Privacy, without the fog.
Duolisto collects only what it needs to authenticate you, connect your duo, synchronize your shared list, and keep the service secure.
Information Duolisto handles
We process an account identifier, account type, an optional display name, and the verified email address attached to a saved account. Guest accounts use a synthetic internal email address that is not a personal contact address.
Your shared-list data includes task text, assignment and completion state, internal creator/updater references, partner membership, and invitation status. Security data includes a random installation identifier, guest-creation rate-limit counters, and guest activity timestamps.
How it is used
We use this information to provide the shared-list service, synchronize changes, connect partners, prevent abuse, recover saved accounts, and honor deletion requests.
Duolisto does not include advertising, cross-app tracking, third-party analytics, contact uploads, location collection, payments, or push notifications in version 1.
Sharing and service providers
A connected partner can see and change the tasks on your shared list. Clerk provides authentication and identity storage. Convex provides the application database, synchronization, and server execution. We do not sell personal information.
Retention and deletion
Saved-account data remains until the account is deleted. Inactive, unpaired guest accounts are eligible for automatic deletion after the configured retention period. You can delete your account in Duolisto under Settings → Delete account.
If one member of a duo deletes their account, the remaining member keeps the shared tasks as a solo list. References and assignments belonging to the departing member are removed.
Your choices
You can review your shared content in the app, disconnect from the service by signing out, or permanently delete your account. For an access, correction, or privacy request, email privacy@duolisto.app.
Effective July 26, 2026. We will update this page when our practices change.