Privacy policy · Version 0.1

Privacy

Duel handles money and behavioural data. Both deserve restraint. This policy explains what we collect, what we do with it, and how long we keep it.

What we collect

• Account — your name, email, profile photo from Google sign-in.
• Payment — card details handled directly by Stripe; Duel stores only a Stripe customer ID and last-four digits for display.
• Health data — sleep and step totals from Apple Health or Google Health Connect via Terra. We store daily totals only, not raw second-by-second data.
• Contract activity — every point, pass, miss, and transfer, with timestamps.

What we never do

• Sell your data to third parties.
• Use your data to train advertising models.
• Share contract activity with anyone other than the other party to that contract (in duel mode).

Retention

Account data is kept while your account is active. On account deletion we delete or anonymise personal data within 30 days, subject to our obligation to retain financial records of settled contracts for seven years under New Zealand tax and AML requirements.

Your rights

You can export all your data, correct it, or request deletion at any time from Settings → Data. Questions about this policy? Contact us.