Privacy Policy
Last updated: October 23, 2026
This policy explains what information DuoAsk collects, why we need it, who helps us process it, and the choices you have. We collect only what we need to run the game. We do not sell your data, show ads, or use analytics or tracking tools.
1. Who is responsible
DuoAsk is operated by Chen Kevin, an individual based in China, who is responsible for your personal data. Contact: support@duoask.si.
2. What we collect
Account information
Your email address and, if you sign in with Google, the name and email address on your Google account. If you sign up with a password, it is stored only in hashed form by our authentication provider. We never see it in plain text.
What you write in the game
Your messages to characters, your decisions, your drill answers, the situations you describe when writing your own stories, and the results the game produces from them (endings, reviews and suggestions). We save these to your account so you can see your history and progress.
Usage and limits
How many AI requests you make each day, and the AI usage of each round (number of tokens and cost). We use this to enforce fair-use limits and to keep the service affordable.
Rounds and purchases
Your round balance and a history of every change to it (free rounds, purchases, rounds used, refunds). For purchases we store the Paddle transaction ID, amount and currency. Payment details such as card numbers are collected by Paddle, never by us.
Technical information
Like most websites, our hosting providers automatically receive your IP address and basic browser information when you visit, and may keep it in security logs.
Stored in your browser
DuoAsk uses your browser's local storage, not tracking cookies, to keep you signed in and to remember your language, whether sound is on, and the story you are currently playing. You can clear this at any time in your browser settings. Paddle's checkout may set cookies that it needs to process a payment.
3. How we use it
- To run the game: generate character replies, endings, reviews and drills, and save your progress.
- To manage your account: sign-in, password reset and account emails.
- To handle rounds: give free rounds, add purchased rounds, use rounds when you play, and process refunds.
- To protect the service: enforce usage limits, prevent abuse and fix problems.
Where privacy laws such as the GDPR apply, we rely on performing our contract with you for these uses, and on our legitimate interest in keeping the service secure and preventing abuse.
4. AI processing
To generate replies, DuoAsk sends the story setup together with what you write to a third-party AI model provider, through our server. Your email address and account details are not included. The provider processes the text to produce a response and handles it under its own terms. We do not use your content to train AI models.
Please do not enter sensitive personal information about yourself or anyone else.
5. Who processes your data
We use the following service providers. Each receives only what it needs for its task:
| Provider | What for | Data involved |
|---|---|---|
| Supabase | Database, sign-in and server functions (hosted in the United States) | Account, game records, usage, rounds |
| Cloudflare | Website hosting and delivery | IP address, browser information |
| AI model providers | Generating character replies, endings, reviews and drills | Story text and what you write |
| Paddle | Payments, invoices, tax and refunds, as Merchant of Record | Purchase and payment details (see Paddle's privacy policy) |
| Resend | Sending account emails (confirmation, password reset) | Email address |
| "Sign in with Google" (if you use it) and web fonts | Google account name and email; IP address for fonts | |
| jsDelivr | Delivering a JavaScript library the site uses | IP address |
If you use voice input, speech recognition is done by your browser. Some browsers, such as Chrome, send the audio to their own servers for this. If we add spoken character voices, the characters' lines (not your account details) are sent to a speech service to create the audio. We will update this page when we do.
6. International transfers
Our providers process data in the United States and other countries, which may be different from where you live. Where required, we rely on the safeguards our providers offer for international transfers, such as standard contractual clauses.
7. How long we keep it
- Account information and game records: until you delete them or ask us to delete your account.
- Round and purchase history: as long as your account exists, and longer where tax or accounting law requires.
- Hosting and security logs: for the limited period set by each provider.
When your account is deleted, your game records, usage data and round balance are deleted with it.
8. Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, receive a copy, object to or restrict certain uses, and withdraw consent. You can delete individual saved records in the app. For anything else, including deleting your whole account, email support@duoask.si from the address on your account. We will reply within 30 days. You also have the right to complain to your local data protection authority.
9. Children
DuoAsk is not intended for anyone under 16. We do not knowingly collect data from children under 16. If you believe a child has created an account, contact us and we will delete it.
10. Security
All connections use HTTPS. Your saved records are protected by database rules so that only you can read them. Payment details never reach our servers. No system is perfectly secure, but we work to protect your information and will tell you as the law requires if a breach affects you.
11. Changes to this policy
We will post any changes on this page and update the date at the top. If a change is significant, we will tell you by email or in the app.
12. Contact
Questions or requests about your data: support@duoask.si.