Privacy Policy

Who We Are

HeyDuo is a product of HeyDuo LLC. This Privacy Policy explains how we collect, use, and protect your information when you visit heyduo.app (the "Site") or use our services.

Information We Collect

How We Use Your Information

• To provide and operate the HeyDuo shared finance service
• To sync and display your financial transactions and account balances
• To enable expense splitting between you and your partner
• To power the Duo AI assistant and generate financial summaries
• To parse order confirmation emails and match them to transactions
• To respond to your inquiries and support requests
• To send you product updates and service notifications
• To improve our Site and understand how users interact with it

How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your data with the following service providers who help us operate:

• Vercel — hosting and analytics
• Slack — internal notification of contact form submissions
• Plaid — secure bank account linking and transaction syncing
• Postmark — processing inbound order confirmation emails
• OpenAI — powering the Duo AI assistant (message content may be processed to generate responses)

These providers only receive the minimum data necessary to perform their function. Your financial data is never sold or used for advertising.

Financial Data

HeyDuo connects to your financial accounts through Plaid. By linking your accounts, you authorize us to retrieve and store transaction data and account balances as necessary to provide the service. We use this data solely to power HeyDuo features — expense tracking, splitting, and the Duo AI assistant. We do not use your financial data for any advertising or marketing purposes, and we do not share it with third parties beyond the service providers listed above.

Partner Data Sharing

HeyDuo is designed for shared use between two partners. When you link a partner, certain data — including shared transactions, split history, and split summaries — will be visible to your linked partner. You control which transactions are marked as shared. Personal transactions you choose not to share remain private.

Data Retention

We retain account and transaction data for as long as your account is active and for a reasonable period thereafter. Contact form submissions are retained for no longer than 24 months. You may request deletion of your data at any time by contacting us at info@heyduo.com.

How to Request Data Deletion

You have the right to request deletion of your personal data at any time. To do so, you can:

• Email us at info@heyduo.com with the subject line "Data Deletion Request"
• Use the contact form on our website and indicate you are requesting data deletion

We will process your request within 30 days and confirm once your data has been deleted. If your data was shared with third-party service providers, we will also request its deletion from those providers.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Obtain a copy of your data in a portable format
• Object to or restrict certain processing activities
• Withdraw consent at any time

To exercise any of these rights, email us at info@heyduo.com or use the contact form on our website.

Cookies

This Site does not use cookies for tracking. Vercel Analytics is a privacy-friendly analytics solution that does not use cookies or collect personally identifiable information.

Government and Law Enforcement Requests

We take the privacy of our users seriously. When we receive requests from public authorities or law enforcement agencies for personal data, we follow these policies:

• We review the legality of every request before disclosing any data, and reject requests that lack proper legal basis
• We challenge requests that we believe are unlawful, overly broad, or otherwise inappropriate
• We apply data minimization principles, disclosing only the minimum information legally required to comply with valid requests
• We document all requests, our responses, the legal reasoning involved, and the actors involved in the process
• We notify affected users of requests for their data unless legally prohibited from doing so

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS), access controls, and regular security reviews. Financial data transmitted through Plaid is encrypted end-to-end.

Children's Privacy

HeyDuo is intended for adults managing shared finances. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us at info@heyduo.com.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the Site after changes constitutes acceptance.

Contact Us

If you have questions about this Privacy Policy or your personal data, please reach out through our contact form or email us at info@heyduo.com.

HeyDuo LLC, United States.