Duet Privacy Policy

Duet (“we”, “our”, or “the app”) is an always-on voice communication app that lets you stay connected with the people who matter most. This Privacy Policy explains what information we collect, how we use it, and your choices.

1. Information We Collect

Account Information

When you create an account, we collect:

• Display name you choose or from your Google account
• Email address if you sign in with email or Google
• Profile photo if you choose to upload one
• Authentication method (Google, email, or guest)

You can also use Duet as a guest without providing any personal information.

Voice and Audio Data

Duet requires microphone access to enable real-time voice communication. Your audio is transmitted directly between devices using peer-to-peer (WebRTC) technology. We do not record, store, or have access to the content of your voice conversations. Audio data never passes through our servers.

Camera and Photos

Duet requests camera and photo library access only to let you set a profile picture. Photos are not accessed for any other purpose. Your profile picture is stored securely in Firebase Storage and is visible to your friends and room partners.

Connection and Room Data

When you create or join a room, we temporarily store:

• Room codes and membership information
• Technical connection data (WebRTC signaling) needed to establish the peer-to-peer link

This data is automatically deleted when the room is closed or after 24 hours of inactivity.

Social Features

If you use our friends and connections features, we store:

• Your friends list and pending friend requests
• Your recent connections (last 20 partners you connected with)
• Your online/offline presence status

Device Information

We collect limited device information for app functionality:

• Push notification token to send you notifications when your partner joins, when you receive a friend request, or when you're invited to a room
• Platform (iOS, Android, or Web) for delivering notifications

Crash Reports

We use Firebase Crashlytics to collect crash reports and error logs. These include technical information about the error but do not contain personal data or audio content. Crash reporting helps us identify and fix bugs to improve app stability.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the voice communication service
• Enable you to create and join rooms with other users
• Display your profile to friends and room partners
• Send push notifications about room activity, friend requests, and invitations
• Diagnose and fix technical issues via crash reports
• Display advertisements to support the free service

3. Advertising

Duet uses Google AdMob to display advertisements, including banner ads and interstitial ads. Google AdMob may collect and use data in accordance with Google's Privacy Policy. This may include device identifiers and ad interaction data to serve relevant ads. We do not share your personal information (name, email, or profile data) with advertisers.

4. Data Sharing

We do not sell your personal information. We share data only in the following limited ways:

• With other Duet users: Your display name, profile photo, and online status are visible to your friends and room partners.
• Firebase (Google): We use Firebase for authentication, database, storage, messaging, and crash reporting. Data is processed in accordance with Firebase's privacy practices.
• Google AdMob: Ad-related data is processed by Google as described in Section 3.
• WebRTC STUN/TURN servers: Technical connection data (IP addresses, network information) is used by STUN and TURN servers to establish peer-to-peer connections. This data is not stored.

5. Data Retention

• Room data: Automatically deleted after 24 hours of inactivity or when the room is closed.
• Account data: Retained as long as your account exists.
• Friend and connection data: Retained until you remove the friendship or delete your account.
• Crash reports: Retained by Firebase Crashlytics per Google's retention policy (typically 90 days).
• Push tokens: Removed when you sign out or delete your account.

6. Data Security

We use industry-standard security measures to protect your data:

• All data in transit is encrypted using TLS/HTTPS
• Voice audio is transmitted peer-to-peer with DTLS-SRTP encryption (WebRTC standard)
• Firebase Authentication handles credential security
• Profile images are stored in Firebase Storage with access controls

7. Your Choices and Rights

• Account deletion: You can request deletion of your account and associated data by contacting us.
• Profile management: You can update your display name and profile photo at any time in the app.
• Permissions: You can revoke camera, microphone, or notification permissions through your device or browser settings. Note that microphone access is required for the core voice communication feature.
• Guest mode: You can use Duet without creating an account by continuing as a guest.
• Friends: You can remove friends and decline friend requests at any time.

8. Children's Privacy

Duet is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by updating the effective date at the top of this page. Your continued use of Duet after changes are posted constitutes your acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

Email: hello@getduet.app

To request account deletion, visit our account deletion page.