Privacy Policy.

Duo AI Dating, Inc. (“Duo,” “we,” “us,” or “our”) provides an AI-assisted matchmaking and introduction service delivered through iMessage, SMS, email, our website, and related tools and services (collectively, the “Service”).

This Privacy Policy explains how we collect, use, disclose, retain, and otherwise process personal information when you use the Service, communicate with us, or otherwise interact with Duo.

By using the Service, you acknowledge that you have read and understood this Privacy Policy.

01 Scope of This Privacy Policy

This Privacy Policy applies to personal information we collect through:

• our website;
• iMessage, SMS, email, and other communications with Duo;
• account registration and profile creation;
• surveys, forms, onboarding flows, and questionnaires;
• AI-powered matchmaking, compatibility, and introduction workflows;
• customer support, safety, moderation, and trust-related interactions; and
• any other products or services that link to this Privacy Policy.

This Privacy Policy does not apply to third-party websites, apps, services, or platforms that we do not control, even if they are linked to or integrated with the Service.

02 Personal Information We Collect

We may collect the following categories of personal information.

A. Information You Provide Directly

This may include:

• your name, nickname, or username;
• phone number;
• email address;
• date of birth and age;
• gender, gender preferences, pronouns, relationship preferences, and similar profile information;
• photos, videos, voice notes, profile text, prompts, biographical details, interests, values, and lifestyle information;
• information about your dating preferences, attraction preferences, relationship goals, dealbreakers, and compatibility preferences;
• communications you send to us or through the Service, including messages, responses, feedback, and support requests;
• payment and billing information, if you purchase paid features;
• identity-verification information, if we choose to offer or require it; and
• any other information you choose to provide.

B. Information We Collect Automatically

When you use the Service, we may automatically collect:

• device information, including device type, operating system, browser type, app version, mobile carrier, and identifiers;
• log and usage information, including IP address, timestamps, clicks, interactions, referrals, pages viewed, features used, and crash or diagnostic data;
• approximate location derived from IP address;
• precise geolocation, if you grant permission;
• cookie, pixel, SDK, and similar technology data; and
• information about your interactions with our emails, messages, and website.

C. Information We Derive or Generate

We may create, infer, or generate information from the data we collect, including:

• compatibility scores, matchmaking assessments, rankings, and recommendations;
• inferred interests, preferences, and traits;
• safety, fraud, authenticity, or moderation signals;
• marketing segments, analytics insights, and commercial audience groupings; and
• AI-generated summaries, explanations, conversation suggestions, and other outputs.

D. Information From Other Sources

We may receive personal information from:

• service providers and vendors;
• analytics, advertising, and attribution partners;
• payment processors;
• social media, identity, or login providers if you connect them;
• law enforcement, regulators, or other governmental authorities;
• other users, including reports or referrals; and
• publicly available sources, where permitted by law.

03 Sensitive Information

Some information processed through the Service may be considered sensitive under certain laws, including information relating to:

• sex life or sexual orientation;
• gender identity or transgender status;
• religious beliefs;
• precise geolocation;
• health-related information you choose to provide;
• government-issued identification; and
• message content and profile information that may reveal highly personal details.

Where required by applicable law, we will obtain consent before collecting or processing sensitive personal information, and we will provide any additional choices or rights required by law.

04 How We Use Personal Information

We may use personal information for the following purposes:

• to provide, operate, maintain, and improve the Service;
• to create accounts and profiles;
• to communicate with you through iMessage, SMS, email, and other channels;
• to perform AI-assisted matchmaking, ranking, scoring, and introduction functions;
• to generate summaries, compatibility explanations, recommendations, prompts, and related outputs;
• to personalize the Service and user experience;
• to process payments, subscriptions, and transactions;
• to provide customer support;
• to maintain safety, trust, moderation, fraud prevention, identity integrity, and platform security;
• to detect, investigate, and prevent abuse, illegal activity, and violations of our Terms of Service;
• to conduct research, analytics, testing, audits, and product development;
• to market and promote the Service;
• to create aggregated, de-identified, pseudonymized, modeled, or derivative datasets and products;
• to disclose personal information to advertising, analytics, attribution, measurement, and commercial partners as described in this Privacy Policy and permitted by law;
• to comply with legal obligations; and
• to establish, exercise, or defend legal claims.

05 How We Disclose Personal Information

We may disclose personal information to the following categories of recipients.

A. Other Users

Because Duo is a matchmaking and introduction service, some information is disclosed to other users as part of the Service. This may include:

• profile information you choose to make available;
• photos or profile content you choose to share;
• compatibility summaries or introduction materials;
• selected personal details that support introductions; and
• messages or content you send to another user through Duo-facilitated interactions.

B. Service Providers

We may disclose personal information to vendors and service providers that help us operate the Service, including providers of:

• cloud hosting and storage;
• communications and messaging;
• customer support;
• payments and billing;
• analytics and measurement;
• identity verification;
• security and fraud prevention;
• moderation and safety tooling;
• data processing and infrastructure; and
• legal, accounting, and professional services.

C. Affiliates and Corporate Group Members

We may disclose personal information to affiliates or entities under common ownership or control for operational, support, analytics, safety, legal, and business purposes.

D. Advertising, Analytics, and Business Partners

We may disclose personal information to advertising, marketing, data, analytics, attribution, measurement, audience development, and other commercial partners, including for:

• marketing and audience development;
• measurement and attribution;
• product development and business intelligence;
• partnership activations; and
• creating and distributing aggregated, de-identified, pseudonymized, modeled, or derivative analytics, outputs, and data products.

E. Purchasers and Transaction Counterparties

We may disclose personal information in connection with an actual or proposed merger, acquisition, financing, diligence process, restructuring, bankruptcy, receivership, sale of assets, or other corporate transaction.

F. Legal and Safety Disclosures

We may disclose personal information to courts, regulators, law enforcement, government authorities, private litigants, or other parties when we believe disclosure is necessary to:

• comply with law, subpoena, court order, or legal process;
• investigate or prevent fraud, abuse, harassment, threats, or unlawful conduct;
• protect the safety, rights, or property of Duo, users, or others; or
• establish, exercise, or defend legal claims.

06 Sale, Sharing, and Disclosures of Personal Information

Duo does not sell your personal information for money.

However, in operating the Service, we may disclose personal information to advertising, analytics, attribution, measurement, audience development, and other commercial partners. We may also use personal information to create aggregated, de-identified, pseudonymized, modeled, or derivative datasets and products, and to develop and improve products, features, models, and services.

Some of these disclosures may be considered a “sale,” “sharing,” or “targeted advertising” under applicable privacy laws, even though Duo does not exchange personal information for money.

Categories of Personal Information That May Be Disclosed

• identifiers;
• device and online activity information;
• geolocation information;
• profile and preference information;
• commercial information;
• inferences; and
• other information reasonably linked to you, depending on how you use the Service.

Categories of Recipients

• service providers;
• affiliates;
• analytics providers;
• advertising and attribution partners;
• business and commercial partners;
• parties to a corporate transaction; and
• legal, regulatory, and safety recipients.

Where required by law, we will provide notice, consent, authorization, opt-out rights, limitation rights, or other controls relating to these practices, as further described in the state-specific sections below.

07 Cookies, Pixels, SDKs, and Similar Technologies

We and our partners may use cookies, pixels, SDKs, local storage, and similar technologies to:

• operate and secure the Service;
• remember preferences;
• understand usage and engagement;
• measure campaigns and attribution;
• personalize content and advertising; and
• improve product performance.

You may be able to control some of these technologies through your browser, device, or cookie preferences, but some features may not function properly if you disable them.

08 AI Processing

Duo uses automated systems, models, and AI tools to assist with matchmaking, user analysis, introductions, safety review, communications, ranking, and product development.

This means we may use personal information, User Content, communications, profile details, preferences, engagement signals, and derived data to:

• evaluate compatibility;
• generate matches or recommendations;
• prepare summaries, introduction blurbs, or suggested conversation content;
• create inferences about interests and preferences;
• improve model performance and service quality; and
• support trust, safety, and moderation processes.

09 Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• provide the Service;
• maintain your account;
• support safety and moderation;
• investigate abuse and enforce our Terms of Service;
• comply with legal obligations;
• resolve disputes; and
• preserve business and legal records.

Retention periods may vary based on the type of data, the sensitivity of the data, legal requirements, dispute risk, and safety needs.

If you close your account, we may retain some information for a limited period afterward for safety, fraud prevention, legal compliance, dispute resolution, recordkeeping, or other legitimate business purposes.

10 Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

However, no system is completely secure. We cannot guarantee that personal information will never be accessed, disclosed, altered, lost, or destroyed through unauthorized means. You use the Service and provide information at your own risk.

11 Your Choices and Rights

Depending on where you live, you may have some or all of the following rights:

• the right to know what personal information we collect, use, disclose, sell, or share;
• the right to access specific pieces of personal information;
• the right to correct inaccurate personal information;
• the right to delete personal information, subject to exceptions;
• the right to opt out of sale, sharing, targeted advertising, or certain profiling;
• the right to limit certain uses of sensitive personal information;
• the right to withdraw consent, where processing is based on consent;
• the right to appeal certain privacy-request decisions; and
• the right to non-discrimination for exercising applicable privacy rights.

You may submit privacy requests by contacting us at privacy@tryduo.net.

We may need to verify your identity before fulfilling a request. We may deny requests where permitted by law.

12 California Privacy Rights

This section applies to California residents.

If you are a California resident, California law may give you the right to:

• know the categories of personal information we collect about you;
• know the categories of sources from which personal information is collected;
• know the business or commercial purposes for collecting, using, disclosing, selling, or sharing personal information;
• know the categories of third parties to whom personal information is disclosed, sold, or shared;
• access specific pieces of personal information;
• correct inaccurate personal information;
• delete personal information, subject to exceptions;
• opt out of the sale or sharing of personal information;
• limit certain uses and disclosures of sensitive personal information; and
• not be discriminated against for exercising your privacy rights.

California Categories of Personal Information We May Collect

Depending on your use of the Service, we may collect the following categories of personal information:

• identifiers;
• customer records information;
• characteristics of protected classifications under California or federal law;
• commercial information;
• biometric or similar verification-related information, if collected;
• internet or other electronic network activity information;
• geolocation data;
• audio, electronic, visual, or similar information;
• professional or education information, if provided;
• inferences drawn from personal information; and
• sensitive personal information.

California Sale / Share Disclosure

Duo does not sell your personal information for money. However, certain disclosures we make to advertising, analytics, and commercial partners may be considered a “sale” or “sharing” under California law. The categories of personal information involved in such disclosures may include:

• identifiers;
• device and online activity information;
• geolocation information;
• profile and preference information;
• commercial information;
• inferences; and
• other information reasonably linked to you, depending on how you use the Service.

The categories of recipients of such disclosures may include:

• advertising and marketing partners;
• analytics providers;
• attribution and measurement partners; and
• other business and commercial partners.

We honor applicable browser-based opt-out preference signals, including Global Privacy Control, for the browser or device on which the signal is sent.

13 Delaware Privacy Rights

This section applies to Delaware residents.

If you are a Delaware resident, we will not sell your personal information unless and until we determine that such sale is lawful and any required consent or authorization has been obtained.

In addition, where Delaware law requires consent to collect or process sensitive personal information, we will seek that consent before doing so.

Delaware residents may have rights to:

• confirm whether we process personal data;
• access personal data;
• correct inaccuracies;
• delete personal data;
• obtain a copy of personal data in portable form;
• opt out of the sale of personal data;
• opt out of targeted advertising; and
• opt out of certain profiling in furtherance of decisions producing legal or similarly significant effects.

To exercise Delaware privacy rights, contact us at privacy@tryduo.net.

If we deny your request, you may appeal by following the instructions in our response.

14 Washington and Nevada Consumer Health Data

This section applies to residents of Washington and Nevada to the extent applicable law treats certain information processed by Duo as “consumer health data.”

We do not sell consumer health data of Washington or Nevada residents.

Because consumer health data may be defined broadly in those jurisdictions, information you provide through a dating and matchmaking service may in some cases fall within that definition.

Categories of Consumer Health Data We May Collect

Depending on your interactions with Duo, this may include:

• profile or message content that reveals health-related information;
• information that could reveal reproductive or sexual-health-related details;
• precise location information, where enabled;
• inferences drawn from message content or profile content; and
• other information that applicable law may classify as consumer health data.

Purposes

We may collect, use, or disclose such information to:

• provide the Service;
• facilitate introductions and compatibility features;
• support safety, moderation, and abuse prevention;
• maintain and improve the Service; and
• comply with law and protect rights and safety.

Disclosures

We may disclose consumer health data, as applicable, to:

• other users, where you choose to disclose information in your profile or interactions;
• service providers acting on our behalf;
• affiliates acting on our behalf;
• parties to a corporate transaction; and
• law enforcement or other parties where required by law or necessary for safety or legal claims.

Washington and Nevada residents may have rights to confirm, access, delete, withdraw consent, and receive information about disclosures of consumer health data, subject to applicable law.

To exercise those rights, contact us at privacy@tryduo.net.

15 Other U.S. State Privacy Rights

If you live in a U.S. state that provides privacy rights not specifically described above, we will honor those rights to the extent required by applicable law.

In particular, if applicable law prohibits us from selling certain categories of personal information without prior consent or authorization, we will not sell that information for residents of that state unless and until we have obtained the legally required consent or authorization.

16 Children's Privacy

The Service is intended only for adults age 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we may delete that information and terminate the associated account.

17 Cross-Border Transfers

If you use the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries where Duo, its affiliates, or its service providers operate.

Those countries may have data-protection laws that differ from the laws where you live.

18 Third-Party Services

The Service may contain links to or integrations with third-party websites, platforms, tools, and services. We are not responsible for the privacy, security, or data practices of those third parties. Please review their privacy policies separately.

19 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version and revise the Effective Date above. If required by law, we will provide additional notice.

20 Contact Us

21 New Jersey Safety Disclosure

If Duo does not conduct criminal background screenings on users, New Jersey law may require a separate, clear, and conspicuous disclosure to New Jersey members in specific formats during signup, messaging, and profile presentation. That disclosure will appear in the product flow and safety materials in addition to this notice.