Duesy Privacy Policy

Effective 2026-07-27 · Plantburgh LLC

The short version: Duesy collects nothing. There is no account, no server operated by us, no analytics, no ads, and no tracking SDKs. Everything you enter stays on your phone. We (the developer) cannot see your ledger, your contacts, your calls, or your phone number.

Data stored on your device

Your ledger — people, debts, settlements, notes, limits, phone numbers, photos and receipts you attach — lives in a local database encrypted at rest. The encryption key is kept in your device's secure hardware. You can additionally require fingerprint / face unlock to open the app.

Contacts (optional)

If you grant contacts access, Duesy reads names, phone numbers, and photos only to copy the ones you pick into your local ledger. Access is read-only — Duesy never modifies a contact — and nothing is uploaded or matched against any external service. Revoking the permission or deleting a contact leaves your ledger intact.

Incoming calls (optional)

If you make Duesy your call-screening app, the operating system shows it each incoming number so it can display your own note about that caller — the standing you recorded. Matching happens entirely on the device. Duesy never blocks, filters, or rates calls, keeps no general call log, and never transmits a number anywhere. A short in-app list of unrecognised callers (so you can link a new number to someone) is capped, expires on its own, and can be turned off.

After a call (optional)

With phone-state permission, Android tells Duesy only that a call started and ended — never the number — so it can offer a "did they pay?" reminder after a real conversation. This stays on the device and can be declined; the feature then falls back to a simple timer or nothing.

Lock-screen privacy

By default a call notification shows only a name on the locked screen; amounts appear after you unlock. You can show more, or nothing but the app name, in Settings.

Payment apps and shared receipts

Pay buttons open Venmo / Cash App with details prefilled — those apps operate under their own policies; Duesy sends them nothing beyond the link you tap. If you share a payment confirmation into Duesy, it is parsed on the device and saved only if you confirm it.

Backups and sharing with friends

Backups exist only when you export one; they are encrypted with a passphrase only you know and go wherever you choose to share them. Sync updates and signed statements travel directly from you to your friend through apps you pick (Messages, QR, etc.) — no server of ours is involved, and we never receive a copy.

Purchases

Subscriptions are processed by Google Play or the Apple App Store under their own privacy policies. Duesy only learns whether a subscription is active.

Data retention and deletion

We retain nothing, so there is nothing for us to delete. To erase all app data, delete the app (or clear its storage). Backups you exported are yours to delete wherever you saved them.

Children

Duesy is not directed at children under 13 and collects no data from anyone.

Changes

If this policy changes, the updated version is posted at this address with a new effective date, and the app tells you what changed after an update. Since Duesy collects nothing, changes would only ever describe new on-device features.

Contact

Plantburgh LLC — contact@plantburgh.com