Duetto After Dark Privacy Policy
Duetto After Dark is an adults-only companion to Duetto, for two people. This page says what it collects, why, who sees it, and what you can do about it. We’ve kept it short, plain and discreet.
The short version
- After Dark is for adults, 18 and over.
- What you pick here can say something private about you. We treat it that way. We use it only to run the app. Never to sell, advertise or profile you.
- Your answer to the question of the night is end-to-end encrypted. It’s locked on your phone before it’s sent, so only you and your partner can open it. Our servers store it, but can’t read it.
- The words on the cards and questions live inside the app, on your phone. Our servers only record which card, by number.
- Your partner never sees your no or your maybe. They see only the yeses you both shared.
- Nothing from After Dark appears on your lock screen. No widgets, no share cards. If you allow notifications, they say only “Something new is waiting.”
- No ads, no trackers, no advertising ID. We don’t sell your information. It’s stored with Amazon Web Services in the United States.
1. Who we are
Duetto After Dark is published by Mitaanshu Agarwal, a sole trader in Australia. That’s the seller name you see on the App Store. In this policy, “we” means Mitaanshu. We decide how your information is used in After Dark, so under privacy laws that use the words, we are the “controller” or the “business”.
For privacy, support and legal questions, email support@keenshift.ai.
After Dark uses the same account, the same pairing and the same servers as Duetto. This policy covers After Dark and what it adds. The Duetto Privacy Policy covers your account and pairing in more detail, and still applies to them.
2. What we collect
| What | Details | Why |
|---|---|---|
| Your account | The same account as Duetto. With Apple: Apple’s private ID for you, plus your first name and email (or Apple’s private-relay address) if you share them. With email: your address, and a six-digit code we email you. If you’re already signed in to Duetto on the same phone, After Dark can use that sign-in through your iPhone’s Keychain, so you don’t sign in twice. | To sign you in and link you with your partner |
| Your age answer | Whether you said you’re 18 or over (or under 18), whether you said it yourself or Apple confirmed it, and when. It’s saved to your account. | To keep After Dark for adults only |
| Your Wish List and Positions marks | For each idea or position, identified by a number, whether you marked yes, maybe or no. We store all three on our servers, because that’s how we find the ones you both said yes to. We never show your partner your no or your maybe, or a yes they didn’t also give, and we use your marks for nothing else. Your fit in Positions is worked out only from the yeses you share. | To find your matches |
| What you play | In the other games, which card was dealt (by number), your pick or guess, who answered, and when. We know a card’s heat level and a broad topic code, but not its words. Truth or Dare answers are spoken out loud and never recorded. | To run the games and the reveals |
| Your settings | Your heat limit and any topics you switched off, a pause, your colour, and your home time zone. | To run the app the way you both chose |
| Night answers | Your answer to the question of the night is encrypted on your phone before it’s sent. We store only the locked version, which night and question it belongs to (by number), when it was sealed, and the reactions on it. We also store a public key for each of your devices. See section 4. | To keep the answers between the two of you |
| Your phone | A random device ID, the notification token Apple gives us, your app version, language and time zone. | To send plain notifications and keep your sign-in secure |
| Purchases | Apple’s transaction ID, the product, its status and dates. We never see your card or payment details. | To unlock Plus, or the Positions Pack, for both of you |
| Usage counts | Counts of a few things people do in the app, like that the age screen was answered, a game started, or a setting changed. They use a random ID made when you install the app, not your account. They never include a card, question, answer or mark. After Dark has no switch for these counts. | To fix problems and improve the app |
| Connection details | Your IP address, which every internet service receives. We don’t keep it with your account or in our logs. We keep a scrambled (hashed) copy for up to an hour to limit abuse. | Security |
| When you write to us | Your email address, your message and anything you attach. | To help you |
| The Android waitlist | If you open an After Dark invite link on an Android phone, you can leave your email address to hear when After Dark comes to Android. We keep it with the invite it came from, and when you left it. We keep the email only to send that one notice, then delete it. | To tell you once that After Dark is on Android |
Sensitive information
The ideas you mark and the games you choose can say things about your private and intimate life. Privacy laws call that sensitive information, and some, like the EU and UK GDPR, call it “special category” data. We use it only to run After Dark for you and your partner. By saying you’re 18 or over and joining, you agree that we can handle it for that purpose. You can take that agreement back at any time by deleting your After Dark data (section 9).
What we don’t collect
- Your location, contacts, photos, camera or microphone. After Dark never asks for them.
- The words of any card, question or idea. They never leave the app.
- Your advertising ID. We don’t track you across other companies’ apps and websites.
- Your card or payment details.
3. What your partner can see
- That you’ve joined After Dark and are linked, and your colour. They don’t see your age answer.
- The ideas you both marked yes. They never see your no, your maybe, an idea you haven’t marked, or when you marked it. They can see how many ideas you’ve marked, as a number, but not which ones.
- The effect of your limits: the milder choice of the two of you applies to both.
- In the games, what each game reveals to both of you, such as the picks and guesses once both are in.
- Your answer to a night’s question, only after you’ve both sealed one. Before that, they can see only that you’ve sealed yours.
- That After Dark is paused, and who paused it.
Either of you can delete a night for both of you.
Invite links and codes. The page your invite link opens in a browser, and the link’s preview, never show your name. Anyone who opens the link in After Dark or Duetto, or types its code in Duetto, can see your first name, so they know who the invite is from. An invite lasts seven days. Once it has been used, has run out or is closed, the apps can still show your first name to whoever has the link or code (so they know to ask you for a fresh one) until we remove the invite, 30 days later.
4. End-to-end encryption of night answers
When you write an answer to the question of the night, your phone locks it before sending it, so that only you and your partner’s phones can open it. Each phone makes its own private key and keeps it. Our servers hold the locked answer and the public keys, which can lock but can’t unlock. We never hold a key that opens it. We can’t read your night answers.
- Your key lives in your iPhone’s Keychain. If you use iCloud Keychain, it syncs to your other devices on the same Apple Account, so a new phone can still open old nights. If you lose every device and have no iCloud Keychain, we can’t open old answers for you.
- Signing out keeps the key, so old nights open again when you sign back in. Deleting your After Dark data or your account removes it.
- We can see that an answer exists, which night it belongs to, when it was sealed, and roughly how long it is.
- Everything else, such as Wish List marks, picks and settings, is stored so our systems can use it. It is not end-to-end encrypted, though it is encrypted in transit and at rest.
5. Nothing on your lock screen, and other privacy features
- Nothing from After Dark shows on your lock screen. It has no widgets, no Live Activities, no Home Screen shortcuts, no Spotlight items and no share cards. The only things you can share are an invite link or code, with a plain preview.
- Plain notifications. If you allow them, a notification shows the name “Duetto After Dark” and the line “Something new is waiting.” It never names a person, game or card, and it isn’t shown while the app is open. You can turn notifications off in iOS Settings.
- App lock. You can lock the app with Face ID or your passcode. Your phone does the check. We never receive your face or fingerprint data, and your lock settings stay on your phone.
- App-switcher cover and discreet icon. A cover hides After Dark in the app switcher, and you can choose a plainer app icon.
- Drafts stay on your phone. An answer you haven’t sealed yet is kept on your phone only. It’s cleared when you sign out or delete your account.
Like other apps, what After Dark keeps on your phone, including unsent drafts and settings, can be included in iPhone backups you make. And anyone who has your unlocked phone can open the app unless app lock is on.
6. How we use your information
- To sign you in, check your age, link you with your partner, and run the games, matches and nights.
- To send the plain notifications you’ve allowed.
- To check Plus purchases with Apple and give Plus to both of you.
- To keep After Dark secure, stop abuse and fix bugs.
- To understand, in counts, how After Dark is used.
- To answer your messages and meet our legal duties.
Our legal reasons (for people in the EU, UK and similar places). To carry out our agreement with you (the Terms), for our legitimate interests in running a secure app, with your explicit consent for sensitive information (section 2), and to meet legal duties. We don’t make decisions about you by computer that have legal or similarly significant effects, and we don’t use your information to train AI models.
7. Who we share it with
- Your partner, as described in section 3.
- Amazon Web Services (AWS) hosts After Dark: servers, database, sign-in emails and logs. AWS handles your information for us, as our processor.
- Apple provides Sign in with Apple, the age-range check where it applies, notifications, purchases and subscriptions, and iCloud Keychain. Apple tells us when a purchase renews, expires or is refunded.
- Vercel runs the web address duetto.keenshift.ai. Invite links and the Terms, Privacy and Support pages pass through it, so it can see the IP address, device type and page requested by anyone who opens them. Using the app doesn’t pass through Vercel.
- Authorities and advisers, if the law requires it, to protect someone’s safety, or if the business is sold. We’d tell you first if your information would be handled under a different policy.
That’s everyone. We don’t sell your personal information or share it for advertising, and we haven’t in the past 12 months. We have no advertising partners and no data brokers. These pages don’t use cookies, scripts or trackers.
8. Where it’s stored, and how long we keep it
In AWS’s US East (N. Virginia) region, us-east-1, in the United States. If you live somewhere else, using After Dark means your information is sent there. We don’t keep file-storage access logs.
| Information | How long |
|---|---|
| Wish List and Positions marks and matches, games, deck settings and pause | Until you delete your After Dark data, unlink, or delete your account. If you unpair in Duetto, they’re deleted 30 days later (section 9) |
| Nights and their locked answers | Until you delete the night, delete your After Dark data, unlink, or delete your account. We keep only the most recent 60 opened nights for a couple |
| Your age answer, and when you gave it | Until you delete your account. It’s kept even if you delete your After Dark data or unlink |
| Phone details and notification tokens | Until you sign out of After Dark or delete your After Dark data, or 120 days after you last used it |
| Purchase records | Apple’s transaction record stays after you delete your account, unlinked from you, so refunds and renewals can still be handled |
| Usage counts | 13 months, not linked to your account |
| Server logs | Up to 30 days. They are built to leave out names, answers, emails and IP addresses |
| Hashed IP addresses used to limit abuse | Up to an hour |
| Backups | Up to 35 days. Deleted information can sit in a backup for that long |
| Emails to us | As long as we need to help you and keep a record of what we did |
| An Android waitlist email | Until we send the one notice that After Dark is on Android, then it’s deleted. Email us to have it deleted sooner |
Things that expire automatically can take a few days to disappear after the time shown.
9. Pausing, unlinking and deleting
- Pause. One tap pauses After Dark for both of you. Nothing is dealt or sent while it’s paused.
- Delete my After Dark data (Settings). Deletes your own Wish List marks, your deck entries, your keys and your After Dark phones. It also deletes what the two of you made together, because that needs both of you: every match, every game and night (your partner’s sealed answers too), and the game history. It unlinks the two of you in After Dark. Your Duetto account and pairing stay. Your partner’s own marks and settings stay, and so does your age answer. On your phone it also clears After Dark’s saved copies, your unsent drafts and your answer key.
- Unlink (Settings › Your partner). Ends After Dark for both of you while you stay paired in Duetto. It deletes both your marks and matches, all games and nights, and your deck settings. You can link again later and start fresh. Both age answers stay.
- If you unpair in Duetto. After Dark closes for you both. Your couple’s After Dark data is deleted 30 days later, along with the Duetto nights nobody saved. If you block, it’s deleted at once. If the same two of you pair again within the 30 days, it’s deleted then, and After Dark starts fresh.
- Delete account (Settings). Deletes the account you share with Duetto, in both apps. All the couple’s After Dark data goes, including what your partner shared, and so does your age answer. What can stay: Apple’s purchase record, unlinked from you; usage counts, which aren’t linked to you; and backups, for up to 35 days.
- Plus. Deleting data or an account doesn’t cancel an Apple subscription. Cancel it in your iPhone’s Settings › your name › Subscriptions.
10. Your rights
Wherever you live, you can ask us to show you what we hold about you and give you a copy, correct it, delete it, limit or stop some uses, or move it to another service where the law gives you that right.
Settings › Download my data saves a copy of your Duetto account data, the account you use in both apps. It doesn’t include After Dark data. For that, email support@keenshift.ai from the address linked to your account, and we’ll send you a copy of what we hold about you in After Dark that we can read: your account details, age answer and dates, your marks and matches, and your settings. Your night answers are locked, so all we can send is the locked data. We may ask you to confirm it’s you. We aim to reply within 30 days. It’s free, unless a request is clearly excessive.
Australia. We handle personal information in line with the Australian Privacy Principles. You can ask to see and correct it, and you can complain to us. If you’re not happy with our reply, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
EU, UK and EEA. You have the rights above under the GDPR or UK GDPR, the right to take back your consent at any time, and the right to complain to your local data protection authority.
California. You can ask to know, correct and delete your personal information, and to opt out of its sale or sharing. We don’t sell or share it, and we don’t use sensitive personal information for anything beyond running the app. We won’t treat you differently for using your rights.
If a data breach is likely to cause you serious harm, we’ll tell you and the regulator, as the law requires.
11. Keeping it safe
- Everything between the app and our servers is encrypted in transit. Stored data is encrypted at rest by AWS. Night answers have the extra, end-to-end layer in section 4.
- Each partner can reach only their own couple’s information. A partner’s no, maybe, or one-sided yes is never sent to the other phone.
- We don’t look at your information, except where we need to keep the service secure or fix a fault, or where the law requires it.
No system is perfectly secure. Please keep your phone locked and your Apple Account safe.
12. Age
After Dark is for people 18 and over. When you first open the app, you say whether you’re 18 or over. In places where Apple requires an age check, Apple’s age-range check comes first. We don’t knowingly collect information from anyone under 18. If you say you’re under 18, After Dark closes for you, and we keep that answer on your account so it stays closed on every phone until your Apple Account says you’re 18 or over. If you think someone under 18 has used After Dark, email us and we’ll act on it.
13. If you used Aflame
Duetto After Dark is the new version of the Aflame app. The first time you open it, it removes Aflame’s old data from your phone. Your purchases stay with Apple, and an earlier purchase still unlocks Plus. If you want any information from the earlier Aflame app deleted, email us.
14. Changes
If we change this policy in a way that matters, we’ll tell you in the app and update the date at the top.
15. Contact
Mitaanshu Agarwal, sole trader, Australia
support@keenshift.ai