Privacy policy

• Duly keeps what you give it to do what you ask, and uses it for nothing else.
• What you type goes to Claude, made by Anthropic, to write the assistant's replies: only once you've agreed, and only what a request needs.
• There are no ads and no tracking, and your data is never sold.
• Conversations and notes are encrypted with a key that belongs to your account alone.
• You can read, change and delete what Duly keeps, and delete your account at any time.

Only what you give Duly while you use it:

• Your account: your email address, to sign in; a name, if you give one; your password, stored only as a one-way hash; your language, timezone and settings, such as reminder times, quiet hours and theme.
• What you add: tasks, appointments, conversations with the assistant, the notes your areas keep, what the assistant remembers about you, and themes you design.
• Fitness and sleep: what you tell the Gym area about your training and sessions, and the wake-up times Sleep & wake keeps, if you use those areas.
• History: what happened to your items (added, moved, done, dropped), so changes can be undone and the assistant can see how your week went.
• Assistant usage: how much each request to the assistant used, counted against your monthly allowance. This records amounts and times, not what was said.
• Telegram, if you connect it: your Telegram chat and username, so reminders reach you.
• Connected services, if you connect one: which service it is, and your key or sign-in for it.
• Technical logs: like any web service, Duly's server notes requests as they arrive (such as the time and the address they came from) to keep Duly running and secure.

Duly doesn't collect your location (it never asks; if you tell it where you live, that's kept as something you said), contacts, photos, recordings, browsing history or payment details. It has no analytics, advertising or crash-reporting SDKs.

All of it is used only to run Duly for you: to sign you in, show your plans and remind you of them, write the assistant's replies, keep your areas' notes and count your monthly allowance. It isn't used for advertising or profiling, and nothing is sold or shared with data brokers.

Where the law asks for a legal basis, such as the GDPR in the EU and the UK: keeping and using your data to run Duly is necessary to provide the service you signed up for; sending what you type to Anthropic rests on your consent, which you can withdraw; and technical logs rest on a legitimate interest in keeping Duly secure.

Duly's assistant is Claude, an AI model made by Anthropic, PBC, in the United States. Anthropic processes what Duly sends it on Duly's behalf, to write replies.

Before the assistant answers you for the first time, Duly asks whether you agree to this. Once you do, each request sends Anthropic only what it needs: what you wrote, and the parts of your tasks, appointments, area notes and memory the request is about. Requests come from what you type in the box, in conversations and to the bot, and from what Duly writes for you on its own, like the day's plan, the order of your tasks, a look over your week and your areas' check-ins.

Your password, your encryption key and your keys for connected services are never sent.

Under Anthropic's commercial terms, Anthropic doesn't train its models on what Duly sends. It may keep it for a limited time to prevent misuse, as its privacy policy describes.

You can take your agreement back at any time in Settings, under Assistant. From then on nothing more is sent: Duly keeps working without the assistant, and what you type is kept as a task.

The assistant can be wrong. Check what matters, and don't rely on it for medical, legal or financial advice.

Some areas can use an outside service. Places, Weather and Travel time can use Mapbox, Google Maps, OpenStreetMap, Open-Meteo or Weather That Doesn't Suck, or any other service you add by its address. You connect them yourself, with your own account or key, or with none where the service doesn't need one.

Duly calls a service only when one of your requests needs it, and sends only what that call needs, such as the place or the route to look up. What the service sends back goes to the assistant to write the reply. Each service handles what it receives under its own privacy policy.

Your key or sign-in for a service is encrypted with your account's key, used only for that service's calls and never sent to the assistant. You can disconnect a service in its area at any time.

Telegram is optional. If you connect it, Duly sends your reminders through Telegram and reads the messages you send the Duly bot, and Telegram handles them under its privacy policy. You can disconnect it in Settings.

The calendar feed is optional too: a private address that lets a calendar app show your agenda. Anyone with the address can read it, so keep it to yourself. You can turn it off or make a new one in Settings.

Duly shows no ads, has no analytics or advertising SDKs, and doesn't track you across other apps or websites. The web app uses cookies only to keep you signed in, to remember your theme on that device and to remember that it asked about the assistant.

• Everything travels over HTTPS.
• Passwords are stored only as argon2id hashes, which can't be turned back into the password.
• Each account has its own encryption key. Conversations, notes, area notes, what the assistant remembers and keys for connected services are encrypted with it (AES-256-GCM), and the key itself is locked by a master key kept apart from the database. The titles of tasks and appointments stay readable, so reminders, search and the calendar feed work.
• Sign-ins use short-lived tokens that are renewed as you go, kept in secure cookies on the web and in the Keychain on iPhone.

No system is perfectly safe. If something ever puts your data at risk, we'll tell you as the law requires.

Duly's server is in [Country where Duly's server is]. Anthropic, and some of the services you can connect, are in the United States or elsewhere. Where your data leaves your country, it's protected by the safeguards the law requires, such as standard contractual clauses.

Duly keeps your data while you have an account. You can delete tasks, appointments, conversations and memories one by one whenever you like.

You can delete your account in Settings. Your encryption key is destroyed at once, so what was encrypted with it can't be read again by anyone, in backups too. Everything else is removed for good 30 days later.

Technical logs are kept only as long as they're needed to run and secure Duly.

You can read and change what Duly keeps in the app, including everything the assistant remembers about you, in Settings. You can also:

• Get a copy of everything Duly keeps about you, as a file (JSON, with your agenda as ICS). Write to us and we'll send it.
• Stop the assistant by taking back your agreement in Settings.
• Delete your account in Settings.

Depending on where you live, you may also have the right to correct your data, to object to or limit how it's used, and to complain to a data protection authority. In California: Duly doesn't sell or share personal information.

To use any of these rights, write to [contact email]. We'll answer within 30 days.

Duly isn't meant for children under 13, and they mustn't use it. Where the law sets a higher age for agreeing to how data is used, such as 16 in some EU countries, you need to be that age or have a parent's permission. If we learn that a child under 13 has an account, we'll delete it.

If this policy changes, so does the date at the top. When a change matters, we'll tell you in the app or by email before it applies.

Duly is run by [Operator's legal name], [Postal address]. For questions about this policy or your data, write to [contact email].

This policy is governed by the law of [Country or state].