Privacy Policy

1. Who we are

Duvilo is a Telegram Mini App where two people share a calendar, tasks, lists and daily questions. Data controller: [Operator name/company, address]. Contact: [support email] or the /paysupport command in the bot.

2. What data we process

Telegram account data: when you open the app, Telegram sends us your user ID (number), name, username, profile photo link and language. Your username is never shown to your partner; it is kept only for support and security.

Your device time zone: to calculate reminders and “today” correctly.

Content you add: calendar events, tasks, lists and items, daily question answers, your mood emoji and note, your wishes (title, price, link, note) and the ones you reserve from your partner’s wishes, your relationship start date. The owner of a wish cannot see that you reserved it. Also your votes and polls (your partner can’t see your choice until they vote too) and what you write on your “Good to know” card (such as sizes, favourites, allergies; entirely optional), your answers in question packs and your time capsule letters (shown to neither of you until the opening day), your chat messages, reactions and which topic (a list item, task, etc.) a message was written about. No “seen” or “last seen” information is kept; only the time you last read, for your own unread count.

Share cards: when you tap “Share to your story”, the card image (your names and day count) is kept at an unguessable public address for 2 days so Telegram can fetch it, then deleted.

Preferences: notification settings, language choice, the date and version of the terms you accepted.

Technical records: creation and last-seen time, daily aggregate usage counters (no content or identity), security and error logs.

We do not collect your phone number, location, contacts or Telegram chats. We do not use advertising or tracking tools.

3. Why we process it

To provide the service (performance of contract): syncing your data with your partner, sending reminders and notifications.

For security and abuse prevention (legitimate interest).

To improve the service using only aggregate, anonymous numbers (e.g. how many questions were answered per day) — we do not read your content.

4. Who sees your data

Only you and the partner you are connected with see the content you add. Your daily answer is not shown to your partner until they write their own.

Our service providers: Cloudflare (servers and storage; data is processed on Cloudflare infrastructure, possibly outside your country) and Telegram (bot messages). They process data only to provide the service.

Our authorized administrators may access account data when needed for support and security; every admin action is logged.

We do not sell your data or share it for advertising. It may be disclosed to authorities where required by law.

5. How long we keep it

As long as your account exists. If you disconnect, what you added moves with you to your new space and is removed from the shared space; what your partner added stays with them.

“Delete my account” immediately deletes your profile and the content you added. Anonymous aggregate counters, payment records we must legally keep (Telegram id, plan, amount, date) and your trial start date (to prevent abuse) are not deleted; if you come back with the same Telegram account, Premium you bought is kept.

6. Your rights

Under the GDPR and similar laws (including Turkey’s KVKK) you may access, copy, correct and delete your data and object to its processing.

In the app: Us → Privacy & data → “Download my data” (sent to the bot chat as a file) and “Delete my account”.

For other requests, contact us. You may also complain to your local data protection authority.

7. Age limit

Duvilo is for people aged 18 and over. We delete accounts we learn belong to someone under 18.

8. Security

Connections are encrypted (HTTPS/TLS) and access is limited by Telegram authentication. Content is not end-to-end encrypted on the server; it is protected by technical and organizational measures.

9. Changes

We may update this policy. For significant changes we will ask for your consent again in the app.