Privacy Policy
Effective 21 September 2026. Working draft; counsel review before the beta opens beyond the founding accounts.
Duo is a product built around memory, so we are direct about what we keep. This policy explains what we collect, why, who else processes it, how long we keep it, and the control you have. It covers playwithduo.com and the Duo apps.
The short version: we collect what the service needs to work. We do not sell your data, share it for advertising, or run trackers. We do not train models on your conversations. Your conversations and memories are yours: visible to you, editable by you, and deletable by you.
1. Who we are
Duo is operated from the United States. Questions and requests go to hello@playwithduo.com. Duo is for adults 18 and over.
2. What we collect
Account. Your email address and a password, which our authentication provider stores only as a hash. We never see your password in readable form. Your date of birth, used once to confirm you are an adult. The time you accepted the terms.
Profile, optional. A display name, a short description of yourself, interest tags, and what you came to Duo for. You choose whether to provide these. Characters you talk to are shown them so they can be a better companion to you.
Characters you create. The character's name, persona, greeting, example dialogues, tags, portrait, and whether it is private, unlisted, or public.
Conversations. Every message you send and every reply, with timestamps and whether it was typed, spoken, or part of a game. Rolling summaries of long conversations. Your membership in group chats.
Memories. Short notes a character extracts from your conversations, each marked as a thing to know, a thing you did together, or a preference. Relationship statistics such as when you first met and how long you have played together. All of it is listed in the app, where you can pin, forget, or delete any entry.
Voice. When you call a character, your microphone audio is sent for transcription and the transcript is treated like any other message. The character's replies are synthesized to speech. We do not keep the raw audio after the turn is handled.
Images. Photos you attach in chat, portraits you upload or generate, and, on paid calls where you share your screen, one downscaled frame per turn that is used for that turn only.
Usage and billing. Seconds of voice and co-op play, message counts, your plan, and the provider costs of your turns, so allowances can be measured and billing can be checked. Payment card details go directly to Stripe; we never see them.
Technical. Ordinary server and security logs such as IP address, browser type, and request times, kept for reliability and abuse prevention.
We do not ask for, and do not want, health, biometric, precise location, or government-identifier data. Please do not put it into Duo.
3. Why we use it
- To run the service and let characters remember you.
- To authenticate you and keep your account secure.
- To measure plan allowances and take payment.
- To keep Duo safe: detecting abuse, enforcing the terms, and meeting legal obligations.
- To fix problems and improve reliability.
Where the GDPR or similar law applies, our legal bases are performance of our contract with you, legitimate interests in security and reliability, consent for optional things such as email about the beta, and legal obligation.
4. We do not train models on your conversations
Your conversations are not used to train AI models. Not ours, and not our providers'. Messages are sent to model providers only to generate the reply you asked for, and we configure those providers not to retain or train on them where they offer that control.
5. Who else processes your data
We use a small number of processors, each doing one job:
- Supabase (and its infrastructure provider, Amazon Web Services, in the United States): authentication, the database, file storage, and the functions that run each turn.
- Deepgram: turns your speech into text and a character's reply into speech. Requests are sent with training opt-out.
- OpenRouter, which routes to the model providers it lists: writes character replies, extracts memories, describes images you share, and generates portraits. We keep prompt logging off.
- Groq: a backup model provider for the same purposes.
- Stripe: payments and subscription management. Stripe's own privacy policy governs card data.
- Render: hosts this website and the web app.
These providers are largely based in the United States, so your data is processed there. Where the law requires a transfer mechanism, we rely on Standard Contractual Clauses or an equivalent safeguard.
We do not sell your personal information and never have. We do not share it for cross-context behavioral advertising. We honor Global Privacy Control signals.
6. How long we keep it
- Account and profile: while your account exists.
- Conversations and summaries: until you delete the conversation, the character, or your account.
- Memories: until you forget or delete them. A forgotten or superseded memory stops affecting conversations immediately and is permanently deleted by a routine job within 90 days.
- Voice audio: not kept after the turn is transcribed. Screen-share frames are used for one turn and not kept.
- Images and portraits: until you replace or delete them, or delete your account.
- Usage and billing records: as long as tax, accounting, and dispute-handling law requires, then aggregated.
- Consent records (age, terms, subscription): at least three years.
- Security logs: a short rolling window.
Deleting your account removes your characters, conversations, memories, images, and profile. We keep only what the law requires us to keep, or what is needed for a live safety or billing dispute.
7. Your rights and controls
Built into the product: read and edit every memory a character holds about you; delete a conversation, a character, or your whole account from Settings; export your data on request.
Depending on where you live, you may also have the right to access, correct, delete, or restrict use of your personal data, to opt out of sale or sharing (we do neither), to object to certain processing, and to withdraw consent. Write to hello@playwithduo.com. We verify requests through the email on the account and respond within the time the law allows. We will not discriminate against you for exercising your rights.
If you are in the EEA or UK you may also complain to your local data protection authority. If you are in California or another US state with a privacy law, the rights above apply, and you may appeal a decision we make about your request by replying to it.
8. Children
Duo is for adults 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has an account, contact us and we will delete it.
9. Cookies and local storage
We use browser storage to keep you signed in and to remember preferences such as your theme. We do not use advertising cookies or third-party tracking pixels, and this site sets no cookies of its own. There is no cookie banner because there is nothing to opt out of.
10. Security
Data is encrypted in transit and at rest. Access to your rows is enforced at the database level, so one account cannot read another's conversations, characters, or memories. Provider keys never reach your browser. No system is perfectly secure; if a breach affects you we will notify you and any regulator the law requires.
11. Changes
We will update this policy as Duo grows. If a change is material we will give notice by email or in the product before it takes effect, and the date at the top always tells you the current version.
12. Contact
Privacy questions or requests: hello@playwithduo.com.