Privacy Policy

DueDuo, Engstringerstrasse 16, 8952 Schlieren, Switzerland (“we”) is the controller of your personal data. Contact: info@dueduo.com.

• Account: your email address and sign-in records.
• Your plan: what you enter — due date, names, hospital, appointments, questions and answers, symptoms, budget, leave and income figures, registry and checklist items. Pregnancy and symptom details are health information, which we process only with your explicit consent.
• Co-Pilot: the partner's email and anything they add to the shared plan.
• Payment: Polar sells DueDuo to you as our merchant of record and processes your payment. We receive the amount, currency, status and your email — never your card number.
• Which guide you came from: if you go to checkout from one of our free guides, we record which guide it was with your order, to learn which guides are useful. No cookies are used for this.
• Which ad or link you came from: if you reach our site from one of our ads or social posts and then buy, we record the campaign label in that link (for example, which ad or pin) with your order, to learn which ads and posts work. No cookies are used for this.
• Instagram comments and messages: when you comment a keyword such as PACK on one of our Instagram posts, our server reads that comment through Instagram's API, sends you one direct message with the link you asked for, and replies to your comment. We keep a record of the comment's ID, the post's ID, the keyword and whether the message was sent for up to 12 months, so nobody gets the same message twice. We don't store your username or what you wrote. When you message us on Instagram, we read and answer you there, and an AI assistant (Claude, by Anthropic) helps us read messages and draft replies; a person approves every reply. Legal basis: our legitimate interest in answering requests you make to us. To have your record deleted, email info@dueduo.com.
• Planning pack: if you sign up for our free printables, we keep your email address and send the pack and a few planning emails. Every email has an unsubscribe link, and you can ask us to delete your address anytime.
• Technical: basic logs (such as IP address and browser) needed to run and secure the service.
• Advertising cookies: only if you accept them (see section 7).

• To provide the service you bought — performance of our contract with you.
• To store your pregnancy and health information — your explicit consent, given during setup.
• To help you get started after you buy — a welcome email, then up to five tips emails over the first 10 days (on days 1, 2, 3, 7 and 10; the one about inviting your partner only if your partner hasn't joined yet, and the day-2 one only if you haven't finished setup or ticked off a task yet). Every tips email has an unsubscribe link. Our legitimate interests in helping you use what you bought.
• To learn which free guides, ads and posts are useful — our legitimate interests.
• To measure our advertising — your consent via the cookie banner.
• To keep the service secure and prevent fraud — our legitimate interests.
• To keep payment and accounting records — legal obligations.

We never use your health information for advertising, and never sell or rent your data.

• Supabase — database and sign-in.
• Vercel — website hosting and privacy-friendly, cookieless visit statistics.
• Polar — our merchant of record: it handles checkout, payment, receipts, sales tax and refunds, as an independent controller under its own privacy policy.
• Resend, our email provider — sign-in links, service emails and the planning pack emails.
• Cloudflare Turnstile — a bot check on the sign-in and planning pack forms that blocks automated sign-ups.
• Meta (Instagram) — to read comments on our posts and send the messages you ask for.
• Anthropic (Claude) — to help us read Instagram messages and draft replies.
• Meta and TikTok — only if you accept advertising cookies. If you buy, we tell them a purchase happened (with your email in hashed, unreadable form) so we can measure our ads. No pregnancy or health details are ever shared.

Some providers process data outside Switzerland and the EU/EEA, for example in the United States. Where this happens, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses and, where applicable, the EU-US and Swiss-US Data Privacy Frameworks.

We keep your plan while your account is active. When you ask us to delete your account, we delete your plan data within 30 days. Payment records are kept as long as accounting law requires (up to 10 years).

• Essential (always on): keep you signed in and remember your cookie choice (sb-…, dd_consent).
• Statistics: Vercel Analytics counts visits without cookies or personal profiles.
• Advertising (only with consent): Meta Pixel (_fbp, _fbc) and TikTok Pixel (_ttp, dd_ttclid) measure whether our ads lead to sign-ups and purchases.

You can change your choice at any time: Cookie settings.

You can ask for access to, a copy of, correction or deletion of your data, and you can withdraw consent at any time (this doesn't affect processing before withdrawal). Email info@dueduo.com or use Settings → Request account deletion. You may also complain to a data protection authority — in Switzerland the FDPIC, in the EU your local authority.

Data is encrypted in transit, access is restricted per account with database-level security rules, and only you and the Co-Pilot you invite can see your plan.

DueDuo is intended for adults aged 18 or over.

We will update this page when our practices change and notify you of important changes.