Privacy policy
Effective October 10, 2026. This is a translation; if there is any conflict, the Portuguese version prevails.
In short
- DuouD is free, has no ads and does not sell your data.
- We use the name, email and photo of your Google account to create your account and show your partner who you are.
- We store your challenges, marked days, friends and invites so the app works.
- We use tools from Google (Firebase) and Microsoft (Clarity) to run the app, measure usage and fix errors.
- You can delete your account at any time in the app, and your data is erased.
1. Who is responsible
DuouD (the Android app, the website duoud.jods.dev and related services) is developed and maintained by Rodrigo Gonçalves, an individual based in Brazil, who is the controller of the personal data processed in DuouD under the Brazilian General Data Protection Law (Law 13,709/2018, the LGPD). Rodrigo also acts as the data protection officer. For any privacy matter, write to contact@jods.dev.
2. What data we collect
From your Google account
You sign in to DuouD with Google. We receive your name, email, profile photo and an account identifier. We never see your password.
What you create in the app
- Challenges: title, goal or agreed prize, frequency, duration, start date and who the challenge is with.
- Marked days: whether you completed each day, with its date, and your streak.
- Friends and invites: the people you invite or accept, including the email you type to invite someone, and the invite links you create.
- Preferences: notification times and types, home screen layout, theme and language.
Device and usage data
- Device and app identifiers: Firebase installation ID, app instance ID, push notification token and the result of the app integrity check (App Check).
- Technical information: device model and manufacturer, Android version, app version, language, time zone and approximate region (country and city) inferred from the IP address. We do not collect your precise (GPS) location.
- App usage: screens opened and actions such as creating a challenge and marking a day, for usage statistics.
- Session recordings: Microsoft Clarity records how the app is used (taps, scrolls and screens, like a video of the interface) so we can find usability problems. The Profile and Friends screens are masked and do not appear in recordings.
- Crashes and performance: error and crash logs (Crashlytics), with the screen where it happened and the app theme and language, and how long the app takes to open, mark the day and open a challenge (Performance Monitoring), with the device model and connection type, without identifying you.
- Install source: where you downloaded the app from (for example, an Instagram link), as reported by Google Play.
DuouD does not use the Android advertising ID to show ads and does not ask for access to contacts, camera, microphone or location.
iPhone waitlist (website)
If you join the waitlist on the website, we store your email, the date, the version of the notice you accepted and how you found us. Your IP address is used only to limit abuse and is never stored in plain text: we keep only a hashed version, deleted within 2 days.
3. Why we use it
| Purpose | Data | Legal basis (LGPD, art. 7) |
|---|---|---|
| Create and keep your account; run challenges, scoreboards and invites | Google account data, data you create, identifiers | Performance of a contract (the Terms of use) |
| Send reminders and partner updates | Notification token, preferences | Performance of a contract; you can turn notifications off in the app or in Android |
| Understand usage and improve the app | App usage, technical information, session recordings | Legitimate interest |
| Find and fix errors | Crash logs, technical information | Legitimate interest |
| Protect the service against fraud and abuse | Integrity check (App Check), per-account and per-IP limits | Legitimate interest |
| Notify you about the iPhone launch | Waitlist email | Consent |
| Comply with legal obligations and authorities | Only the data needed in each case | Legal obligation |
We do not sell, rent or use your data for advertising. We do not make automated decisions with legal effects on you.
4. What other people see
- Your partner sees your name, photo, the days you marked and the scoreboard of the challenges you do together.
- People you invite or who invite you see your name, photo and email in the friend invite.
- Invite links: anyone who opens a link you shared, even without the app, sees on the invite page your first name, your photo and the challenge title, prize, frequency and start date. The page is hidden from search engines and stops showing this data once the invite expires, is accepted or is cancelled.
5. Third-party tools
We use these services as processors, handling data on our behalf and under our instructions:
- Google Firebase (Google LLC): sign-in (Authentication), database (Firestore), server functions (Cloud Functions), notifications (Cloud Messaging), Remote Config, integrity checks (App Check with Play Integrity), statistics (Google Analytics for Firebase), crash reporting (Crashlytics), performance measurement (Performance Monitoring) and website hosting (Hosting). More at firebase.google.com/support/privacy.
- Microsoft Clarity (Microsoft Corporation): session recordings and usage heatmaps, with your account identifier to group sessions. More at privacy.microsoft.com.
- Google Play: app distribution, install source and in-app reviews.
6. Where data is stored
Your account and app data (challenges, marked days, friends and invites) are stored in Firestore, on Google servers in São Paulo, Brazil. Statistics, crash reporting and session recording tools may process data outside Brazil, mainly in the United States. These international transfers follow article 33 of the LGPD, with the contractual safeguards offered by Google and Microsoft.
7. How long we keep it
| Data | Kept for |
|---|---|
| Account, challenges, marked days, friends and preferences | While the account exists |
| In-app notifications | 90 days |
| Pending friend invites | Cancelled after 30 days without an answer |
| Invite links | Until they expire, are accepted or are cancelled |
| Database backups | 30 days |
| Server logs | 30 days |
| Usage statistics (Google Analytics) | Up to 14 months |
| Crash logs (Crashlytics) | 90 days |
| Session recordings (Clarity) | 30 days; aggregated summaries for up to 13 months |
| iPhone waitlist | Until the launch notice or until you ask to leave |
8. Deleting your account
You can delete your account at any time in the app, under Profile › Settings › Delete account. Step-by-step instructions are at duoud.jods.dev/en/delete-account, which also explains how to ask by email if you no longer have the app.
When you delete it, we erase your profile, marked days, friendships, invites, notifications and sign-in. Challenges you were doing with someone else are ended and stay in their history without your name and photo. Backups are erased within 30 days.
9. Your rights
Under the LGPD (article 18), you can ask at any time for:
- confirmation that we process your data and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary data or data processed unlawfully;
- data portability;
- deletion of data processed with your consent and withdrawal of that consent;
- information about who we share data with;
- objection to processing based on legitimate interest.
To exercise any right, email contact@jods.dev from your account email. We reply within 15 days. You may also file a complaint with the Brazilian Data Protection Authority (ANPD) or your local authority.
10. Security
All communication between the app, the website and our servers is encrypted (HTTPS/TLS). Database access rules let each person read only what concerns them, and sensitive operations go through server functions that check who is asking. No system is completely immune to failures; if a security incident may put you at risk, we will notify you and the ANPD as required by law.
11. Minimum age
DuouD is for people aged 13 or older. People aged 13 to 17 should use the app with the knowledge of a parent or guardian. If we learn that an account belongs to someone under 13, it will be deleted. Parents and guardians can request deletion through the contact email.
12. Changes to this policy
We may update this policy when the app changes or the law requires it. The effective date is shown at the top of the page. If a change is significant, we will let you know in the app, for example with a notification, before it takes effect.
13. Contact
Privacy questions, requests and complaints: contact@jods.dev.