Privacy policy

About this policy

Duado keeps track of your hotel stays, lets you and your friends see where you're each staying next, and manages your hotel loyalty status. This policy explains what we collect, how we use it, who can see it, and how to delete it. Duado is currently in closed beta.

What we collect

• Account: the email address, account identifier and name provided by Apple or Google when you sign in
• Profile: display name, photo (optional), home city (optional, visible only to you), app language and friend code
• Stays: hotel, check-in and check-out dates, stay type, the loyalty account it counts toward, and any hotels and cities you add yourself
• Stay card: confirmation number, rate and currency, room number, Wi‑Fi, breakfast hours, late checkout time and whether you got your folio
• Loyalty: member numbers, status, points, qualifying numbers, bonus nights, and expiration dates for status, points and certificates
• Invoice details: company name and tax ID
• Friends: friendships, sharing levels, hidden settings, nicknames you give friends, invite messages, and room numbers you share with friends
• Notifications: push token, device platform, app language and time zone, your notification settings, and a record of notifications sent
• Benefit survey: whether you received an upgrade, breakfast, late checkout or a welcome gift

We don't access your location, contacts or photos, and the app has no ads or tracking analytics.

How we use your data

• To show your stays, stay cards, loyalty progress and passport stats
• To show friends where you're staying next, based on the sharing level you choose, and to let you know when your trips overlap
• To send benefit, folio, posting, expiration and survey reminders at the hotel's local time
• Benefit survey answers are used only for anonymous statistics and aren't shown during the beta

We don't sell your data or use it for advertising.

What friends can see

Only friends you've accepted can see your stays (stays you booked for someone else are never shared), and only at the sharing level you set for each friend:

• City: which city, without dates or hotel
• City and dates: which city on which dates, without hotel
• Hotel and dates: hotel name and dates

Friends can also see your display name, photo, loyalty status with each chain (not points or member numbers), and this year's nights, stays and cities. You can change sharing levels, hide your stays from a friend for a while, or remove a friend at any time. Nicknames you give friends are visible only to you. People who aren't signed in can't see any of your data.

Never shared

The following are visible only to you and never appear on screens other people can see, in notifications or in system logs:

• Confirmation numbers
• Rates
• Invoice details (company name, tax ID)
• Home city
• Member numbers
• Points
• Wi‑Fi

Your room number is also private. The only exception is when you choose to share it with a friend staying at the same hotel on the same night; they can see it only on the overlapping nights, and it's withdrawn automatically after checkout.

Where your data is stored

Your data is stored in a cloud database provided by Supabase, hosted in Tokyo, Japan (Amazon Web Services region ap-northeast-1), and encrypted in transit. Access rules in the database let each person read only their own data; friends see your stays only through queries filtered by your sharing level.

Notifications

If you allow notifications, the app stores this device's push token in our database, and notifications are delivered through Expo's push service and then Apple or Google. Notifications contain only what's needed, such as a friend's display name, a hotel name and dates. They never include private fields like confirmation numbers, rates, room numbers, Wi‑Fi, member numbers or points, nor nicknames or invite messages. You can turn off each type of notification in Settings → Notifications, and this device's token is deleted when you sign out.

Third-party services

• Apple, Google: sign-in
• Supabase: database, authentication and backend
• Expo: notification delivery

These services receive only the data needed to provide their function. We don't sell or share your data with anyone else.

Deleting your account

You can delete your account at any time in Settings → Delete account. Your profile and home city, stays and stay cards, loyalty accounts, invoice details, friendships and nicknames, shared room numbers, push tokens, photo, and any hotels and cities you added are deleted immediately and can't be recovered. Benefit survey answers are stripped of your account and stays; only the hotel, chain, status and answers are kept as anonymous statistics. If you signed in with Apple, Duado's access to your Apple ID is revoked as well. If you can't use the app, you can also email us at the address below to request deletion.

Changes to this policy

If we make significant changes to this policy, we'll let you know in the app and update the date above.

Contact us

For any privacy questions, or to access, correct or delete your data, email duadoapp@gmail.com.