including those your partner has already read; your partner keeps their own. If either of you ends the pairing, both of you can still read the couple's archive for 30 days, and pairing again with the same person in that time brings it back; after that, we delete it.

  • Your account (the random user ID, the name your partner sees, your language, time zone and reminder hour and, if you signed in with Apple or Google, the details we received)

    Until you delete your account in the app; Firebase then removes it from its live and backup systems within 180 days.

  • The couple profile, the topics you switch on and whether your couple has Duamo Plus

    As long as your couple exists, and for the 30 days after the pairing ends described above.

  • Invite codes

    Until the person who created the code deletes their account; a code stops working once it is used, or 7 days after it was created.

  • Reports and blocks

    A report until we have handled it, and a block until the person who blocked deletes their account; if a law requires us to keep reported content, for example content that may involve the sexual exploitation of a minor, we keep it for as long as that law requires and for that purpose only.

  • Your device token

    Until you turn notifications off in the app, sign out or delete your account.

  • IP addresses of sign-in requests

    A few weeks, in Firebase Authentication. automatic

  • Usage events in Google Analytics

    2 months. automatic

  • Identifiers linked to your usage statistics in Google Analytics (the app-instance and installation identifiers)

    Up to 14 months after the app last sent usage statistics. automatic

  • Crash reports

    90 days. automatic

  • App Check tokens and attestations

    Not kept by Firebase App Check: a token works for at most 7 days, and Apple and Google Play handle the attestation under their own terms.

  • Installation identifiers

    Until you delete your account in the app, which asks Firebase to delete them; Firebase then removes them within 180 days. If you uninstall the app without doing so, Firebase deletes them on its own once they have gone 270 days without use (its current rule).

  • Emails you send us, and our replies to you

    Until you ask us to delete them. We set no fixed end date: we keep them as the record of our support, to answer you if you write again and to show how we handled your request. If a law or a legal claim requires us to keep an email, we keep it until that ends.

When you delete your account or ask us to delete your data, we delete it as described here, unless the law requires us to keep part of it.

10. How we protect data

Data travels between the app and our service providers over encrypted connections (HTTPS).

Our providers encrypt the data they store for us, and the access rules of our database limit what each user can read and change. Access to our systems is limited to the people who run Duamo, and only to run and support it.

If a security incident puts your personal data at risk, we tell you and the competent authorities when the law requires it.

11. Your rights

Wherever you live, you can ask us to:

  • tell you what personal data we have about you, and give you a copy
  • send that copy to you, or to another company, in a machine-readable format
  • correct data that is wrong or incomplete
  • delete your data
  • stop or limit a use of your data, including any use based on our legitimate interests

To ask, write to support@iocodo.com. It is free. We reply within one month, and we may ask you to confirm that the data is yours before we act.

You can also withdraw any consent you gave, at any time, in the app (Settings, then Privacy choices). What we did with your consent before you withdrew it stays lawful.

Deleting your data

You can delete your account and its data:

  • in the app, for your account, your answers and messages (including those your partner has already read), and everything else stored under your account on our servers; your partner keeps their own answers and messages: Settings, then Delete account
  • on the web: iocodo.com/apps/duamo/delete-account
  • by email: write to support@iocodo.com with the subject "Delete my data"

Usage statistics and crash reports that were already sent are deleted on their own, within the periods in How long we keep data.

What the app keeps on your device is deleted when you uninstall the app.

Complaints

You also have the right to complain to an authority:

If you are in Brazil, you have the rights listed in article 18 of the LGPD (Lei 13.709/2018), and you can use them as described above. If you ask us for your data, we send a complete answer within 15 days, not one month.

12. Privacy rights in US states

Several US states, including California, Colorado, Connecticut, Oregon, Texas and Virginia, give their residents privacy rights. We give the same rights to everyone in the United States:

  • to know what personal information we collect, use and disclose, and to get a copy of it
  • to correct it
  • to delete it
  • to opt out of the sale of your personal information, of its use for targeted advertising and of profiling that has legal or similarly significant effects
  • to appeal if we turn down your request
  • not to be treated differently for using any of these rights

The personal information we collect comes from you and from the app on your device. Why we use it and who receives it are described in What we use data for and Who receives data. We do not sell your personal information. In the current version of Duamo, we do not use or share it for targeted advertising.

To use these rights, write to support@iocodo.com, or have someone you authorise write for you. We reply within one month (these state laws allow up to 45 days). If we turn your request down, you can appeal by replying with the word "Appeal" in the subject. We answer an appeal within 45 days, and if you still disagree you can contact the attorney general of your state.

13. Notices for some countries

Canada

The service providers listed in Who receives data collect and keep data for us. They may process it outside Canada, in the United States and other countries where Google, GoDaddy or their subcontractors have facilities. The courts and authorities of those countries can have access to it under their laws.

Japan: information the app sends to other companies

When you use Duamo, the app sends this information from your device to other companies:

  • Firebase Authentication (Google LLC)

    Information sent: your random user ID; if you sign in with Apple or Google, the account details described in Accounts and sign-in; and the IP address and user agent of each sign-in request, which Firebase Authentication keeps for a few weeks.

    Our purpose: to create your random user ID when you first open the app and, if you choose to, to link it to your Apple or Google account, so that you can keep your couple's archive on another phone or after reinstalling the app.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Cloud Firestore (Google LLC)

    Information sent: the name your partner sees; your language and time zone; the couple profile and the topics you switch on; invite codes; the questions of each day; your answers and messages; your streak; the hour of your daily reminder; your answers to the consent page; your device token, if you allow notifications; whether your couple has Duamo Plus; the reports you send and the accounts you block; and your random user ID.

    Our purpose: to store your account and your couple, and to show your partner what you write.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Firebase Cloud Messaging (Google LLC)

    Information sent: a device token and the text of each notification.

    Our purpose: to deliver the notifications that tell you when your partner has answered or written.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Google Analytics for Firebase (Google LLC)

    Information sent: the events Firebase records by itself (such as app opens and sessions) and events the app records about which features are used (such as answering the day's question), never the text of your answers or messages and never your user ID; an app-instance identifier, the installation identifier, device model, operating system version and an approximate location that Google derives from your IP address (the app has no access to your device's location).

    Our purpose: to count how the app is used.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Firebase Crashlytics (Google LLC)

    Information sent: crash reports and diagnostics (device model, operating system, app version, memory and disk state), a record of each app session start, and installation identifiers.

    Our purpose: to report crashes so we can fix them.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Firebase Remote Config and Firebase Installations (Google LLC)

    Information sent: an installation identifier and its token, the app's version, the operating system version, and the language, country setting and time zone of your device; while usage statistics are on, also when you first opened the app, as Google Analytics recorded it.

    Our purpose: to keep the app configured, for example switching a feature off remotely.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Firebase App Check (Google LLC)

    Information sent: a short-lived App Check token and an attestation of the app and the device, from Apple's App Attest, which Firebase checks with Apple, or from Google Play Integrity, which Google Play produces under its own terms from the app's name, version and signing certificate and from information about the device.

    Our purpose: to confirm that requests come from the genuine app.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Sign in with Apple (Apple Inc.)

    Information sent: Apple confirms who you are and gives us an Apple user ID and, the first time only, the name and email address you choose to share, or a private address that forwards to yours.

    Our purpose: to let you sign in with your Apple Account, if you choose to.

    Purpose of Apple Inc.: its own purposes too, described in its privacy information.

  • Google Sign-In (Google LLC)

    Information sent: Google confirms who you are and gives us your Google user ID, email address, name and profile picture.

    Our purpose: to let you sign in with your Google Account, if you choose to.

    Purpose of Google LLC: its own purposes too, described in its privacy information.

In Settings, then Privacy choices, you can turn off usage statistics (Google Analytics for Firebase) and crash reports (Firebase Crashlytics). The other transmissions cannot be turned off in the app; Firebase Cloud Messaging receives data only when you allow notifications; Sign in with Apple receives data only when you choose to sign in with Apple; Google Sign-In receives data only when you choose to sign in with Google.

Korea: personal information, entrustment and transfer abroad

Personal information: under Korea's Personal Information Protection Act (the Act), the personal information we process is your account and what is stored with it: the name your partner sees, your language and time zone, the couple profile and the topics you switch on, invite codes, your answers and messages, your streak, the hour of your daily reminder, your answers to the consent page, your device token if you allow notifications, whether your couple has Duamo Plus, the reports you send (with the app's language and, if your app store or your phone's region is South Korea, that region) and the accounts you block; if you sign in with Apple or Google, the name, email address and user ID we receive; and the emails you send to support@iocodo.com. The installation and app-instance identifiers, App Check tokens, usage events, crash reports and the device information listed in Who receives data cannot be linked to you with anything we hold, so under the Act they are not personal information (the definition in What this policy covers is broader), and we handle them without identifying you.

Processed without your consent: we process everything listed above as personal information without asking for your consent, on the basis of article 15(1)(iv) of the Act, which covers what is needed to carry out our contract with you (our terms of use) or, in the process of concluding a contract, to act on your request. Once we have handled your request, we keep your emails to us and our replies, with your email address, as the record of how we handled it, in case you write to us again about it or a dispute arises, on the basis of article 15(1)(vi) of the Act (our legitimate interests, where they clearly outweigh your rights and stay within a reasonable scope). If you are in Korea, we keep them for 3 years after our last message about that request, then delete them; we delete them sooner if you ask us to.

Entrustment and transfer abroad: we entrust the work below to these companies, which receive the personal information outside Korea. The legal basis for the transfer is article 28-8(1)(iii) of the Act: we entrust this work to them to carry out our contract with you, and this policy discloses the details the Act lists. Each company uses the information only to do this work for us, and keeps it for the periods in How long we keep data.

  • Google LLC

    Work entrusted: storing your account, your couple, your answers and your messages in Cloud Firestore, signing you in with Firebase Authentication, running Duamo's server tasks with Cloud Functions for Firebase, including deleting data when its retention ends, and delivering notifications with Firebase Cloud Messaging.

    Personal information transferred: your random user ID; if you sign in with Apple or Google, the name, email address and user ID we receive; the name your partner sees, your language and time zone, the couple profile and topics, invite codes, your answers and messages, your streak, the hour of your daily reminder, your answers to the consent page, your device token, whether your couple has Duamo Plus, the reports you send and the accounts you block; and the IP address of each sign-in request.

    Countries: Belgium, the Netherlands, Finland and the United States.

    When and how: whenever the app saves or syncs your data, when you sign in and when a notification is sent, over an encrypted connection (HTTPS).

    Contact: 1600 Amphitheatre Parkway, Mountain View, California 94043, United States, privacy contact form.

    How to refuse: storing this data with Google is how Duamo keeps your account and your couple and shows your partner what you write: to refuse, do not use the app, and delete your account in the app to remove what is already stored.

    If you refuse: you cannot use Duamo.

    Sub-processors: the list published by Google LLC

  • GoDaddy Operating Company, LLC

    Work entrusted: receiving and keeping the emails you send to support@iocodo.com and our replies.

    Personal information transferred: your email address, your message and anything you attach, and our replies.

    Countries: the United States and other countries where GoDaddy or its subcontractors have facilities; GoDaddy's privacy notices do not name those countries.

    When and how: when you send us an email or we reply to you, over the internet.

    Contact: Office of the Data Privacy Officer, 100 S. Mill Ave, Suite 1600, Tempe, AZ 85281, United States, privacy@godaddy.com.

    How to refuse: do not write to us by email; to remove the emails you already sent, ask us to delete them.

    If you refuse: we cannot answer you by email, and the app works the same.

    Sub-processors: the list published by GoDaddy Operating Company, LLC

Where we process it: we have no servers of our own: the companies above store this personal information for us, in the countries named for each.

Destruction: when the period in How long we keep data ends, or when you ask us, we delete the personal information without delay, permanently and so that it cannot be recovered. We keep none of it on paper.

Automatic collection: the app collects information automatically through the software development kits (SDKs) of these services. What each one collects is listed in Who receives data, and how long it is kept in How long we keep data.

  • Firebase Authentication
  • Cloud Firestore
  • Google Analytics for Firebase
  • Firebase Crashlytics
  • Firebase Remote Config and Firebase Installations
  • Firebase App Check

Firebase Cloud Messaging receives data only when you allow notifications; Sign in with Apple receives data only when you choose to sign in with Apple; Google Sign-In receives data only when you choose to sign in with Google: that is not automatic collection.

How to refuse: on Android, usage statistics (Google Analytics for Firebase) and crash reports (Firebase Crashlytics) are on by default in Korea; on iPhone and iPad they start when you tap OK on the notice the app shows once, the first time it opens. You can turn them off at any time in Settings, then Privacy choices. The other services in this list are needed for the app to work: to refuse them, stop using the app and delete it. You can also write to us at support@iocodo.com.

Your requests: you can make the requests described in Your rights. If you are in Korea, we answer within 10 days, not one month. A legal guardian of a child under 14 can make the same requests for the child.

Privacy officer: IOCODO LLC, Privacy team, support@iocodo.com. You can also send complaints about how we handle personal information to this address.

Aviso de privacidad para México

Aviso de privacidad simplificado: en IOCODO LLC, con domicilio en 30 N Gould St Ste N, Sheridan, WY 82801-6317, Estados Unidos, tratamos los datos de tu cuenta (un identificador aleatorio y, si inicias sesión con Apple o Google, tu nombre, tu correo electrónico y tu identificador), el nombre que ve tu pareja, el perfil de pareja y los temas que eliges, tus respuestas y mensajes, los reportes que envías y las cuentas que bloqueas, el estado de la suscripción, los datos de tu dispositivo, los datos sobre cómo usas la app y, si nos escribes, tu mensaje y tu correo electrónico. Los usamos para que Duamo funcione y para responderte, que son finalidades primarias, y también para las estadísticas de uso y los informes de fallas, que son finalidades secundarias, en las condiciones que se indican abajo. No tratamos datos personales sensibles. Puedes limitar el uso de tus datos en Settings, then Privacy choices o escribiéndonos a support@iocodo.com. Puedes consultar el aviso de privacidad integral en esta página.

Si usas Duamo en México, esta página es nuestro aviso de privacidad integral. Esto es lo que la ley mexicana nos pide decirte:

Responsable: IOCODO LLC, con domicilio en 30 N Gould St Ste N, Sheridan, WY 82801-6317, Estados Unidos. Puedes escribirnos a support@iocodo.com.

Datos personales que tratamos: los detallamos para cada uso en la sección “Para qué usamos los datos y con qué base jurídica” y para cada servicio en la sección “Quién recibe los datos”. No tratamos datos personales sensibles.

Para qué los usamos: para que Duamo funcione y para responderte cuando nos escribes. Estas son finalidades primarias: son necesarias para prestarte el servicio.

Finalidades secundarias: si no te opones, también los usamos para:

  • estadísticas de uso (Google Analytics para Firebase)
  • informes de fallas (Firebase Crashlytics)

Cómo limitar el uso de tus datos: en Settings, then Privacy choices puedes desactivar cuando quieras las estadísticas de uso y los informes de fallas. La app sigue funcionando igual. También puedes escribirnos a support@iocodo.com.

Transferencias: cuando usamos un asistente de inteligencia artificial para leer un correo y preparar la respuesta, su proveedor, ubicado en Estados Unidos, recibe estos datos: el texto de tu correo y tu dirección de correo electrónico. Los trata conforme a sus propios términos. Esto constituye una transferencia de datos, cuya finalidad es ayudarnos a leer tus mensajes y a redactar nuestras respuestas. Si no la aceptas, escribe “SIN IA” en el asunto de tu correo a support@iocodo.com: atenderemos ese mensaje sin usar el asistente. Si no manifiestas tu negativa, entenderemos que la aceptas.

Derechos ARCO: puedes pedirnos acceso a tus datos, su rectificación o su cancelación, y oponerte a su uso. Nuestro departamento de datos personales atiende estas solicitudes en support@iocodo.com: dinos qué derecho quieres ejercer y sobre qué datos. Te respondemos en un plazo máximo de 20 días.

Tecnologías que recopilan datos automáticamente: mientras usas la app, los componentes de software (SDK) de estos servicios recopilan datos de forma automática:

  • Firebase Authentication
  • Cloud Firestore
  • Google Analytics para Firebase
  • Firebase Crashlytics
  • Firebase Remote Config y Firebase Installations
  • Firebase App Check

En la sección “Quién recibe los datos” puedes ver qué recopila cada uno. En Settings, then Privacy choices puedes desactivar Google Analytics para Firebase y Firebase Crashlytics. Para que los demás dejen de recopilar datos, tendrías que desinstalar la app.

Cambios a este aviso: los publicamos en esta página, con la fecha de la nueva versión. Si un cambio afecta la forma en que usamos los datos que ya tenemos de ti, te avisamos en la app antes de aplicarlo.

Türkiye: Aydınlatma Metni

Bu metin, Duamo uygulamasını Türkiye'de kullanan kişileri 6698 sayılı Kişisel Verilerin Korunması Kanunu'nun (“Kanun”) 10. maddesi uyarınca aydınlatmak amacıyla hazırlanmıştır.

Bu metin yalnızca bilgilendirme amaçlıdır. Açık rızanız, bu metinden ayrı olarak uygulama içinde alınır.

Veri sorumlusu: Duamo uygulamasını geliştiren IOCODO LLC. IOCODO LLC, Amerika Birleşik Devletleri'nin Wyoming eyaletinde kayıtlı bir sınırlı sorumluluk şirketidir.

Posta adresi: 30 N Gould St Ste N, Sheridan, WY 82801-6317, Amerika Birleşik Devletleri
E-posta: support@iocodo.com

Amaçlar ve hukuki sebepler: Kişisel verilerinizi aşağıdaki amaçlarla işliyoruz.

  • Uygulamanın çalışması: hesabınız, partnerinizle eşleşmeniz, günün sorusu, cevaplarınız ve her sorunun altındaki sohbet, çiftinizin arşivi ve serisi, Duamo Plus aboneliği, uygulamanın yapılandırılması ve isteklerin orijinal uygulamadan geldiğinin doğrulanması

    Veriler: rastgele kullanıcı kimliğiniz; partnerinizin gördüğü adınız; diliniz ve saat diliminiz; doldurduğunuz çift profili ve açtığınız konular (inanç ve maneviyat dahil); davet kodları; her günün soruları, cevaplarınız ve yazdığınız mesajlar; seriniz; günlük hatırlatıcınızın saati; bildirimlere izin verirseniz bir cihaz belirteci; Duamo Plus aboneliğinin durumu; Apple veya Google ile oturum açarsanız aldığımız ad, e-posta adresi ve kullanıcı kimliği; kurulum tanımlayıcıları, uygulamanın ve işletim sisteminin sürümü, cihazınızın dili, ülke ayarı ve saat dilimi, App Check belirteçleri ve Apple App Attest veya Google Play Integrity'den alınan bir doğrulama sonucu.

    Hukuki sebep: bir sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması kaydıyla, sözleşmenin taraflarına ait kişisel verilerin işlenmesinin gerekli olması (Kanun md. 5/2-c).

  • Kişilerin güvende tutulması: şikâyetlerin ve engellemelerin ele alınması

    Veriler: şikâyet ettiğiniz cevap veya mesaj, seçtiğiniz şikâyet nedeni, şikâyeti kimin yaptığı, içeriği kimin ve ne zaman yazdığı, uygulamanın dili, uygulama mağazanızın veya telefonunuzun bölge ayarı Güney Kore ise bu bölge bilgisi; engellediğiniz hesaplar.

  • Bir kanun gerektirdiğinde şikâyet edilen içeriğin saklanması

    Veriler: şikâyet edilen içerik ve ilgili hesapların bilgileri; yalnızca bir kanun bunları saklamamızı gerektirdiğinde, örneğin bir çocuğun cinsel istismarını içerebilecek bir içerik söz konusu olduğunda.

  • Uygulamanın kullanımına ilişkin istatistiklerin tutulması ve çökmelerin giderilmesi

    Veriler: uygulama içi etkinlikler, çökme raporları ve tanılama bilgileri (bellek ve disk durumu), her uygulama oturumunun başladığına ilişkin bir kayıt, cihaz modeli, işletim sistemi ve uygulama sürümü, uygulama örneğine ve kuruluma ait tanımlayıcılar, Google'ın IP adresinizden tahmin ettiği yaklaşık konum (uygulamanın cihazınızın konumuna erişimi yoktur).

    Hukuki sebep: açık rızanız (Kanun md. 5/1). Türkiye'de kullanım istatistikleri ve çökme raporları siz açık rıza verene kadar kapalıdır.

  • Bize yazdığınızda size yanıt verilmesi

    Veriler: e-posta adresiniz, mesajınız ve e-postanıza eklediğiniz her türlü içerik; uygulamanın güncelleme ekranından yazdığınızda ayrıca konu satırındaki uygulama sürümü.

    Hukuki sebep: sorularınızın yanıtlanması bakımından, bir sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması kaydıyla, sözleşmenin taraflarına ait kişisel verilerin işlenmesinin gerekli olması (Kanun md. 5/2-c); Kanun'un 11. maddesi uyarınca yaptığınız başvuruların sonuçlandırılması bakımından, veri sorumlusunun hukuki yükümlülüğünü yerine getirebilmesi için zorunlu olması (Kanun md. 5/2-ç ve md. 13); size nasıl yanıt verdiğimizi kanıtlayabilmek amacıyla yazışmaların yalnızca Kurul'a şikâyet veya dava yolu açık olduğu sürece saklanması bakımından, bir hakkın tesisi, kullanılması veya korunması için veri işlemenin zorunlu olması (Kanun md. 5/2-e).

Toplama yöntemi: Kişisel verilerinizi aşağıdaki iki yöntemle elde ediyoruz.

  • Otomatik yollarla: uygulamayı kullandığınız sırada, cihazınızdaki Duamo uygulaması ve uygulamanın içinde yer alan hizmet sağlayıcılara ait yazılımlar (SDK) aracılığıyla.
  • Bir veri kayıt sisteminin parçası olmak kaydıyla otomatik olmayan yollarla: bize yazdığınızda, yani e-postalarınız ve uygulamadan gönderdiğiniz şikâyetler aracılığıyla.

Aktarım: Duamo uygulamasını işletmek için aşağıdaki sağlayıcılardan hizmet alıyoruz. Her biri yalnızca kendi hizmetiyle ilgili verileri alır.

  • Google LLC: hesabınızın, çiftinizin, cevaplarınızın ve mesajlarınızın saklanması (Cloud Firestore, Firebase Authentication, Cloud Functions for Firebase), partnerinizden gelen bildirimler (Firebase Cloud Messaging), uygulamanın yapılandırılması (Firebase Remote Config ve Firebase Installations), isteklerin orijinal uygulamadan geldiğinin doğrulanması (Firebase App Check); açtıysanız kullanım istatistikleri (Google Analytics for Firebase) ve çökme raporları (Firebase Crashlytics)
  • GoDaddy Operating Company, LLC: destek posta kutumuz (GoDaddy Professional Email); bize gönderdiğiniz e-postaları ve yanıtlarımızı saklar

Haklarınız: Kanun'un 11. maddesi uyarınca, veri sorumlusuna başvurarak kendinizle ilgili aşağıdaki haklara sahipsiniz.

  • kişisel verilerinizin işlenip işlenmediğini öğrenme
  • kişisel verileriniz işlenmişse buna ilişkin bilgi talep etme
  • kişisel verilerinizin işlenme amacını ve amacına uygun kullanılıp kullanılmadığını öğrenme
  • kişisel verilerinizin yurt içinde veya yurt dışında aktarıldığı üçüncü kişileri bilme
  • kişisel verileriniz eksik veya yanlış işlenmişse düzeltilmesini isteme
  • Kanun'un 7. maddesindeki şartlar çerçevesinde kişisel verilerinizin silinmesini veya yok edilmesini isteme
  • düzeltme, silme ve yok etme işlemlerinin, kişisel verilerinizin aktarıldığı üçüncü kişilere bildirilmesini isteme
  • işlenen verilerin münhasıran otomatik sistemler vasıtasıyla analiz edilmesi suretiyle aleyhinize bir sonucun ortaya çıkmasına itiraz etme
  • kişisel verilerinizin kanuna aykırı olarak işlenmesi sebebiyle zarara uğramanız hâlinde zararın giderilmesini talep etme

Başvuru: Başvurunuzu support@iocodo.com adresine e-postayla iletebilirsiniz. Talebinizi, niteliğine göre en kısa sürede ve en geç otuz gün içinde ücretsiz olarak sonuçlandırırız (Kanun md. 13).

Việt Nam: chuyển dữ liệu cá nhân xuyên biên giới

Khi bạn dùng Duamo tại Việt Nam, dữ liệu cá nhân của bạn được chuyển ra nước ngoài và được xử lý tại đó. Duamo là ứng dụng của IOCODO LLC, một công ty tại Hoa Kỳ.

Bên nhận dữ liệu: IOCODO LLC và các nhà cung cấp dịch vụ của chúng tôi, gồm:

  • Google LLC
  • Apple Inc.
  • GoDaddy Operating Company, LLC

Nơi xử lý: Hoa Kỳ và các quốc gia khác nêu tại phần về nơi xử lý dữ liệu trên trang này.

Mục đích xử lý: vận hành Duamo và trả lời khi bạn liên hệ với chúng tôi.

Ngoài ra, tùy theo lựa chọn của bạn, dữ liệu còn được dùng cho:

  • thống kê việc sử dụng ứng dụng (Google Analytics for Firebase)
  • báo cáo sự cố để chúng tôi khắc phục lỗi (Firebase Crashlytics)

Phần về bên nhận dữ liệu trên trang này cho biết mỗi dịch vụ nhận những dữ liệu nào và để làm gì. Bạn có thể bật hoặc tắt thống kê sử dụng và báo cáo sự cố bất cứ lúc nào trong ứng dụng, tại Settings, then Privacy choices.

Email bạn gửi cho chúng tôi: Bên nhận: GoDaddy Operating Company, LLC tại Hoa Kỳ (nhà cung cấp hộp thư hỗ trợ của chúng tôi) và Anthropic, PBC tại Hoa Kỳ (Claude, trợ lý trí tuệ nhân tạo mà chúng tôi có thể dùng để đọc email và soạn bản nháp thư trả lời). Điều này cũng áp dụng cho các báo cáo bạn gửi cho chúng tôi qua email.

Xử lý tự động: Khi chúng tôi dùng Claude để đọc một email, nội dung email đó được xử lý tự động. Claude là một mô hình ngôn ngữ, có chức năng đọc văn bản và soạn bản nháp thư trả lời. Chúng tôi không đưa ra bất kỳ quyết định tự động nào về bạn: một người phụ trách tại IOCODO sẽ trực tiếp đọc và quyết định cách trả lời. Nếu bạn muốn từ chối, hãy ghi «KHÔNG AI» vào tiêu đề email gửi đến support@iocodo.com: chúng tôi sẽ xử lý email đó mà không dùng trí tuệ nhân tạo.

14. Children

Duamo is not meant for children under 13.

The app never asks for your age or your year of birth. Where it asks for your consent to usage statistics and crash reports, the button that allows them states the age from which your consent counts there, such as "Allow, I'm 16 or older". If you are younger than the age on the button, choose the button that refuses them, and the app works the same.

Where a law requires it, as in Texas and in Brazil, the app reads the age range your app store shares with it (Apple's Declared Age Range, Google Play Age Signals). It uses the range only for those duties, keeps it only in your phone's memory, and never stores, logs or sends it. In Brazil, an Allow turns usage statistics and crash reports on only when your app store tells the app that you are 18 or older; otherwise they stay off.

For parents: Duamo connects two people who invite each other with a link or a code. There is no search for other people, no public profile and no feed: what each person writes is shown only to the person they paired with. Either of them can report an answer or a message, and can unpair and block the other, who then can never pair with them again. In Brazil, this paragraph is also the public summary, in plain language, of our assessment of the risks the app poses to children and teenagers.

If you think a child has given us personal data, write to support@iocodo.com and we will delete it.

15. "Do Not Track" and other companies

Some browsers and devices can send a "Do Not Track" signal. There is no common standard for responding to it, so neither Duamo nor this page changes what it does when it receives one. The choices described in this policy are how you control your data.

In the current version of Duamo, only the service providers listed in Who receives data receive data from the app, for the purposes listed there. We do not let other companies use Duamo to collect personal data about your activity over time and across other apps and websites.

16. Changes to this policy

We update this policy when Duamo or the law changes, and the date at the top shows when the current version took effect. If a change affects how we use data we already have about you, we tell you in the app before it applies, and we ask for your consent again where the law requires it.

This version was last updated on .

Earlier versions: 2026-10-21

17. Contact

IOCODO LLC
Postal address: 30 N Gould St Ste N, Sheridan, WY 82801-6317, United States
Email: support@iocodo.com
Report criminal or illegal content: iocodo.com/report/