Privacy policy
Last updated: 5 October 2026 · Covers the Duenex app and the duenex.app website
1. Who is the data controller
Vincenzo Maggio, Scalea, Italy.
Privacy contact: support@duenex.app.
2. What data Duenex processes
- Your items and due dates. Names, categories, dates, amounts, to-do lists, notes and attachments (photos or files) that you enter. They stay on your phone. If you create an account, they are also copied to the cloud so you can find them on another phone.
- Account data. Email address and password. The password is stored in encrypted form by the authentication provider and we cannot read it.
- Assistant. The text you type or dictate and the photo of a bill you choose to send, only when you tap “Create item”. We keep a monthly request counter linked to your account.
- Voice dictation. When you use “Dictate”, your audio is turned into text by your phone’s operating-system speech recognition (Apple), under its own terms. Duenex only receives the text.
- Technical data. The providers listed below may log your IP address and technical request information for security and operation.
- Notifications. Reminders are scheduled on your phone and do not go through our servers.
Duenex does not use analytics or profiling tools and does not sell your data.
3. Why we process it and on what basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Running the app, the account and syncing | Performance of the service you request (Art. 6(1)(b)) |
| Assistant and voice dictation, when you use them | Performance of the service you request (Art. 6(1)(b)) |
| Security, abuse prevention, request limit | Legitimate interest (Art. 6(1)(f)) |
| Legal obligations | Art. 6(1)(c) |
4. Who we share it with
We use providers that process data on our behalf:
- Supabase — authentication, database and attachment storage. Data region: London, United Kingdom.
- Anthropic — processes the text and photos you send to the assistant, to suggest the item to save. The service is in the United States.
- Brevo — sending confirmation and password-recovery emails.
- Apple — app distribution and your phone’s speech recognition.
- Cloudflare — hosts this website.
The text and photos sent to the assistant are not stored by Duenex after processing. The provider handles them under its own commercial terms and privacy policy.
5. Transfers outside the European Union
Account and cloud data are stored in London (United Kingdom), a country for which the European Commission has adopted an adequacy decision. The assistant also involves a transfer of data to the United States. It takes place with the safeguards required by the GDPR (for example standard contractual clauses).
6. How long we keep it
- For as long as you keep your account.
- If you delete your account in the app (More → Delete my account), we delete the account, the cloud data and the attachments. Data on your phone stays until you delete it.
- Any technical backups, if enabled, are kept by the provider for a limited period.
7. Your rights
You can request access to your data, rectification, erasure, restriction, objection and portability (Arts. 15–22 GDPR). Write to support@duenex.app. You can also delete your account directly in the app. You have the right to lodge a complaint with the Italian Data Protection Authority (Garante) or your local authority.
8. Security
Communications use encrypted connections (HTTPS). Each account can only see its own data. The sign-in session is stored in your phone’s protected storage. No system is perfectly secure: we recommend a unique password and a screen lock.
9. Children
Duenex is not directed at children under 14.
10. Changes
If we change this policy, we update the date above. For important changes we will let you know in the app.