Privacy Policy

Effective October 10, 2026. Duo connects you with other people for live one-to-one video calls. This policy explains what that involves, what we keep, and what we never see.

Who can use Duo

Duo is for adults aged 18 and older. You must not use Duo if you are under 18, and if we learn that an account belongs to someone under 18, we will delete it.

Your account

When you first open Duo, it creates a guest account for you. That account is tied to an identifier for your device (the identifier for vendor on iOS, the Android ID on Android) and records the language and country set on your device. If you choose to sign in with Google, we also receive your Google account’s email address, name and profile photo, through Firebase Authentication.

Video calls

Calls use WebRTC. Audio and video are encrypted between the two devices and travel directly between them or, when a direct connection is not possible, through a relay operated by Cloudflare that passes the encrypted stream on without being able to see or hear it. Our servers only help the two devices find each other and set up the connection. We do not record, store or have access to your calls.

What the other person sees

When you are matched, Duo shares your display name, bio, interests and avatar with the other person, and your location only if you choose to show it. As with any direct video call, setting up the connection lets the other person’s device see your IP address. Anything you say or show on camera can be seen and heard by the other person, who could record it with other tools — Duo cannot prevent that.

Information stored on your device

Your profile, preferences, call history, connections and notifications are stored on your device, not on our servers, and are removed when you uninstall the app. Reports and blocks you make in the app are also kept on your device; to make sure a report reaches us, email us as described below.

Technical information

To run the service and protect it from abuse, our servers process your IP address and the requests the app makes, and record the type of app and device that signed in with each session. Request logs are kept by our hosting provider for a short time.

Service providers

Cloudflare hosts our servers, database and call relays. Google Firebase handles Google sign-in when you use it. They process data only to provide these services to us.

No advertising or tracking

Duo contains no advertising, no third-party analytics and no tracking across other apps or websites. We do not sell or share your data.

Deleting your account

Your account stays until you delete it. To delete it, use the form at duoapp.live/account-deletion, or email us the account ID shown in Settings → Account, and we will remove the account and its data from our servers within 30 days of your request.

Support emails

If you choose to email us for support, we receive the email address and information you voluntarily include in that message. It is used only to answer you and is not collected through the app.

Changes to this policy

If Duo’s data practices change, we will update this policy and its effective date before those changes take effect.