Duetto Privacy Policy
Duetto is game night for two phones. This page says what we collect, why, who sees it, how long we keep it, and what you can do about it. We’ve kept it short and plain.
The short version
- We collect what Duetto needs to work: your sign-in, what you write, draw and play, and a few details about your phone so notifications arrive.
- Your partner sees what’s meant to be shared with them (section 3). Nobody else does.
- No ads. We don’t sell your information. We use no advertising ID and no third-party analytics tools.
- Everything is stored with Amazon Web Services in the United States (us-east-1, N. Virginia).
- You can download your data and delete your account in Settings › Privacy and data.
- Questions? Email support@keenshift.ai.
1. Who we are
Duetto is published by Mitaanshu Agarwal, a sole trader in Australia. That’s the seller name you see on the App Store. In this policy, “we” means Mitaanshu. We decide how your information is used in Duetto, so under privacy laws that use the words, we are the “controller” or the “business”.
For privacy, support and legal questions, email support@keenshift.ai.
This policy covers the Duetto app (version 2.0 and later) and the pages on duetto.keenshift.ai: invite links, and the Terms, Privacy and Support pages. It doesn’t cover Duetto After Dark, which has its own policy.
2. What we collect
| What | Details | Why |
|---|---|---|
| Sign-in | With Apple: Apple’s private ID for you, plus your first name and email (or Apple’s private-relay address) if you choose to share them. With email: your address, and a six-digit code we email you. We keep your email address encrypted. We also keep a token from Apple, so we can disconnect your Apple sign-in when you delete your account. | To make your account and sign you in |
| Your profile | Your first name, a one-letter initial, your time zone, quiet hours, notification choices, and a profile photo if you add one. | To show you and your partner who’s who, and to time notifications |
| Your couple | Who you’re paired with, the date you got together, your colours, your setup choices (such as living together or apart, and what you want from Duetto), your question pack, streaks and scores, and any visit or date plans. | To run Duetto for the two of you |
| What you write, draw and record | Answers to the daily question, in words or by voice: a voice answer is a recording of up to a minute, with the transcript your phone writes of it, if it writes one. Chat messages about it, game moves, words and picks, drawings and doodles, photos you add (your profile photo, and the picture for Split Jigsaw), short recordings for Hum It once that game arrives, reactions, notes on saved memories, and waves you send. | To play, and to show it to your partner |
| Your phone | A random device ID, the notification token Apple gives us (and similar tokens for widgets and Live Activities), your app version, language and time zone. | To send notifications and keep your sign-in secure |
| Purchases | Apple’s transaction ID, the product, its status and dates. We never see your card or payment details. Apple handles those. | To unlock Pro for you and your partner |
| Usage counts | Counts of what people do in the app, like which screens open or how many games finish. They use a random ID made when you install the app, not your account, and a new one starts each time you sign out. We design them to leave out what you write, draw or say. You can turn them off in Settings › Privacy and data › Share usage counts. | To fix problems and improve Duetto |
| Connection details | Your IP address, which every internet service receives when you connect. We don’t keep it with your account or in our logs. We keep a scrambled (hashed) copy for up to an hour to limit abuse, such as repeated tries at guessing codes. | Security |
| When you write to us | Your email address, your message and anything you attach. | To help you |
What we don’t collect
- Your phone’s location. Duetto doesn’t use location services.
- Your contacts, or your photo library. You choose each picture you add.
- Your advertising ID. We don’t track you across other companies’ apps and websites.
- Your card or payment details.
Permissions Duetto may ask for
- Notifications: so Duetto can tell you when your partner has done something. Say no and the app still works.
- Microphone: only to record your voice answers to the daily question, and hums in the Hum It game once it arrives. Recordings go to your partner. Your partner can play a voice answer only once you’ve both answered.
- Speech recognition: only to write a transcript of your voice answer, which is saved as your answer’s words. Your iPhone writes it on the phone itself, so the recording isn’t sent anywhere to be transcribed. Say no and your voice answers simply have no transcript.
- Camera: only to take a profile photo.
- Photos: only to save pictures you choose to save. Duetto never sees the rest of your library.
- Face ID or passcode: if you turn on app lock, your phone does the check. We never receive your face or fingerprint data.
Photos you add are re-saved on your phone without their hidden details (like location) before they’re uploaded. You can change any permission in iOS Settings.
3. What your partner can see
Duetto is built for two people. Once you’re paired, your partner can see:
- your first name, initial, colour and profile photo, and the date you got together;
- your answer to the daily question, in words or by voice (with its transcript), but only after you’ve both answered. Until then, they can see only that you’ve answered;
- what you play and what each game reveals: moves, scores, drawings, words and picks;
- what you send them: waves, doodles, messages, reactions and notes;
- anything either of you saves to Us;
- your time zone, and whether it’s likely night where you are;
- that you’re in the app, and on which screen, for example when you’re both waiting at a game;
- whether you bought Pro for the two of you.
Your partner can put doodles you made on share cards, unless you switch that off in Settings › Privacy and data.
Widgets. If you add Duetto widgets, they can show your partner’s name, the time there, whether each of you has done tonight’s question (never the question or the answers) and their latest doodle on your Home Screen or Lock Screen. App lock doesn’t hide them. Anyone who can see your screen can see them. Remove a widget if you don’t want that.
Invite links and codes. Anyone who opens your invite link, or types its code in Duetto, can see your first name. An invite lasts seven days. While it’s live, the link’s preview picture shows your name too. Once the invite has been used, has run out or is closed, the preview no longer names you, but the invite page and the app can still show your first name (so whoever has the link knows to ask you for a fresh one) until we remove the invite, 30 days later.
Sealed answers. Duetto keeps your partner’s answer back until you’ve both answered. That is a feature of the app. It is not end-to-end encryption: our servers store your answers so the app can work.
4. How we use your information
- To make your account, sign you in, pair you with your partner, and run the games, questions and memories.
- To send the notifications you’ve allowed. They can name your partner and a game. They never contain your answers or messages.
- To check Pro purchases with Apple and give Pro to both of you.
- To keep Duetto secure, stop abuse and fix bugs.
- To understand, in counts, how Duetto is used.
- To answer your messages and meet our legal duties.
Our legal reasons (for people in the EU, UK and similar places). We use your information to carry out our agreement with you (the Terms), for our legitimate interests in running a secure app that works well, with your consent where we ask for it (notifications, microphone, speech recognition and camera), and to meet legal duties. You can take back a consent at any time in iOS Settings.
We don’t make decisions about you by computer that have legal or similarly significant effects. We don’t use your answers to train AI models.
5. Who we share it with
Only the people and services below, and only as far as needed.
- Your partner, as described in section 3.
- Amazon Web Services (AWS) hosts Duetto. It runs our servers, database and file storage, sends sign-in emails, and keeps our logs. AWS handles your information for us, as our processor.
- Apple provides Sign in with Apple, delivers notifications, and handles purchases and subscriptions. We send Apple a notification token and the notification text. Apple tells us when a purchase renews, expires or is refunded.
- Vercel runs the web address duetto.keenshift.ai. Invite links and the Terms, Privacy and Support pages pass through it, so it can see the IP address, device type and page requested by anyone who opens them. Signing in and playing in the app don’t pass through Vercel.
- Authorities and advisers, if the law requires it, to protect someone’s safety, or if the business is sold. We’d tell you first if your information would be handled under a different policy.
That’s everyone. We don’t sell your personal information or share it for advertising, and we haven’t in the past 12 months. We have no advertising partners and no data brokers.
These pages don’t use cookies, scripts or trackers.
6. Where it’s stored
In AWS’s US East (N. Virginia) region, which is us-east-1, in the United States. If you live somewhere else, using Duetto means your information is sent there. We don’t keep file-storage access logs, so your IP address doesn’t sit next to your photos or recordings.
7. How long we keep it
| Information | How long |
|---|---|
| Email sign-in codes | 10 minutes |
| Sign-in sessions | Up to 180 days after you last used the app, or until you sign out |
| Phone details and notification tokens | Until you sign out on that phone, or 120 days after you last used it |
| Invite codes and links | Live for 7 days. Closed ones are removed 30 days later |
| Waves | 7 days |
| Daily answers (voice answers and their transcripts too), chat messages, game results, memories, scores and streaks | Until you delete your account, unless a row below says sooner. If you unpair, see section 8 |
| Voice answers you replace or never send | A recording you replace with a new take, or with words, is deleted when you save the change. One you record but never send is deleted within a day |
| Game drawings and photos | 30 days after they’re made, unless they’re saved to Us. A Split Jigsaw picture is deleted when its game ends, unless saved |
| Hum It recordings (once the game arrives) | Deleted unless you both keep them. If nobody decides, they’re deleted after 7 days |
| Things saved to Us | Until removed, or until the person who saved them deletes their account |
| Download-your-data files | 7 days. The download link works for 1 hour |
| Usage counts | 13 months, not linked to your account |
| Purchase records | Apple’s transaction record stays after you delete your account, unlinked from you, so refunds and renewals can still be handled |
| Server logs | Up to 30 days. They are built to leave out names, answers, emails and IP addresses |
| Hashed IP addresses used to limit abuse | Up to an hour |
| Backups | Up to 35 days. Deleted information can sit in a backup for that long |
| Emails to us | As long as we need to help you and keep a record of what we did |
Things that expire automatically can take a few days to disappear after the time shown.
8. Unpairing, blocking and deleting your account
If you unpair
- You’re no longer linked. Games in progress end without a winner. Streaks and scores stop where they were.
- What either of you saved to Us stays, and each of you can still open it.
- Answers to nights nobody saved wait 30 days, in case the same two of you pair again. Then they’re deleted for both. A night that only one of you had answered is deleted straight away, unread.
- Your partner keeps what they made. Pro stays with whoever bought it.
If you block
The same, except that unsaved nights are deleted at once, and the two of you can’t pair again. You can also clear the memories you saved together from your own Us.
If you delete your account
You can do this in Settings › Privacy and data › Delete account, and you’ll see what goes before anything happens. Right away, you’re signed out everywhere and unpaired, and we ask Apple to disconnect your Apple sign-in. Then we delete, usually within an hour and always within 30 days:
- your account, sign-in details, phones and notification tokens;
- your daily answers (words, voice recordings and transcripts) and the chat messages you wrote, the memories you saved, and the doodles and waves you sent;
- your invites and blocks;
- the games you played with your partner, with the drawings and recordings in them (except pictures your partner made and saved to Us);
- any Duetto After Dark data for your couple.
Duetto also clears its saved data from your phone.
What can stay:
- your partner’s own answers and memories, and shared records like scores, with your name and ID removed. They stay while your partner has an account. When your partner also leaves, we delete the couple’s records;
- Apple’s purchase record, unlinked from you;
- usage counts, which aren’t linked to you;
- copies in backups, for up to 35 days.
Deleting your account doesn’t cancel a subscription. Apple bills it until you cancel it in Settings › your name › Subscriptions.
9. Your rights
Wherever you live, you can ask us to:
- show you what we hold about you, and give you a copy;
- correct what’s wrong;
- delete it;
- stop or limit some uses, and object to others;
- move it to another service, where the law gives you that right.
Most of this you can do yourself. Settings › Privacy and data › Download your data gives you one plain-text (JSON) file. It has your account details and email, your sign-in methods, your phones, your purchases, your daily answers (a voice answer’s transcript and length) and chat messages, your First three picks and guesses, the games you played with their scores, and lists of the memories you saved and the doodles you sent. Photos, drawings and recordings aren’t in it. Email us and we’ll send you a copy of those. You can change your name in Settings, and delete your account there too.
For anything else, email support@keenshift.ai from the address linked to your account. We may ask you to confirm it’s you. We aim to reply within 30 days. It’s free, unless a request is clearly excessive.
Australia. We handle personal information in line with the Australian Privacy Principles. You can ask to see and correct it, and you can complain to us. If you’re not happy with our reply, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
EU, UK and EEA. You have the rights above under the GDPR or UK GDPR, and the right to complain to your local data protection authority.
California. You can ask to know, correct and delete your personal information, and to opt out of its sale or sharing. We don’t sell or share it, and we won’t treat you differently for using your rights.
If a data breach is likely to cause you serious harm, we’ll tell you and the regulator, as the law requires.
10. Keeping it safe
- Everything between the app and our servers is encrypted in transit. Stored data is encrypted at rest by AWS. We add a layer of our own encryption on email addresses and Apple tokens.
- Each partner can reach only their own couple’s information. Your partner’s answer isn’t sent to your phone until you’ve both answered.
- Sign-in tokens expire and are replaced as you use the app. Photos and recordings are private, with short-lived download links.
- We don’t read your answers, messages or recordings, except where we need to keep the service secure or fix a fault, or where the law requires it.
No system is perfectly secure. Please keep your phone locked and your Apple Account safe.
11. Age
Duetto is for people aged 16 and over. We don’t knowingly collect information from anyone younger. If you think someone under 16 has an account, email us and we’ll delete it.
12. If you used an earlier Duetto
Duetto 2.0 is a fresh start on a new system. We didn’t copy information from earlier versions into it, so you sign in and pair again. Pro you bought before comes back through the App Store. If you used an earlier version and want information from it deleted, email us.
13. Changes
If we change this policy in a way that matters, we’ll tell you in the app and update the date at the top.
14. Contact
Mitaanshu Agarwal, sole trader, Australia
support@keenshift.ai