Duovoco, Inc. ("Duovoco," "we," "our," or "us") is a Delaware C Corporation (File No. 10546620), incorporated on March 13, 2026. We operate the social accountability platform available at duovoco.com and app.duovoco.com (the "Service").
Contact: support@duovoco.com
Address: 131 Continental Dr, Suite 305, Newark, DE 19713, USA
When you sign in using Google Sign-In, we receive from Google: your name, email address, Google profile picture URL, and a unique Google account identifier. This data is used solely to create and authenticate your Duovoco account. We do not use Google user data for advertising, profiling, or any purpose other than providing the Service.
When you sign in using Apple Sign-In, we receive your name (if provided) and email address (or Apple's relay email). The same restrictions apply.
Google API Services User Data Policy — Limited Use disclosure: Duovoco's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Information received from Google APIs is used only to provide and improve the user-facing features of Duovoco, is not transferred to third parties except as necessary to provide the Service or as required by law, is not used for advertising, and is not read by humans except with explicit user consent or as required for security or legal compliance.
When you set a check-in to Public visibility, that check-in may be displayed on our public Explore page at duovoco.com/explore, visible to all visitors including non-registered users. You may change visibility to Private at any time through Settings → Privacy in the app.
| Purpose | Legal Basis (GDPR) |
|---|---|
| Creating and managing your account | Contract performance |
| Providing the Service (goals, check-ins, buddy features, AI Buddy) | Contract performance |
| Authenticating via Google/Apple Sign-In | Contract performance |
| Sending transactional emails (account, billing) | Contract performance |
| Processing payments | Contract performance |
| Improving the Service through analytics | Legitimate interest |
| Safety, fraud prevention, and compliance | Legitimate interest / Legal obligation |
| Marketing communications (with your consent) | Consent |
We do not sell your personal data for money. We use advertising and measurement partners (see Section 5) to run and measure our marketing campaigns. Under certain U.S. state privacy laws (for example, California's CPRA), the use of these partners may be considered "sharing" or a "sale" of personal information for cross-context behavioral advertising. You can opt out at any time by declining advertising cookies in our cookie banner, by enabling your browser's Global Privacy Control (GPC) signal, or by emailing support@duovoco.com. Advertising cookies and pixels are set only with your consent.
Your data is stored in Supabase (PostgreSQL), hosted in the US East (N. Virginia) region. We implement encryption in transit (TLS 1.2+), encryption at rest (AES-256), row-level security policies, and access limited to authorized personnel. Media files are stored in Cloudflare R2 (ENAM region).
We share data only as necessary to operate the Service. All third-party processors are bound by data processing agreements.
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database and authentication | USA |
| Stripe | Web payment processing | USA |
| Apple StoreKit | iOS in-app purchase processing | USA |
| Google Play Billing | Android in-app purchase processing | USA |
| RevenueCat | Mobile in-app purchase management | USA |
| Anthropic | AI Buddy responses (Claude API) | USA |
| Cloudflare R2 | Media storage and CDN | USA (ENAM) |
| Vercel | Web hosting and deployment | USA |
| Firebase (Google) | Push notifications (FCM) and mobile analytics | USA |
| PostHog | Product analytics (consent-gated) | EU |
| Sentry | Error tracking | USA |
| Resend | Transactional email delivery | USA |
| Google Workspace | Operational email (support, DMCA) | USA |
| Google Analytics (GA4) | Web & marketing analytics (consent-gated) | USA |
| Google Ads | Advertising measurement & conversion tracking (consent-gated) | USA |
| Meta Platforms (Facebook / Instagram) | Advertising measurement & conversion tracking (consent-gated) | USA |
| Advertising measurement & conversion tracking (consent-gated) | USA | |
| TikTok | Advertising measurement & conversion tracking (consent-gated) | USA |
| Data type | Retention period |
|---|---|
| Account data | Until account deletion, then 30 days |
| Check-ins and goals | Until deleted by you, or account deletion |
| Payment records | 7 years (legal/tax requirement) |
| Analytics data | 24 months (aggregated) |
| Log data | 90 days |
| Push notification tokens | Until account deletion or token expiry |
You additionally have the right to object to processing, restrict processing, and lodge a complaint with your local data protection authority.
California residents have the right to know what personal information is collected, delete it, correct it, and opt out of its sale or sharing. We do not sell personal information for monetary consideration; however, as described in Section 3, our use of advertising partners may constitute "sharing" (or a "sale") for cross-context behavioral advertising under the CPRA. You can opt out at any time by declining advertising cookies in our cookie banner or by enabling Global Privacy Control (GPC).
To exercise any of these rights, email support@duovoco.com.
We use cookies and similar technologies. See our Cookie Policy for details. You can manage cookie preferences via the cookie banner when you first visit the site.
Duovoco is not directed to children under 13 (or under 16 in the EU/EEA). We do not knowingly collect personal data from children below the applicable minimum age. If we discover such data, we will suspend the account and delete all associated data within 30 days.
If you are a parent or guardian and believe your child has created an account, contact us immediately at support@duovoco.com.
Our AI Buddy feature is powered by Anthropic's Claude API. When you use AI Buddy, your messages are transmitted to Anthropic's servers in the USA solely to generate a response. We do not use AI Buddy conversations to train AI models. Conversations are not shared with other users or used for advertising.
The AI Buddy is not a licensed therapist, counselor, or medical professional. It is a motivational and productivity tool only.
To generate context-aware responses, AI Buddy requests include a system prompt containing: your chosen AI tone preference, your recent goal titles and progress summaries, and any message text you submit. Your email, real name, payment details, and other account metadata are never transmitted to Anthropic.
A small number of accounts on Duovoco are AI-generated seed accounts used to make the Explore page feel populated during early stages of the product. These accounts are clearly marked with an "AI" badge on every check-in they post. They do not send messages to you, cannot become your buddy, and cannot join your groups. You can filter them out by using Home feed (buddies only) instead of Explore.
Duovoco is operated in the United States. If you are located outside the USA, your data will be transferred to and processed in the USA. By using the Service, you consent to this transfer.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notification at least 30 days before the change takes effect.
Duovoco, Inc.
131 Continental Dr, Suite 305, Newark, DE 19713, USA
Email: support@duovoco.com
Delaware C Corporation | File No. 10546620