Privacy Policy

Welcome to DuoCents ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at duocents.com and our associated mobile applications (collectively, the "Service").

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

We collect information you provide directly to us when you create an account, including your name, email address, and profile information obtained via Google OAuth. We do not collect or store your bank credentials or passwords.

We also collect financial data you enter into the Service, such as transaction amounts, categories, account names, budget allocations, and savings goals. Additionally, if you enable email-based bank alert parsing, we process the content of forwarded bank notification emails to extract transaction details.

We automatically collect certain technical information, including your IP address, browser type, device identifiers, operating system, pages visited, and timestamps of your interactions with the Service.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process and display your financial transactions and budgets within your household organization
• Send you account-related notifications, security alerts, and support messages
• Improve, personalize, and expand our Service
• Generate AI-powered financial insights and advice based on your transaction history, spending patterns, and budget data to help you make informed financial decisions
• Analyze usage patterns to understand how our users interact with the Service
• Comply with legal obligations and enforce our Terms of Service

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

Your data is stored in Cloudflare's global infrastructure, including D1 (SQLite) databases and R2 object storage, protected by industry-standard encryption at rest and in transit (TLS 1.2+).

We implement technical and organizational security measures including JWT-based authentication with HttpOnly cookies, role-based access controls within household organizations, and regular security reviews. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us.

We use HttpOnly cookies to manage your authenticated session. These cookies are strictly necessary for the Service to function and cannot be disabled without logging out.

We may use anonymized analytics tools to understand aggregate usage patterns. These tools do not track you across third-party websites and do not use advertising cookies. We do not use fingerprinting or cross-site tracking technologies.

DuoCents uses artificial intelligence and machine learning technologies to analyze your financial data — including transaction history, spending patterns, category breakdowns, and budget allocations — to generate personalized financial insights and advice ("Financial Pulse").

When this feature is enabled, your financial data is processed by third-party AI service providers to generate these insights. We only share the minimum data necessary to produce the advice, and we do not permit these providers to use your data for training their models or for any purpose other than generating your requested insights.

AI-generated financial advice is for informational purposes only and should not be considered professional financial, investment, or tax advice. You should consult a qualified financial advisor before making significant financial decisions.

We use the following third-party services to operate DuoCents:

• Google OAuth — for account authentication. Your use is subject to Google's Privacy Policy.
• Cloudflare — for infrastructure, DNS, and CDN services. Subject to Cloudflare's Privacy Policy.
• AI Service Providers — for generating personalized financial insights. Your financial data is processed in accordance with our data processing agreements with these providers.

We are not responsible for the privacy practices of these third-party services and encourage you to review their respective privacy policies.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Portability: Request a machine-readable export of your data.
• Objection: Object to processing of your data in certain circumstances.

To exercise any of these rights, please contact us at the address below. We will respond within 30 days.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

DuoCents
Email: privacy@duocents.com
Website: duocents.com