Informativa sulla privacy

In short

Duōdeka shows no ads, sells no data and uses no advertising trackers. We process what is needed to run the game between you and your partner. Usage statistics, which help us improve the app, are anonymous and never linked to your account; you can object at any time in Profile.

Who is responsible

Nathan Dolard Villard, sole trader publishing Duōdeka, 34 grande rue de Laborde, 21200 Montagny-lès-Beaune, France. Contact: privacy@duodeka.app.

Given its size, Duōdeka has not appointed a data protection officer: write directly to this address.

The data we process

• Your account: email address, password (stored hashed, unreadable by anyone) or Apple or Google sign-in identifier, sign-up date.
• Your profile: nickname, avatar (the hydra you build — we never ask for a photo) and language.
• Your duo: the link with your partner, invitations, and the first name you entered for your partner when inviting them.
• Your game: seasons (length, dates), habits (title, emoji, days, effort, reminder times), checked-off habits and their date, XP, streaks, jokers, medals and results.
• Your wishes: the title, description, link and estimated price you enter.
• Your notifications: your device’s notification token, system (iOS or Android), time zone, language, notification preferences, and the sending history so we never send the same one twice.
• Your purchases: Pro plan, purchase, renewal and expiry dates, purchase identifier sent by the store. We never receive your bank details.
• Referrals: the duo’s code, the code you entered, qualified people and months of Pro earned.
• Your feedback: your message, whether you agree to be contacted, the app version, system and language.
• Preparation measurement: a few steps reached (preparation started, section finished, ready…), stored in our own database to see where people get stuck.
• Usage statistics, unless you object: screens opened and time spent, actions taken (for example checking off a habit, forming a duo, opening the Pro page), language, device model, system and app version. They are tied to an anonymous identifier specific to your phone, renewed every 13 months and at each sign-out, which is never linked to your account: not your email, not your nickname, nothing you write in the app. Your IP address is neither kept nor used to locate you. They are only used to produce overall numbers.
• Security: technical logs of sign-ins and sensitive actions (for example leaving a duo).

We do not collect your location, contacts or photos. Habits and wishes are free text: avoid writing sensitive information in them (health, religion, opinions…).

On your device

The camera is only used to scan your partner’s invitation QR code: no image is saved or sent.

The app keeps on your device what it needs to work: your sign-in session, your theme, your accessibility settings, habits checked off while offline until the network is back, what your widgets display, and a technical identifier used to deliver app updates to you.

The app uses no cookies, no advertising trackers and not your phone’s advertising identifier. These strictly necessary items do not require your consent. For usage statistics, the app also keeps an anonymous identifier, renewed every 13 months. Because it is only used to measure, anonymously, how the app is used, it is exempt from consent under the CNIL rules. You can object at any time with the Profile › Usage statistics switch: nothing leaves your phone anymore.

The duodeka.app website

The website can be visited without an account. It sets no advertising or measurement cookies: only a language cookie may be set when you change language, to remember it.

• Audience measurement: we count visits with Umami, without cookies and without keeping your IP address. Statistics are aggregated and kept for 6 months at most, based on our legitimate interest in knowing which pages are useful. We respect your browser’s “Do Not Track” setting.
• Android beta: if you leave us your email, we store it with Brevo along with your language, after you confirm it with one click, based on your consent. We write to invite you to the beta, then once when Duōdeka comes out on Android, and delete the address at the latest 12 months after you signed up. To open the beta for you, we also add your address to Duōdeka’s tester list in the Google Play Console, which we clear when the beta ends. You can unsubscribe at any time, with the link in the email or by writing to us.
• Technical logs: the website’s host, Vercel, keeps connection logs (IP address, requested page, browser) for security, for the short period it sets.

Why, and on what basis

• Running the service (account, duo, seasons, widgets, Pro, referrals): performance of the contract, that is our terms and conditions.
• Sending you notifications and reminders: your consent, given when you allow notifications on your phone. You can withdraw it at any time in Profile › Notifications or in your phone settings.
• Protecting accounts and preventing fraud, including referral fraud: our legitimate interest in securing the service.
• Improving the app through your feedback and preparation measurement: our legitimate interest. You can object.
• Measuring how the app is used through anonymous statistics: our legitimate interest in understanding where people get stuck to improve the app. You can object at any time in Profile › Usage statistics; it changes nothing in your game.
• Keeping our accounts (purchase data): legal obligation.

No decision about you is made by automated means within the meaning of the GDPR, and no advertising profile is built.

What your partner sees

The game is played by two. Your partner sees your nickname, avatar, habits and what you checked off, your progress for the day, your XP, streaks and medals, your wishes and where you are in the preparation. Your partner also knows whether you are the one who activated Pro for the duo.

Your partner sees neither your email address nor the details of your purchases.

What you share yourself outside the app (an invitation code, a recap) is no longer under our control.

Our providers

Only the following receive data, for their own part:

• Supabase Pte. Ltd. (Singapore): database hosting, sign-in, avatar storage and server functions. Data is hosted in the European Union (Frankfurt, Europe).
• Brevo (Sendinblue SAS, France): sending our emails (verification code, password reset, messages about your account) — your email address and the content of the email; and, if you sign up, the website’s Android beta — your email address and language.
• Zoho Corporation B.V. (Netherlands), with Zoho Mail: our mailbox, for the emails you send us and our replies (support, exercising your rights) — your email address and the content of the messages. Data is hosted in the European Union.
• RevenueCat, Inc. (United States): subscription management — account identifier and purchase history.
• Expo (650 Industries, Inc., United States): notification delivery (device token and notification content) and delivery of app updates (at each check: IP address, a technical identifier of the installation, system and app version).
• PostHog, Inc. (United States): anonymous usage statistics, unless you object. Data is hosted in the European Union (Frankfurt).
• Vercel Inc. (United States): hosting of the duodeka.app website (connection logs) and of our administration console, which we use to handle support; it shows the publisher the data needed for a request (account, subscription, feedback).
• Umami Software, Inc. (United States), with Umami Cloud: audience measurement for the duodeka.app website, without cookies and without keeping IP addresses. Data is hosted in the European Union.
• Apple and Google: stores (payment, subscription, refunds), Sign in with Apple or Google if you choose it, notification delivery, the app rating prompt, and access to the Android beta on Google Play if you sign up for it (your email address). For these services, they act under their own privacy policies.

Our providers only use data on our instructions. We never sell or rent data. We may disclose data to an authority that lawfully orders us to.

Transfers outside the European Union

Some of our providers are established outside the European Union, even when your data is hosted in Europe: Supabase Pte. Ltd. in Singapore; RevenueCat, Expo, PostHog, Vercel and Umami in the United States.

Singapore is not covered by an adequacy decision of the European Commission: transfers to Supabase rely on the standard contractual clauses adopted by the Commission, included in its data processing agreement. Transfers to the United States rely on the Commission’s adequacy decision (EU–US Data Privacy Framework) where the provider participates in it, and otherwise on the same standard contractual clauses. Any other provider on this list established outside the European Union is covered in the same way.

How long

• Your account and game: as long as your account exists. After 3 years without any sign-in, we delete the account, after warning you by email one month before.
• Your notification tokens: as long as the device is linked to your account.
• The history of notifications sent, the preparation measurement and the record of your acceptance of our terms (document, version, date): as long as your account exists; they are erased with it.
• Your feedback: as long as your account exists; when you delete it, its text is erased and it is no longer linked to you.
• Your purchase data: as long as our accounting and tax obligations require, up to 10 years.
• Security logs: 12 months at most.
• Usage statistics: 25 months at most; your phone’s anonymous identifier: 13 months at most.
• Website visit statistics: 6 months at most.
• The Android beta: with Brevo, until the email announcing the release, 12 months at most; in the Google Play tester list, until the beta ends.
• Host backups: they are erased automatically after 7 days.

When you delete your account

From Profile › Account, deletion is immediate. We erase your email address, nickname, avatar, devices, settings, preparation and its measurement, your notification history and the record of your acceptance of our terms, and we replace the titles of your habits and wishes and the text of your feedback.

So that your partner’s season stays readable, the game figures you shared (checked-off habits, XP, result) are kept, with nothing that identifies you. A habit you proposed and your partner adopted has become theirs: it stays.

Deleting your account does not cancel your subscription: do that in your store.

Security

Exchanges with our servers are encrypted, data is encrypted at our host, and database access rules limit each person to their own data and their duo’s. Administrative access is restricted to the publisher.

No system is infallible. In the event of a data breach that poses a risk, we notify the CNIL (the French data protection authority) within 72 hours and, if the risk is high, we notify you too.

Minimum age

Duōdeka is for people aged 15 and over. If we learn that an account belongs to someone younger, we delete it.

Your rights

You can access your data, correct it, erase it, restrict its use, receive it in a readable format to take elsewhere, object to its use based on our legitimate interest, withdraw your consent, and give instructions on what happens to your data after your death.

You change your nickname and avatar in Profile, and delete your account in Profile › Account. For anything else, write to privacy@duodeka.app from your account’s address. We reply within one month, and may ask you to confirm your identity if in doubt.

Complaints

If you believe your rights are not respected, you can complain to the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr — or to the data protection authority of your country.

Changes

If this policy changes significantly, we tell you in the app. The date at the top of this page shows the version in force.