Dualo
Privacy Policy
Effective October 10, 2026
Dualo is an app for training, food, study and planning, made by an independent developer in Croatia. This policy explains what we collect, why, and the choices you have. If anything is unclear, write to dualoapp@gmail.com.
The waitlist
- When you join the waitlist, we keep your email address, the date you joined and the site that sent you, such as TikTok, when the link or your browser tells us.
- We use it only to email you about Dualo’s launch and early access. We never sell or share the list.
- We send these emails ourselves from dualoapp@gmail.com, so they pass through Google’s Gmail.
- Every email tells you how to leave the list, and you can also write to us to be removed. We keep the list until Dualo launches and delete it within a year after that.
Using the app
- Without an account, everything you log stays on your device.
- With an account, your email address, your password (stored only in scrambled form by our sign-in provider) and what you log are kept on our servers, so they sync between your devices.
- When you create an account, we ask your date of birth to check you are 13 or older. We don’t store it.
- If you use the social features, your profile (name, username, school and picture) and the summaries you choose to share are visible to the people you allow: friends, groups, or everyone in For you if you turn that on. Your sets, food and tasks are never shared.
- Reports you file, and what moderators decide about them, are kept to keep the community safe. A moderator can limit an account that breaks the rules.
- If you turn on notifications, we keep your device’s notification address so reminders can reach it.
- When you search for a food, the words or barcode are sent to Open Food Facts and USDA FoodData Central. Calendar links you add are read through our server to show your schedule.
- We don’t show ads, we don’t use tracking cookies or analytics, and we don’t sell your data.
Who handles data for us
- Supabase: database, sign-in and profile pictures.
- Vercel: hosting for the app and this site.
- Google: Gmail, for waitlist emails.
- Resend: email alerts to our moderators about new reports.
- Apple, Google or Mozilla, depending on your browser: delivering notifications to your device.
These providers keep short-lived technical logs, including IP addresses, to run and protect the service. Some of them process data in the United States; where the law requires it, those transfers are covered by the EU Standard Contractual Clauses.
How long we keep it
Account data stays until you delete your account. Settings → Delete account removes it from our servers; copies in backups are replaced within a short time. The waitlist is kept as described above.
Your rights
- You can ask for a copy of your data, correct it, or have it deleted. In the app, Settings → Export all data gives you a copy, and Delete account erases it.
- You can leave the waitlist or turn off notifications whenever you want.
- In the EU and EEA, you can also complain to your data protection authority. In Croatia that is AZOP (azop.hr).
- For California residents: we don’t sell or share personal information, and we don’t use it for targeted advertising.
Children
Dualo is for people aged 13 and older, and we don’t knowingly collect data from younger children. If you think a child under 13 has given us data, email us and we will delete it. In some EU countries, people under 16 need a parent’s permission to join the waitlist.
Security
Data travels encrypted. Access rules in our database let each person reach only their own data and what others chose to share with them.
Changes
If this policy changes, we’ll update the date at the top, and tell you by email or in the app when a change matters.