Privacy Policy

This Privacy Policy explains how Duokeep collects, uses, shares, and protects information when you use its website, mobile app, and related services.

• Account and membership information, including your email address, name, password credential, verification state, profile details, deletion status, partner requests, and workspace membership.
• Content you choose to create or upload, including encrypted documents, photos, receipts, notes, dates, locations, collection settings, packages, widgets, and related files.
• Encryption and recovery information, including device labels and public keys, encrypted key and recovery envelopes, versions, nonces, ciphertext sizes, and hashes.
• Technical and operational information needed to authenticate users, secure accounts, operate storage and synchronisation, diagnose failures, and provide support.

• We use information to operate accounts, shared workspaces, encryption and recovery, file processing, exports, customer support, security, and deletion controls.
• Workspace content is shared with the other active member of your Partner workspace. We may also share information with service providers as needed to operate Duokeep or when required by law.

The mobile app encrypts supported workspace content before upload. This can include files, thumbnails, user-entered names and descriptions, entry payloads, package snapshots, and widget settings. Duokeep stores encrypted payloads and the technical data needed to synchronise and retrieve them, but not the workspace key or recovery phrase in plaintext.

Some information remains visible to the service because it is needed for accounts, membership, ordering, storage routing, security, synchronisation, support, and legal compliance. This includes identifiers, type discriminators, operational state, timestamps, sizes, key versions, and ciphertext metadata.

Website waitlist and contact requests are separate from workspace encryption and may contain the name, email address, source, subject, and message you provide.

• You choose what content to add and can use available controls to access, export, correct, leave, or delete it. Do not upload information about another person unless you have the right or permission to do so.
• Account deletion is available after you no longer have an active workspace membership. Shared content may remain available to the other active member after you leave.

We retain information as needed to provide and secure Duokeep, operate shared workspaces, comply with legal obligations, resolve disputes, and complete deletion and backup lifecycles. Finalised account deletion may retain a de-identified record where needed to preserve shared workspace history.

We use technical and organisational measures designed to protect information, including client-side encryption for supported workspace content. No online service can guarantee absolute security.

Privacy questions, access or correction requests, and complaints can be submitted through the support form at duokeep.app/contact. Describe what happened, when it happened, the information involved, and the outcome you are seeking. We will acknowledge the request and aim to respond within 30 days. If the Privacy Act 1988 applies to the issue and it remains unresolved, you may be entitled to contact the Office of the Australian Information Commissioner.