Welcome to DueProof. We respect your privacy and have designed our application from the ground up with a “Privacy-First, Local-First” architecture. This Privacy Policy explains how we collect, use, and protect your information.

1. Our Privacy Philosophy

Unlike traditional apps, we do not force you to register an account to start using our core features. Your personal metadata is stored securely on your device, giving you complete data sovereignty.

2. Information We Collect

A. Local-First Storage (Data on Your Device)

Your detailed behavioral tags, usage history, and personal preferences are stored locally on your device using SQLite. This data never leaves your phone in an identifiable format.

B. Anonymized Cloud Data

• Anonymized Tag Aggregation (only while Personalized Recommendations is ON): We periodically upload a summary of your interest tags (e.g., “fitness”, “travel”) for matching and anonymous audience sizing. These tags are linked only to an anonymous UUID and are never connected to your real identity. With the feature off, this upload does not happen at all.
• Behavioral Summary (only while Personalized Recommendations is ON): Aggregated usage metrics (tag counts, activity patterns) are uploaded alongside tag data, including any interest requests you typed on an opportunity card (the text only — never any card content). These are anonymous summaries.
• District-Level Location: We do not collect or store precise GPS coordinates. If you grant location permissions, we only convert your location into a broad district-level hash (e.g., TW_taipei_daan).
• No Cross-App Tracking: We never ask for tracking permission, and the ad SDK we use serves non-personalized ads only (see Section 4). Nothing links your activity in DueProof to other apps or websites.

C. AI Processing

When you use AI OCR or Vision features, images are sent securely (HTTPS/TLS) to our AI providers for immediate analysis. Zero Retention: Images are deleted immediately after processing and are not used to train AI models.

AI Support Assistant: messages and any screenshots you send to the in-app assistant (“DueProof Assistant”) are forwarded to OpenAI to generate the reply, under the same no-training terms. The conversation is stored with your support ticket so a human can follow up. Please do not type passwords, card numbers or other sensitive personal data into the chat.

D. Personalized Recommendations

• Activity titles and text summaries are sent securely to our AI provider for interest matching.
• Anonymous interest tags describe what type of person you resemble, not who you are.
• Health-related tags are never used for advertising matching (GDPR Article 9 compliance).
• You can enable or disable this feature at any time in Settings. Turning it off immediately stops all uploads and AI analysis calls, and deletes the aggregated data already on our servers (if you are offline, the deletion completes on the next connection). Your device keeps organizing interest tags locally only — they never leave your phone while the feature is off, and exist solely so that re-enabling restores recommendations instantly.

E. P-Points and In-App Purchases

Transaction records are stored on our servers, linked to your anonymous UUID. In-App Purchases are processed entirely by Apple/Google. We do not process or store your payment card information.

F. AI Phone Reminders

If you opt-in, your phone number is stored securely (encrypted at rest) to enable reminder calls via third-party telephony providers. You can unbind your phone number at any time.

G. Marketplace Activity

• When you browse the marketplace, we record which listings you view, save, share or message about, under your anonymous identifier, to recommend similar listings. These records are not linked to your email or phone number and are deleted after 45 days.
• This applies whenever you use the marketplace and is separate from the Personalized Recommendations setting above, which governs interest-tag uploads only.

3. How We Use Your Information

• Pair you with relevant local events, flash sales, or merchants.
• Display “Opportunity Cards” matched to your anonymous interest tags. Matching is performed entirely on your device.
• Improve app stability by collecting anonymized crash logs.
• We do NOT sell your personal data.

4. Third-Party Services

• Supabase: Secure cloud database and authentication.
• AI Providers (OpenAI/Anthropic/Google): For intelligent data extraction. Our enterprise agreements prohibit data use for model training.
• Apple/Google: In-App Purchase processing.
• Sentry: Crash and performance diagnostics (stack traces, device model, OS version). Text and images are masked in the short screen replay captured around a crash; no name or email is attached.
• PostHog: Product analytics (which screens and features are used), keyed to an anonymous identifier. Never used for advertising.
• Google AdMob: Serves the banner ad shown to free-tier users. We request non-personalized ads only and do not ask for tracking permission; to deliver and measure ads the SDK receives device information such as device model, an app-scoped device identifier, and the approximate location derived from your IP address.
• hCaptcha: Bot protection when signing in.
• Twilio: Phone reminder call delivery.

5. Data Security

All data transmitted between your device and our servers is encrypted using HTTPS/TLS. Sensitive data is encrypted at rest. No raw personal data is permanently stored on our servers.

6. Data Retention and Deletion

• Local Data: Deleting the app immediately destroys all local data.
• Cloud Account: You can permanently delete your account and all associated data in Settings > Account > Delete Account — or request deletion without installing the app at dueproof.app/account/delete.

7. Children's Privacy

DueProof is not intended for children under the age of 13.

8. Contact Us

If you have questions about this Privacy Policy, please contact us at: privacy@dueproof.app