how we keep your data cozy

Last updated: November 26, 2025

1. what we collect

doodleduo uses Apple Sign-In to create your account. We collect only your email address and display name. All doodles, activities, and messages are stored securely and visible only to you and your partner inside your duo room.

Information we collect:

Email address (via Apple Sign-In)
Display name and optional profile photo
Doodles, drawings, voice messages, and text notes you create
Activity metadata (timestamps, love points, streak data)
Push notification tokens (to send alerts when your partner shares something)
Anniversary date (if you choose to set one)

2. how we use your info

Your data powers the shared experience: syncing doodles, tracking streaks, sending push notifications when your partner sends something cozy. We never sell or share your data with advertisers or third parties.

We use your information to:

Create and maintain your duo room with your partner
Sync activities in real-time between both partners
Send push notifications for new doodles, messages, and interactions
Calculate relationship stats (days together, love points, streaks)
Process subscription payments via Apple's In-App Purchase system
Provide customer support when you contact us

3. data security

We use industry-standard encryption and secure storage (Supabase) to protect your account and content. Only authenticated users can access their own duo room.

Security measures include:

Encryption in transit (HTTPS/TLS) for all data transfers
Row-level security policies ensuring only duo members can access their room
Secure authentication via Apple Sign-In (no passwords stored)
Regular security updates and monitoring

4. data retention

We keep your data as long as your account is active. When you delete your duo room or account, all associated content (doodles, messages, activities) is permanently deleted from our servers within 30 days.

Subscription records are retained as required by Apple and tax regulations, but these contain only transaction metadata (no personal content).

5. your rights (GDPR/CCPA)

You have the right to access, correct, or delete your personal data at any time. You can also request a copy of your data or restrict how we use it.

Your rights include:

Access: Request a copy of all data we store about you
Correction: Update your display name or profile photo in-app
Deletion: Delete your duo room or account via app settings
Portability: Export your doodles and messages (contact support)
Opt-out: Disable push notifications in iOS Settings

To exercise these rights, email us at anthonyverruijtx@hotmail.com.

6. third-party services

doodleduo uses the following third-party services to provide functionality:

Apple Sign-In: Authentication (governed by Apple's privacy policy)
Supabase: Database and storage (SOC 2 Type II compliant, GDPR-ready)
Apple Push Notification Service (APNs): Push notifications
Apple In-App Purchase: Subscription billing

These services have their own privacy policies and are chosen for their strong security practices. We do not share your data with any other third parties.

7. children's privacy

doodleduo is designed for adults aged 18 and older. We do not knowingly collect information from children under 18. If we discover that a child has provided us with personal information, we will delete it immediately.

8. cookies & tracking

The doodleduo iOS app does not use cookies or third-party tracking. Our website (https://doodleduoapp.com) uses minimal analytics to understand visitor traffic, but does not track individual users or use advertising cookies.

9. international transfers

Your data is stored on Supabase servers, which may be located outside your country of residence. By using doodleduo, you consent to the transfer of your data to these servers. Supabase complies with GDPR and uses standard contractual clauses for international data transfers.

10. changes to this policy

We may update this privacy policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. Significant changes will be announced in-app or via email. Your continued use of doodleduo after changes means you accept the updated policy.

11. contact us

Questions or concerns about your privacy? Want to exercise your data rights? Reach out at anthonyverruijtx@hotmail.com or visit https://doodleduoapp.com.