DuelyGDPR and Your Data Rights
Roles
Gift Robias Phiri (operator of DuelyNoted, established in Ireland; published on Google Play as Tanazio Studios) is the data controller for account and app data. The services on the subprocessors page act as processors on our instructions.
Data location and transfers
Account and app-content data is stored in the EU (AWS eu-west-1, Ireland) via Supabase. The public website is served by Vercel, which may process operational and security logs (such as IP address and request metadata). Automated authentication email is sent via Resend (auth.duelynoted.app); human support email is handled by Zoho Mail; Namecheap provides DNS only. Some providers may process information outside the EEA; where required, we rely on the safeguards made available by the relevant provider and applicable data-protection law. If payment features launch in a future version, the relevant stores would process payments under their own responsibilities.
Lawful bases
| Processing | Basis |
|---|---|
| Storing and syncing the items, reminders and preferences you create | Contract — Art. 6(1)(b) |
| Security, abuse prevention, deletion audit trail | Legitimate interests — Art. 6(1)(f) |
| Optional analytics or crash reporting (future, off by default in current version) | Consent / disclosed legitimate interests — announced before activation |
Your rights
| Right | How to exercise it |
|---|---|
| Access & portability (Art. 15, 20) | In-app: Settings → Privacy & data → Export my data (JSON) |
| Erasure (Art. 17) | In-app: Settings → Account → Delete account, or see deletion page |
| Rectification (Art. 16) | Edit anything in-app, or email us |
| Restriction & objection (Art. 18, 21) | Email privacy@duelynoted.app |
| Complaint (Art. 77) | Your local supervisory authority, at any time |
We answer every request within 30 days. We do not use automated decision-making or profiling, and we never sell personal data.
Data minimisation in practice
DuelyNoted is designed around data minimisation: there is no bank linking in the product, the app requests only notification permission, no analytics or advertising SDKs are present in the current version, the deletion audit record contains no email or app content, and everything you store is exportable and erasable from inside the app.
Contact
Privacy enquiries are handled through privacy@duelynoted.app. If DuelyNoted's activities change in a way that requires a formal Data Protection Officer or additional representative information, this page will be updated.