Privacy

When you plan something: your answers (the occasion, budget, date, area, how many people, and anything you tell us about the person it is for, such as a name or what they like) are sent to our server to build the plan. If you have allowed it, they are also sent to Anthropic to write the plan's description. See Who else sees it below.

If you use Duro without an account: to use the assistant or subscribe without registering, the app creates an identifier for your device. It has no email or name attached. Your conversations and any subscription are stored against it.

If you create an account: your email address (or the one Apple or Google shares when you sign in with them), the name, birthday and profile photo you choose to add, the plans you save, and your conversations with the assistant.

If you subscribe to Duro Pro: whether your subscription is active and when it renews. Payment is handled entirely by Apple; we never see your card.

When you book, report or turn on notifications: a reservation request records the venue, date and party size. A report records what you said was wrong and the screen and app version it came from. Notifications need a device token so reminders reach your phone.

When you ask for directions from where you are, or for somewhere near you: the app asks permission, then reads your phone's location once, while the app is open, at the moment you ask (a tap, or shaking your phone on the Where next screen), and sends it to our server to find the trotro stops and taxi routes, or the places, near you. It is used for that one answer and not stored. If you open Yango from a plan, the start point is passed to Yango. Duro never reads your location in the background.

When you talk to Durobot instead of typing: the app asks for the microphone and speech recognition, and listens only while you hold the mic button. Apple's speech recognition turns what you say into text, on your phone or on Apple's servers. Duro never receives or keeps the recording, only the words, which go wherever a typed message would.

To decide where to add venues: a rough, anonymous record of each plan request: the area chosen (or, for “near me”, a square about a kilometre across, never your exact position), the occasion, party size, a budget range, the day, and whether we found a plan. It carries no account or device identifier. Venues see only totals from it, never anything about a person.

When you recommend a dish: that your account recommends it. Other people see only the total number of recommendations, never who made them.

To run the service: how many assistant messages each account has used this month, and how much each request to Anthropic cost, so we can keep the free allowance fair and the bill paid.

No location tracking or location history, no advertising identifiers, no contacts, and nothing from your photo library except a picture you choose for your profile. We do not sell anything to anyone, and we do not use your data for advertising.

Anthropic, the company that makes the Claude AI models, receives what you type to the assistant and the planning answers used to write your plan's description. The app asks your permission before sending anything, and you can turn it off at any time under You. Anthropic processes it under its commercial terms, which do not permit using it to train models. Your email and account details are not sent.

Venue facts come from Google Places. Data is stored with Supabase, subscriptions are managed through Apple and RevenueCat, and speaking to Durobot is turned into text by Apple. Nobody else.

A plan you share is readable by anyone with the link. That is the point of a share link, so only send it to people you mean to.

When somebody opens a shared plan, we count it, and whether they then tap to get the app, so we can tell whether sharing brings people in. The count holds which plan and its occasion, and nothing about the person: no account, no address, and nothing stored on their device.

Open the app, go to You, and choose Delete account. Your account, saved plans, conversations and usage records are removed immediately. Reports you filed about venues stay, with your name detached, because a closed venue is still closed.

Deleting your account does not cancel a Duro Pro subscription, because Apple holds it rather than us. Cancel it first in your iPhone's Settings, under your name, then Subscriptions.

If you cannot get into the app, email planbyaduro@gmail.com and we will do it for you.

Who is responsible. Duro is run by Darryl Amoatey, an individual in Accra, Ghana, who is the controller of the personal data described above. Reach us at planbyaduro@gmail.com for anything on this page.

Why we may use it. Your account, saved plans, conversations and subscription: to provide the service you asked for (contract). Sending your words to Anthropic for the assistant and plan descriptions: your consent, which you can withdraw under You at any time. The anonymous record of plan requests, counts of shared plans, and message and cost counts: our legitimate interest in running Duro fairly and deciding where to add venues, using data that does not identify you.

How long we keep it. Account data, plans and conversations until you delete your account, when they are removed straight away. Location is not stored at all. The anonymous request records and share counts are kept, because they are about no one. Reports about venues are kept with your name detached.

Where it goes. The services named under Who else sees it may process data outside your country, including in the United States. Where they do, they rely on the safeguards data-protection law provides for that, such as the European Commission's standard contractual clauses.

Your rights. You can ask for a copy of your data, to correct it, to delete it, to restrict or object to how it is used, and to have it in a form you can take elsewhere. Most of this you can do in the app; for the rest, email us and we will answer within a month. You can also complain to the data protection authority where you live, or in Ghana to the Data Protection Commission.

Duro is not intended for anyone under 13.

planbyaduro@gmail.com