Privacy, in plain English.

What we collect

• Bank & transaction data — via Plaid: balances, transactions, and account details for the accounts you connect.
• Enriched details — merchant names and categories, cleaned up by our enrichment partner (triq.ai).
• What you add — partners, splits, budgets, trips, notes, and categorization rules.
• Account & usage — your email, device, and how you use the app, so it works and stays secure.

How we use it

To run the app: show your shared balance, attribute deposits, track your split, plan trips, and keep things secure. We also use it to generate your recaps and AI insights. That’s it — we don’t build advertising profiles and we don’t sell anything.

AI & your data

Duo AI sends the figures it needs to a large-language-model provider to write your summaries and insights. We hold that to clear rules:

• Processed for you, under contract. Providers process your data only to return your result — bound by agreements that forbid using it for their own purposes.
• Not used to train public models. Your financial data isn’t used to train third-party foundation models.
• Minimized. We send the smallest slice of figures needed, not your raw bank feed.

Who sees what

Duo is a shared app, so both partners see the shared account — its balance, transactions, budgets, and trips. Attribution of a deposit (whose paycheck it was) is visible to both of you, because the split depends on it.

Who we share with

• Plaid — to securely connect your bank.
• Service providers — enrichment (triq.ai), our AI provider, hosting, and payment partners, each under contract.
• Nobody buying it. We never sell your personal or financial data, full stop.
• Legal — only if required by law, and only what’s required.

Agents & the APIBeta

If you connect Duo’s headless API or an AI agent, you decide what it can see. Access is scoped, every token is listed, and you can revoke it instantly. When an agent reads your data, the same AI rules above apply.

Your controls

• Export — download your data in a portable format any time.
• Delete — ask us to erase your data; we honor it.
• Disconnect — unplug a bank or an agent without deleting your account.
• Reach a human — for any privacy request, email privacy@duofinance.ai.

Security & retention

Access is protected with passkeys/biometrics and 2FA, and data is encrypted in transit and at rest. We keep your data while your account is active and for a short, lawful window after you leave — then we delete it.