Your progress belongs to you.
Effective September 25, 2026 · updated October 24, 2026 for DuoShare 2.0
About this policy
This policy explains how DuoShare (“we” or “us”) collects, uses, shares, and protects information when you use the app.
Challenges
When you start or join a challenge (7, 30, or 66 days, with one friend or a group of up to ten) we store the habit or pillars you chose, your commitments (for example a sleep or focus target), your start date and timezone, and each day’s check-in status. The other members of that challenge can see your first name, your plan, and whether each planned habit was completed, skipped, or not yet done. They cannot see your journal, your Apple Health data, or other account details. If you leave, or block someone, sharing with them stops.
Sharing progress with friends
Nothing is posted automatically. When you choose Share, we store the update you wrote, any photos or one short video you attached, and who you chose to share it with: all your friends, specific friends, or the members of one challenge. Only those people can see it, its reactions, and its replies; there is no public feed, and updates are not searchable. Photos and videos are kept in private storage and shown through short-lived signed links. Your journal is never offered for sharing. You can edit or delete your updates and replies at any time; deleting an update removes its photos or video, reactions, and replies. If you remove a friend or block someone, they immediately lose access to what you shared.
Your journal
Reflections you write are stored in your account so you can read and edit them. They are private: only you can read, change, or delete them, enforced by our database access rules. Challenge members see only that you reflected that day. Journal text is never included in notifications, analytics, widgets, invitations, shared updates, or share cards. Entries are protected by encrypted network transport and our storage provider’s security; they are not end-to-end encrypted. You can delete any entry, or your whole account, at any time.
Focus sessions
If you use the focus timer we store the planned length, how long the session ran, and whether it finished, so a completed session can count toward your Focus pillar.
Information you provide
We collect account information such as your phone number or email address (whichever you sign in with), name, username, profile photo, and bio; goals, schedules, reminders, completions, captions, encouragements, and memberships; updates, replies, and reactions you share; and photos or videos you intentionally upload. If you make a purchase, Apple and RevenueCat provide purchase status and transaction identifiers. We do not receive your full payment card number.
Phone number
You can sign in with your phone number, confirmed with a one-time code that a text-message provider delivers. You can also sign in with Apple, Google, or email instead. A confirmed number is used to sign you in, to secure your account, and, unless you turn off “Let people find me”, so friends who already have it in their contacts can find you. It is never shown to other people.
Points, leaderboard, and nudges
You earn points for checking off goals. Your friends can see your weekly points, streak style, and badge on the friends leaderboard; people who are not your friends cannot. Points can be spent on cosmetic items and on preset nudge messages. A nudge is sent only to a friend you pick, as a notification with one of the preset messages; you cannot write free text in a nudge. Nudges are rate-limited, and people you have blocked cannot nudge you.
Information collected automatically
We may collect device and app information needed for authentication, security, crash diagnosis, notification delivery, and basic product analytics, including device type, operating system, app version, push token, IP address, and timestamps. Product analytics record events such as “shared an update” with simple counts or categories, never the text you write, names, contact details, or media. We do not use third-party advertising trackers.
Finding friends from contacts
Contact access is only requested when you tap Find friends from contacts. DuoShare then reads email addresses and phone numbers from your device contacts and sends them over an encrypted connection to be compared, once, with existing DuoShare accounts. This is a server-side comparison, not an anonymous one: our servers see the values during the lookup but do not store them. We do not upload contact names, keep your address book, invite anyone automatically, or use contacts for advertising. Matches only use phone numbers confirmed by one-time code and email addresses confirmed by Apple or Google sign-in. People who turn off “Let people find me”, people under 18, and anyone you have blocked are never matched. Lookups are rate-limited. Contact access can be revoked in iPhone Settings.
Apple Health
If you explicitly connect Apple Health, DuoShare can read the activity types you approve, such as workouts, exercise minutes, and steps. The current connection keeps detailed Health data on your iPhone and does not upload it to DuoShare servers. DuoShare does not write to Apple Health. You can change access in Apple Health or iPhone Settings.
How we use information
We use information to operate your account; show shared updates, goals, and proof only to the people you chose; calculate streaks, points, and progress; deliver requested reminders, friend, and challenge alerts; process purchases; prevent abuse; provide support; and improve reliability.
Who can see your content
Challenge progress is shared only with the members of that challenge. Updates you share are visible only to the audience you choose. Journal entries are private to you. Photos, shared goals, and check-ins from shared goals are private to the people on that goal, and personal goals remain private to you. Your profile shows friends only what you have shared with them. There is no public feed, and we do not sell personal information.
Safety
You can report an update, a reply, or a person, and block anyone. Reports are reviewed, and content that breaks our rules is removed. Blocking hides you from each other everywhere in DuoShare, ends the friendship, and stops invitations and notifications between you. The blocked person is not told. Automated limits slow down unusual activity such as mass friend requests.
Service providers
We use service providers that process information for us, including Supabase for authentication, database, and private file storage; a text-message provider if you verify a phone number; Expo for app delivery and notifications; RevenueCat and Apple for subscriptions; and Apple or Google when you choose their sign-in service. Their handling of information is governed by their own policies and our service agreements.
Retention and deletion
We retain information while your account is active and as needed to provide the service, resolve disputes, prevent fraud, and meet legal obligations. You can permanently delete your account from Profile → Delete account; this removes your updates, replies, reactions, photos, and videos too. Active data is deleted or de-identified; limited encrypted backups may remain temporarily until routine expiration.
Security
We use access controls, private storage, encrypted network transport, row-level database rules, and limited administrative access. No online service can guarantee absolute security. Never share your password or authentication links.
Age requirement
DuoShare is intended for people age 13 and older and is designed primarily for ages 14–25. We do not knowingly collect personal information from children under 13. Accounts under 18 are never suggested to others or matched from contacts, and can only be found by their exact username or an invite link. A parent or guardian who believes a child has created an account should contact us for deletion.
Your choices and rights
You may access and update profile information in the app, choose who sees each update, turn discovery off, control photos and reminders, leave a challenge or a Duo, restore purchases, or delete your account. Depending on where you live, you may also request access, correction, deletion, portability, or restriction of personal information by contacting us.
International processing
Information may be processed in countries other than your own. Where required, we use appropriate safeguards for international transfers through our service providers.
Changes
We may update this policy as DuoShare changes. We will change the effective date and provide additional notice when a material change requires it.