Duet Privacy Policy

1. Introduction & Core Philosophy

NextGen TechEdge Solutions Private Limited ("NextGen TechEdge", "we", "us", or "our") built Duet — A Private Space for Two with a fundamental promise: your relationship, conversations, and cherished memories belong strictly to you and your partner. We believe couples deserve a sanctuary completely insulated from commercial surveillance, behavioral profiling, and data harvesting.

This Privacy Policy explains how information is handled when you use the Duet mobile application ("App") and website located at https://nextgentechedge.com/duet/.

2. Personal Cloud Storage Architecture

Unlike conventional social media or messaging platforms that store your photos, chats, and private media on centralized corporate servers, Duet utilizes a Personal Cloud Storage Architecture:

• User-Owned Cloud Sync: Duet allows you to connect your personal cloud storage accounts, specifically Google Drive or Microsoft OneDrive.
• Direct Storage: When you upload photos, videos, or voice memos, they are transferred directly from your device to your authorized personal cloud directory (e.g. /Duet Space). NextGen TechEdge does not operate intermediary file storage servers and does not retain copies of your files.
• OAuth 2.0 Scopes: Duet uses strict restricted-scope OAuth tokens to access only the dedicated folder created for the App. Duet cannot view, modify, or delete any of your other documents or personal files in your cloud account.

3. Cryptographic Security & End-to-End Encryption

Duet protects your intimate communications using industry-standard cryptographic protocols:

• End-to-End Encryption (E2EE): Private chat messages, doodles, and notes are encrypted on the sending device and can only be decrypted by the paired receiving device. NextGen TechEdge cannot read your messages in transit or at rest.
• Local On-Device Key Storage: Encryption keys are generated locally on your smartphone during the 6-digit pairing handshake and are stored securely within your device's Hardware Security Module (HSM) or Android Keystore / iOS Keychain.
• Biometric Protection: You may enable Face ID, Touch ID, or a biometric PIN lock to prevent unauthorized physical access to your Duet app.

4. Information We Do NOT Collect

To preserve complete privacy, Duet purposefully refrains from collecting:

• Your phone number, contacts list, or address book.
• Your precise real-time GPS location coordinates.
• Your credit card or financial account numbers (all app purchases, if any, are handled directly through Google Play Billing or Apple In-App Purchase).
• Behavioral tracking or user profiling data.

5. Minimal Operational Data Handled

The only data handled during app operation includes:

• Pairing Tokens: Temporary ephemeral 6-digit codes used solely to coordinate the initial cryptographic handshake between both devices. These tokens expire after 15 minutes.
• Push Notification Tokens: Standard Firebase Cloud Messaging (FCM) or Apple Push Notification service (APNs) device tokens required to deliver real-time message alerts to your phone. Notification payloads do not contain sensitive message bodies.
• Anonymized Crash Logs: If you explicitly opt in, crash stack traces may be collected solely to diagnose bug fixes and app stability issues.

6. Third-Party Services & Google Play Compliance

In full compliance with Google Play Store Developer Policies and Apple App Store Review Guidelines:

• Google Drive API: Duet's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Zero Ad Networks: Duet contains NO advertising networks, affiliate banners, or tracking pixels.
• No Data Sales: NextGen TechEdge does not sell, rent, monetize, or trade any user information to third-party data brokers, marketers, or advertisers under any circumstances.

7. Data Retention & User Control (Account Deletion)

Because your content is stored on your own devices and personal cloud drives, you maintain complete, absolute control over data retention:

• Clearing Content: Deleting a photo or note inside Duet removes it from your device and your linked cloud folder.
• Unpairing: Tapping "End Space" in app settings permanently dissolves the cryptographic relationship and clears local cache on that device.
• Revoking Cloud Access: You can revoke Duet's OAuth permissions at any time directly through your Google Account Security settings (myaccount.google.com/permissions) or Microsoft Account dashboard.

8. Children's Privacy

Duet is intended for mature couples and individuals aged 16 and older. We do not knowingly collect or solicit personal data from children under the age of 13 (or applicable local age limit). If we become aware of any data collected from a minor, we will promptly delete it.

9. Contact Us

If you have questions, feedback, or concerns regarding this Privacy Policy or our security architecture, please contact our Data Protection Officer: