Privacy policy

Who runs Duely

"Duely" means the website at heyduely.com and the Duely app for iPhone and Android; "we" and "us" mean the people who run it. You can reach us at hello@heyduely.com.

What we collect and why

• Your email address, to sign you in and to send you sign-in codes and, if you leave them on, reminder emails.
• Your settings: your time zone (renewal dates and reminder times follow it) and whether email reminders are on.
• The subscriptions you add: name, category, plan, price and currency, how often it bills, the next billing date (or, for a plan that doesn't renew on its own, the day it ends), its status (active, free trial, paused or cancelled), whether it renews on its own, and how many days ahead you want a reminder. Optionally also a payment method note, the email address you use with that service, and notes. We use these to show what you spend and to remind you before renewals, and before plans that don't renew end.
• Receipts you send us. If you forward a receipt to your private Duely forwarding address, or paste one in, we keep its text (up to 20 KB), who sent it, its subject and the subscription Duely reads from it, as a draft for you to check. Nothing becomes a subscription until you confirm it. Duely reads only the text of a forwarded email: attachments are never stored and images in it are never loaded. Forwarded emails that turn out to be one-off purchases are dropped without being kept.
• Screenshots you choose. If you add subscriptions from a screenshot of your App Store or Google Play subscriptions page, the picture is sent to Anthropic to be read and is never stored. We keep only the subscriptions found on it, each as a draft for you to check, with a line saying what was read.
• Your forwarding address, created the first time you open receipt import. You can replace it at any time; mail to the old one is then refused.
• Your Gmail, only if you connect it. If you tap Auto-fetch with Gmail and allow it on Google's page, Duely gets read-only access to that Gmail. We keep the Gmail address and the access token Google gives us, encrypted, plus when we last looked. Every hour Duely searches it for subscription receipts, renewals and trial notices (the same search as the Gmail filter below; never sign-in codes or security emails), and each new one it finds becomes a draft exactly like a forwarded receipt. No other email is opened, and Duely can't send, change or delete anything in your Gmail.
• Gmail's forwarding confirmation. If you set Gmail to forward receipts to Duely, Gmail sends a confirmation code and link to your Duely address. We keep the latest one for 7 days so you can finish the setup.
• Phones with notifications on: the push token Expo gives the Duely app on your phone, and whether it's an iPhone or Android phone.
• Sign-in records: a one-way hash of each sign-in code and of each session token, with when it expires.
• Counters for limits, such as how many receipts you pasted or forwarded today, so nobody can overload the service.

Like any website, Duely's hosting provider sees your IP address and basic details of each request (such as the address requested and your browser type) to serve and protect the site, and we keep error logs to fix problems.

What's encrypted

These are encrypted with AES-256-GCM before they are saved, so the database itself holds only scrambled text:

• a subscription's payment method, account email and notes;
• a receipt's text, sender, subject and excerpt, and any note Duely adds about it;
• Gmail's forwarding confirmation code and link;
• a connected Gmail's address and access token.

Sign-in codes and session tokens aren't stored at all, only one-way hashes of them. The encryption key is kept apart from the database, as a secret setting of the Duely server. This isn't end-to-end encryption: the server uses the key to open these fields when it shows them to you.

Everything else (your email address and settings, each subscription's name, plan, price and dates, and the subscription suggested from a receipt) is stored without this extra layer, because Duely needs to read it to add up totals and send reminders. Within Duely, only you can see any of it.

What we never collect

• Access to your inbox, unless you connect Gmail. Otherwise Duely never connects to your email account: only the emails you choose to forward (for example with a Gmail filter you set up) or paste in ever reach us. A connected Gmail is only searched for receipts, as described above, and you can disconnect it at any time.
• Full card numbers, bank logins or passwords. Duely never asks for them, and there are no passwords: you sign in with a code sent to your email. The payment method field is for a short reminder such as "HDFC card ••1234" or "UPI", so please don't type a full card number there. If a receipt you send shows payment details, they're stored encrypted with the receipt.
• Tracking. There are no analytics, advertising or tracking scripts on the website or in the app, and we don't sell or rent your data or share it for advertising. The website loads nothing from other websites: logos of well-known services are fetched by our server from each service's own website (or, if that fails, from Google's favicon service), stored, and served from heyduely.com, so those sites never learn anything about you.

Who else handles your data

Duely relies on a few services to run. Each gets only what it needs for its job:

• Cloudflare hosts the website and the server, stores the database, and receives the emails sent to your forwarding address (Cloudflare Email Routing) to hand them to Duely. It holds everything listed above, with the encrypted fields still encrypted, and sees your IP address when you use Duely.
• Resend sends our emails. It gets your email address and the content of each email: your sign-in codes, and reminders listing the names, prices and renewal dates of your subscriptions.
• Expo, only if you turn on push notifications in the app. It gets your phone's push token and the text of each notification (subscription names, prices and renewal dates), and passes them to Apple's or Google's push notification service to reach your phone.
• Anthropic, only if we turn on reading receipts with Claude. Receipts are otherwise read by Duely's built-in rules. If we turn on reading receipts with Claude, receipts the built-in rules can't read confidently are sent to Anthropic's API: the receipt's text (up to 20 KB), sender, subject and date. Anthropic sends back the service, price and dates it finds. Receipts the rules read confidently, and ones they recognise as one-off purchases, are never sent. A screenshot you choose to add subscriptions from is always read this way, and only works while reading with Claude is on.
• Google, only if you connect Gmail. You sign in on Google's own page, and Duely uses Google's Gmail API to search for and read receipts. Duely's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: it is used only to find your subscriptions, never for advertising, never sold, and no person reads it except where you ask us to help, the law requires it, or for security.

How long we keep things

• Your account, settings and subscriptions: until you delete them or your account.
• Receipt drafts: until you confirm or dismiss them. You can have at most 100 waiting; a new one replaces the oldest.
• Gmail's forwarding confirmation: 7 days, and only the latest one.
• A connected Gmail's access: until you disconnect it or delete your account. Either way we ask Google to cancel the access and delete the token. You can also remove Duely in your Google Account's security settings.
• Sign-in codes expire after 10 minutes. A code's record is deleted when you sign in, or within two hours if you don't.
• Sessions last 30 days from when you sign in. Signing out ends one straight away, and expired ones are deleted within the hour.
• Records of which renewals we've reminded you about: deleted a few days after the charge date.
• Phones with notifications on: until you turn notifications off or sign out on that phone, or Expo tells us the app is no longer on it. You can have up to 10 phones; adding another drops the one used longest ago.
• Daily counters: deleted within three days.

Deleting your account

Delete your account at any time in Settings, in the Duely app or on heyduely.com. It deletes your account straight away, together with your subscriptions, reminder records, receipt drafts, Gmail confirmation, forwarding address, sessions and the phones registered for notifications. Reminders stop at once. This can't be undone. You can also email hello@heyduely.com from your account's address and we'll delete it for you.

Daily counters linked to your account expire on their own within three days. Cloudflare keeps a recovery history of the database for up to 30 days, after which deleted data is gone for good.

Push notifications

Push notifications are off until you turn them on in the Duely app and allow them on your phone. Then Duely sends renewal reminders to that phone on the days you chose for each subscription (and, for a plan that doesn't renew on its own, before it ends), whether or not email reminders are on. A notification shows the subscription's name and its price and renewal date, or the day it ends, so it may be visible on your lock screen. Turning notifications off in the app, or signing out, removes the phone from your account. A phone gets notifications for one account at a time.

Cookies

The website uses a single cookie, duely_session, set when you sign in. It keeps you signed in for up to 30 days, can't be read by scripts on the page, is sent only over a secure connection to heyduely.com, and is removed when you sign out. There are no analytics, advertising or third-party cookies. The app keeps its session in your phone's secure storage (the iOS Keychain or Android Keystore) instead.

Children

Duely is meant for people aged 18 and over and isn't directed at children. If you believe a child has given us their data, write to hello@heyduely.com and we'll delete it.

Your choices

You can see and change everything you've added in Duely at any time, turn email reminders or push notifications off, replace your forwarding address, and delete your account. For anything else about your data, such as a question or a complaint, write to hello@heyduely.com.

Changes to this policy

If we change this policy, we'll update it here and change the date at the top. If a change affects how we use data you've already given us, we'll tell you by email before it takes effect.

Contact

Questions about this policy or your data: hello@heyduely.com. The rules for using Duely are in the Terms of use.