Privacy Policy

1. Introduction

Duesy is an assistant for invoices, bills, contracts and subscriptions. Duesy reads the documents you add, recognises important dates and amounts, and reminds you before a deadline passes.

Duesy never makes decisions for you. Every reminder, calendar entry or suggestion stays under your control.

This Privacy Policy explains which information we process, why, who we share it with, how long we keep it and which rights you have under the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Who we are

Duesy is the controller of the personal data described in this Privacy Policy.

• Business name: Duesy
• Dutch Chamber of Commerce (KVK) number: 88046443
• VAT number: NL004531116B90
• Email: privacy@duesy.io
• Website: https://duesy.io

3. Scope

This policy applies to the Duesy website, the Duesy mobile apps, document scanning and uploading, forwarded emails, the AI features, reminders and notifications, the calendar feed, shared households, Premium subscriptions and customer support.

4. Minimum age (16+)

A Duesy account is intended for people aged 16 and over. We do not offer accounts with their own login to children under 16, and we ask you to confirm your age when you create an account or accept an invitation.

Duesy makes a clear distinction between two things:

• A Duesy user with their own login — an account with an email address, a password or social sign-in, personal documents and settings. Minimum age: 16.
• A household profile without a login — a name (and optionally a year of birth) that an adult adds to their household purely to organise documents, for example a child's passport expiry date. Such a profile cannot sign in, receives no notifications and has no account of its own.

If we learn that someone under 16 created an account with their own login anyway, we will remove that account. If you think that has happened, contact privacy@duesy.io.

5. Which personal data we process

5.1 Account information

Name, email address, encrypted password or sign-in provider (Google or Apple), language, region, time zone, app settings, subscription status and confirmation that you are 16 or older.

5.2 Documents you add

Invoices, bills, payment reminders, contracts, insurance and tax letters, receipts, warranties, photos and scans, and forwarded emails including their attachments. These documents may contain personal data about you or about other people.

5.3 Special categories of data

Documents you choose to add — for example a healthcare invoice — may incidentally contain special categories of personal data under Article 9 GDPR. Duesy does not seek out such data and uses it only to deliver the feature you asked for. Please add only what you need, and be careful with sensitive information about other people.

5.4 Information extracted from documents

Supplier or organisation name, document type, title and summary, due dates and renewal dates, invoice and reference numbers, amounts and currencies, confidence scores and suggested reminders.

5.5 Financial and payment information

Duesy may read and store payment details that appear in your documents, so you can find them back and check them:

• IBAN or account number shown on the document
• Name of the account holder or payee
• Payment reference and reference numbers
• Amounts, amounts due and currency
• Due dates and renewal dates
• Payment plans and their instalments
• Whether something is marked as paid or still open

Duesy uses this information to give you an overview, to send reminders and to power features such as payment plans. Duesy is not a bank: Duesy does not execute bank transfers, direct debits or any other payment on your behalf. You always make the payment yourself, outside Duesy.

5.6 Email forwarding

You can forward emails to your personal Duesy address. We store the sender addresses you authorised so we can verify that a forwarded email really comes from you, plus a technical log of received messages for troubleshooting and abuse prevention.

5.7 Camera, photos and voice

Camera access is used only when you scan a document yourself. Duesy accesses only the files you select. Voice input is converted into text to complete the action you asked for; the audio is not kept as part of your account.

5.8 Notifications and reminders

Reminder moments, delivery status, and — if you enable push notifications — a device token that identifies your device to the notification service.

5.9 Technical and diagnostic data

IP address, device and browser type, app version, timestamps, security logs, and error reports when something goes wrong. Error reports are filtered before they are sent so document content and other sensitive values are not included.

6. What happens to your documents

It is important to distinguish four different things:

• The original file (the PDF, photo or attachment). This is stored temporarily so it can be read and so you can review the result. Once you approve or reject the result the file is deleted, and an automatic sweep removes any remaining file within roughly 24 hours of upload.
• The extracted information (dates, amounts, supplier, reference numbers). This stays in your account until you delete it or delete your account.
• A technical fingerprint (hash) and metadata such as file type, size and upload date. These are kept to recognise duplicates and for security. They do not contain the content of the document.
• Items you keep. Reminders, payment plans and other entries you saved stay in your account until you remove them.

In other words: Duesy is not a document archive. Duesy keeps what you need to stay on top of a deadline, not the original file.

7. Households and sharing

Duesy can be used together with the people you share your administration with. One account belongs to at most one household.

• The main user creates the household and is the only one who can invite people. An invitation is sent to an email address and expires after a while.
• Invited adults get their own Duesy login and their own private space inside the household.
• For every item and document you choose who may see it: only you, the adults in your household, or everyone in your household.
• Items you keep private are not visible to other members.
• Members can see a shared activity log showing which changes were made in the household and by whom.
• Household profiles without a login (for example a child) are administrative entries only: a name and optionally a year of birth. They cannot sign in.
• If someone leaves or is removed from the household, they lose access to items shared inside that household. Items they own themselves stay with them.

Only share what the other members really need to see. Once someone can see a shared item, they can read the information in it.

8. How AI is used

To read a document, Duesy sends the necessary content through the Lovable AI gateway to Google Gemini. The result comes back as structured information (dates, amounts, supplier) that you can review and correct.

AI is used to recognise document types, extract dates and amounts, write short summaries and suggest reminders, and to answer your questions about your own documents.

Duesy does not use your documents to train its own AI models, and we do not sell your data. We use the AI providers described below under terms intended for business use, in which content sent through the API is not used to train general-purpose models. We cannot independently verify what a third-party provider does inside its own systems; if a provider's terms change, we will update this policy.

AI can make mistakes. Always check an amount, an IBAN, a reference or a due date before you rely on it.

9. Calendar link

You can display your Duesy dates in an external calendar (Apple, Google, Outlook). Duesy generates a unique, hard-to-guess link for that.

• Anyone who has the link can read the information in the feed: titles, suppliers and dates of your reminders. No login is required.
• So treat the link as a secret, just like a password.
• In Settings you can generate a new link or switch the calendar link off entirely. The old link then stops working immediately.

10. Connecting your Outlook mailbox

When you connect Outlook, you give Duesy permission through Microsoft to read email messages. Duesy limits the use of this access to new messages in your Inbox from the moment you activate the connection. We first check limited message details to determine whether an email appears administratively relevant. Only when it is necessary for the feature you asked for do we process additional content or relevant attachments.

Signing in with Microsoft does not by itself give Duesy any access to your mailbox. Connecting Outlook is a separate, voluntary feature that requires its own consent, and you can withdraw it at any time.

• Duesy only uses messages in your Inbox folder.
• Duesy does not scan mailbox history from before the moment you connected.
• Other folders and data such as Sent, Archive, Calendar, Contacts and files are not used by this integration.
• We first read limited message details (sender, subject, receipt time) for a relevance check.
• Only when a message looks administratively relevant do we process further content or a relevant attachment.

Original temporary bytes of an email or attachment fall under Duesy's existing purge: they are removed automatically within roughly 24 hours. Information extracted from them — proposals, items, dates and amounts — can exist for longer, in the same way as for documents you add yourself.

Microsoft acts here as the provider of your own mailbox; the connection is made on your instruction. The Lovable connector gateway is used to establish and refresh the connection securely on our behalf. This is described in our service-provider structure and does not automatically make every party involved a subprocessor of Duesy.

• You can disconnect Outlook at any time in Settings.
• Disconnecting stops all future synchronisation immediately.
• Disconnecting does not automatically delete proposals or items that were already created; you remove those through the existing delete options.

11. Why we process your data

• Creating your account and signing you in
• Reading documents and extracting relevant information
• Creating and delivering reminders and notifications
• Providing the calendar feed you requested
• Making sharing inside a household possible
• Processing payments and subscriptions
• Security, abuse prevention and troubleshooting
• Complying with legal obligations
• Checking a connected Outlook mailbox for administratively relevant email

12. Legal basis (GDPR)

• Performance of a contract — your account, document processing, reminders and sharing.
• Legitimate interests — security, abuse prevention, error diagnostics and improving reliability, weighed against your privacy.
• Consent — camera, microphone, notifications and the calendar link. You can withdraw consent at any time.
• Legal obligation — tax and accounting rules, and lawful requests from authorities.

13. Service providers

Duesy uses a small number of external services that actually process personal data of Duesy users. Each of them acts under a processing agreement and may only use the data for the stated purpose.

The Duesy database and the temporary document storage are hosted in the European Union (Ireland). Error reports sent to Sentry are filtered before they are sent, so they do not contain document content, and they are kept for a maximum of 30 days before they are deleted automatically.

We do not sell your personal data and we do not use it for advertising.

14. International transfers

Some providers process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, adequacy decisions and additional technical measures.

15. How long we keep data

• Original documents — temporarily, until the result is reviewed and in any case removed by an automatic sweep within roughly 24 hours of upload.
• Extracted information, items and reminders — as long as your account exists, or until you delete them yourself.
• Account data — as long as your account exists.
• Technical logs and error reports — for a limited period, for security and troubleshooting. Error reports in Sentry are deleted automatically after 30 days.
• Duesy's own invoicing and accounting records — kept for the statutory retention period that applies to Duesy as a company (in the Netherlands normally seven years). This applies only to Duesy's own administration of your subscription. It does not apply to your documents, your IBAN, your payment plans or other information extracted from your documents.

16. Deleting your account

You can delete your account yourself in the app, under Settings → Account & data. See also our public page explaining how to delete your account.

When you confirm the deletion, your account and the associated account data are removed from our active systems straight away. That includes your profile, your items and reminders, your document records and any remaining stored files, and your membership of a household.

Two exceptions apply. Data that we are legally required to keep — such as Duesy's own invoicing records for a paid subscription — is kept for the applicable statutory period. And after deletion, limited data may remain present for a time in technical backups or recovery mechanisms of our infrastructure providers. Those copies are not used for normal processing and disappear in line with the applicable retention and recovery cycles of the provider concerned. This concerns database data; the original document files in our document storage are removed by Duesy's own automatic purge, and are not restored by database backups.

If you are the main user of a shared household, you will be asked first to hand the household over to another adult or to remove it together with your account.

17. Your rights

• Access to the data we hold about you
• Rectification of incorrect data
• Erasure of your account and data
• Restriction of processing
• Data portability
• Objection to processing based on legitimate interests
• Withdrawal of consent you have given

Email privacy@duesy.io to exercise these rights. You also have the right to lodge a complaint with your national supervisory authority; in the Netherlands that is the Autoriteit Persoonsgegevens.

18. Cookies and local storage

Duesy uses no advertising cookies, no tracking cookies and no third-party analytics. What we do store on your device is strictly necessary or functional:

• Sign-in session — strictly necessary, so you stay signed in.
• Language and region — functional, stored in a cookie and in local storage so the right language is shown immediately.
• Interface preferences — functional, for example dismissed tips and the onboarding you already completed.
• Technical notification data — functional, so a tapped notification can open the right screen.

Because we only use strictly necessary and functional storage, Duesy does not show a cookie consent banner.

19. Security

Traffic is encrypted in transit and data is encrypted at rest by our infrastructure provider. Access to your data is enforced at database level, so members of one household can never reach another household's data. Access to production systems is limited to those who need it.

20. Changes to this policy

We update this Privacy Policy when the product changes. The version and date at the top of this page always show the current version. For significant changes we will notify you in the app or by email.

21. Contact

Questions about privacy? Email privacy@duesy.io. General support: support@duesy.io.