Privacy Policy

1. Who is responsible?

The controller responsible for processing your data in the Duopaw app and on this website is:

Muhammed Deniz Worthstraße 38 58579 Schalksmühle Germany Email: [email protected]

If you have any questions about data protection, just send us an email.

2. In short

• We only store what Duopaw needs to work.
• No ads, no tracking, no selling of your data.
• You can delete your account at any time in the app (Profil (Profile) → Konto löschen (Delete account)). Then everything is gone.

3. What data we store

• Account: email address and password (the password only in encrypted form, we cannot read it).
• Age: month and year of your birth and whether your parents agree (only if you are under 16) – to check the minimum age.
• Profile: player name, player code, status and – if you like – a profile picture.
• Game: your pets, levels, tasks, quiz answers, paws, shop purchases and how you have furnished your room.
• Chat: messages, reactions and photos you send each other.
• Friends: friendships, requests, blocks and reports.
• Notifications: a technical push address of your phone and your settings for it (which notifications, what time), as well as your phone’s time zone so that reminders arrive at the right time.
• Error reports: if the app crashes or an error occurs, a technical report (phone model, operating system, app version and the place in the code). Without names, email addresses, chat content or photos.

We do not use location data, contacts, or any analytics or advertising services.

4. Purposes and legal basis

• So that you can use Duopaw (account, game, chat, friends): Art. 6(1)(b) GDPR (contract).
• Notifications on your phone: only if you allow them – Art. 6(1)(a) GDPR (consent). You can turn them off at any time in your profile or in your phone settings.
• Safety (blocking, reporting, protection against abuse, age check): Art. 6(1)(f) GDPR (legitimate interest in a safe app).
• Error reports: Art. 6(1)(f) GDPR (legitimate interest in an app that runs reliably).
• Emails with codes (confirm email, new password): Art. 6(1)(b) GDPR (contract).

5. Who sees your data

• Your partner in the game sees everything that belongs to your shared pet (chat, photos, tasks, room).
• Your friends see your player name, your profile picture and your status.
• Other players can only find you via your player code.

To run the app, we use these service providers (processors):

• Supabase Inc. – database, sign-in and photo storage. Server location: Frankfurt am Main (EU).
• Expo (650 Industries Inc., USA) – forwards notifications to your phone. The push address and the text of the notification are transmitted.
• Resend (Resend Inc., USA) – sends emails with confirmation and password codes. Your email address and the code are transmitted. Server location: Ireland (EU).
• Sentry (Functional Software Inc., USA) – collects error reports when the app crashes. Server location: Frankfurt (EU).
• Cloudflare (Cloudflare Inc., USA) – forwards emails you send to [email protected] to our mailbox.
• Apple (Apple Push Notification Service) or Google (Firebase Cloud Messaging) – deliver the notification to your phone.

Where data is transferred to the USA in the process, this is based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

6. How long we store data

As long as you have your account. If you delete your account, we immediately delete all your data – including your shared pets with chat and photos (Duopaw always needs two). Your partner receives a short notification about this.

Technical backups of our service provider are automatically overwritten after 30 days at the latest.

Error reports are automatically deleted after 90 days at the latest.

7. Children and teenagers

Duopaw is for ages 13 and up. Anyone under 16 needs their parents’ consent. If we learn that someone is under 13, we delete the account.

8. Your rights

You have the right at any time to:

• access the data stored about you (Art. 15 GDPR)
• have incorrect data corrected (Art. 16 GDPR)
• have your data erased (Art. 17 GDPR) – directly in the app under Profil (Profile) → Konto löschen (Delete account)
• restrict the processing of your data (Art. 18 GDPR)
• receive your data in a portable format (Art. 20 GDPR)
• object to the processing (Art. 21 GDPR)
• withdraw your consent, e.g. for notifications (Art. 7(3) GDPR)

Just send us an email for this. You can also lodge a complaint with a data protection supervisory authority, for example in the German federal state where you live.

9. Security

All connections are encrypted. Our database defines exactly who may see what for every table – nobody can read other people’s chats or pets. Chat photos can only be accessed via time-limited links.

10. This website (duopaw.app)

This website is stored and delivered by Cloudflare (Cloudflare Inc., USA). When you visit it, Cloudflare processes technically necessary data such as your IP address, date and time and the page requested, in order to deliver the page and protect it against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, accessible website). For data transferred to the USA, the EU-US Data Privacy Framework or the EU Standard Contractual Clauses apply.

We do not set cookies, do not use analytics or advertising services and do not embed content from other sites. The fonts are hosted on our own server.

Links to Instagram, TikTok, Google Play, the App Store and TestFlight are normal links. Only when you click on them do you leave our site. The privacy rules of the respective provider then apply.

If you send us an email, we use your address and message only to reply to you (Art. 6(1)(b) or (f) GDPR). We delete the email when it is no longer needed.

11. Changes

As Duopaw evolves, we will update this policy. You can always find the current version in the app and at duopaw.app/en/privacy.