Duvo Privacy Policy

Last updated: August 2026

Duvo ("we," "our," "the app") helps you track renewals and recurring bills — subscriptions, insurance, domains, and similar recurring commitments — by detecting them from your connected bank account, forwarded emails, or documents you upload. This policy explains what information Duvo collects, how it's used, and the choices you have.

Information We Collect

Account information

When you create a Duvo account, we collect your name, email address, and a securely hashed password (if you sign up with email rather than Google or Apple Sign-In, in which case we receive only what those providers share — typically your name and email).

Bank transaction data

If you connect a bank account via Akahu (a licensed New Zealand open banking provider), Duvo receives read-only access to your transaction history. We use this solely to detect recurring bills and renewals. Duvo cannot move money, make payments, or access your bank login credentials — Akahu handles authentication directly with your bank, and Duvo never sees or stores your banking password.

Email content

If you forward a bill or renewal notice to your personal Duvo forwarding address, or connect Gmail directly, we process the email's content to extract renewal details (provider, amount, due date). Email content is processed for extraction and is not retained in full after processing — we keep only the structured renewal information extracted from it (e.g. "Netflix, $22.99, due 14th of each month"), not the original email body.

Uploaded documents and photos

If you take a photo of a bill or upload a PDF, the image or file is sent for one-time processing to extract renewal details, then discarded. It is not stored on our servers after processing.

Usage and diagnostic data

We use Sentry, a third-party error-monitoring service, to catch and fix crashes and bugs. This may include device type, app version, and the technical details surrounding an error — not your personal renewal data.

How We Use Your Information

We do not sell your personal information, and we do not use your data to serve ads — Duvo has no advertising of any kind.

Third-Party Services We Use

Duvo relies on the following third parties to operate. Each only receives the specific data needed for its function:

ServicePurposeWhat it receives
AkahuOpen banking connectionBank authentication (handled directly by Akahu, not by Duvo); Duvo receives only transaction data
Anthropic (Claude)Extracting renewal details from transactions, emails, and documentsThe specific transaction, email, or document content being processed at that moment
GoogleSign-in, and Gmail access if you connect itYour Google identity; email content if you enable Gmail Connect
AppleSign-in, and subscription purchasesYour Apple identity; purchase/subscription status
ResendSending password-reset emails and receiving forwarded billsYour email address; forwarded email content
SentryCrash and error monitoringTechnical diagnostic data, not personal renewal content

Data Retention

We retain your account and renewal data for as long as your account is active. If you delete your account, we delete your personal data, with the exception of information we're required to retain for legal, tax, or accounting purposes. As noted above, source email content and uploaded documents are not retained after the renewal details are extracted from them.

Data Security

Sensitive credentials, including your Akahu bank connection token, are encrypted at rest. Passwords are never stored in plain text. We use industry-standard practices to protect your data, though no method of transmission or storage is ever 100% secure.

Your Rights

You can access, correct, or delete your renewal data at any time within the app. You can disconnect your bank account or revoke Gmail access at any time from Settings. To request full account deletion, contact us using the details below.

If you're in New Zealand, you have rights under the Privacy Act 2020, including the right to request access to, and correction of, your personal information.

Children's Privacy

Duvo is not directed at children, and we do not knowingly collect personal information from anyone under 16.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.

Contact

For any privacy questions or requests, contact: privacy@getduvo.app