Skip to content
Legal

Privacy Policy

Last updated: September 27, 2026

At duqe, we take your privacy seriously, and we don’t mean that as a throwaway line: the app is designed so that your data stays with you, on your device. This policy explains, openly, what data is processed when you use our website and our app, for what purpose, and what your rights are.

1. Overview

  • Your content stays on your device. The tasks, notes, photos, audio recordings, habits, and everything else you create in the app are never sent to any server.
  • We don’t track you in the app. No behavioral analytics, no ads, no trackers, no profiling. We don’t use any third-party SDKs that collect your activity.
  • We don’t have our own servers. There is no duqe infrastructure that receives or stores your information.
  • The app connects to the internet in only these three ways, all of them through Google:
  1. Premium plan purchases (through Google Play), only if you decide to buy.
  2. App updates (through Google Play).
  3. Error reports (through Firebase Crashlytics), only if you turn them on: they’re off by default, and we ask you first.
  • The website (duqe.app) processes basic data when you write to us through the contact form or when you accept analytics, as explained below.

2. Data controller

  • Controller: Luis Manuel Navarro
  • Email: info@duqe.app
  • Website: https://duqe.app

3. What this policy covers

duqe has two separate parts, each handling data differently:

  • The website (https://duqe.app): the product’s information site, with its blog and contact form.
  • The app (duqe for Android, available on Google Play): the productivity launcher you install on your phone.

We cover them separately so it’s clear what happens in each case.

4. When you use our website (duqe.app)

4.1 Contact form

If you write to us through the form on the Help page, we process the data you give us (your name, your email address, and the content of your message) for the sole purpose of answering your question.

  • Legal basis: your consent when you send us the message (Art. 6(1)(a) GDPR).
  • Retention: we keep your message for as long as needed to deal with your question and, after that, for as long as any liability could arise from it. Once that period ends, it is deleted.
  • Recipients: your message is handled through the controller’s email. It is not shared with third parties.

4.2 Website analytics

We use Google Analytics 4 (provided by Google Ireland Ltd.) to understand, in aggregate, how the website is used so we can improve it. Your IP address is anonymized.

  • Legal basis: your consent, which we ask for in the cookie banner (Art. 6(1)(a) GDPR). Analytics stays off until you accept it.
  • You can withdraw your consent at any time from the website’s cookie preferences.

4.3 Cookies

How the website uses cookies is described in our Cookie Policy, linked in the footer. The app, being a native application, doesn’t use cookies.

5. When you use the duqe app

5.1 What we DON’T collect

The app does not collect, store remotely, or transmit any of the following data to duqe or to any third party:

  • The content of your tasks, notes, habits, events, photos, or audio recordings.
  • Device identifiers (IMEI, MAC, Android ID, advertising ID).
  • Your location (whether by GPS, network, or IP).
  • Your contact list.
  • Your list of installed apps (the app does read it on your device to show the app drawer, but it doesn’t send it anywhere).
  • Your browsing history, system calendar, texts, calls, or communications.
  • Biometric data.
  • Payment or financial data (purchases are processed by Google Play).
  • Usage metrics, behavioral statistics, or profiling (the app has no analytics of any kind).

The app’s only connections to the internet are the three described in sections 5.4, 5.5, and 5.6.

5.2 What’s stored on your device

Everything you create in duqe (tasks, projects, habits, calendar events, notes, attached photos and audio, focus sessions, achievements, and your settings) is stored only in the app’s private storage, on your device. You’re the only person with access to that information.

Some particularly sensitive data is also stored encrypted (using the Android Keystore, with AES-256 encryption): the password for your encrypted backups, your premium subscription status, and the key for syncing with your computer.

You’re free to write whatever you like in your tasks and notes; that content never leaves your device unless you choose to export it (see backups and sync).

5.3 Permissions we ask for, and why

duqe only asks for a permission when you’re about to use a feature that needs it, never at startup, and the app keeps working if you say no (you only lose that specific feature). The main ones:

  • Camera: to take a photo and attach it to a task or entry. Photos are stored on your device.
  • Microphone: to record a voice note and attach it. The audio is stored on your device.
  • Access to images / gallery: to attach existing images or use them as your launcher background.
  • Notifications: to show you the reminders and alerts you set up.
  • Display over other apps: for the floating quick-capture button and for the focus mode screen.
  • Accessibility service (optional): if you turn on focus mode, the app uses this service only to detect which app is in the foreground and show you the block screen if you open an app you’ve added to your list yourself. It doesn’t read what’s on your screen, doesn’t read text, doesn’t access passwords, and doesn’t simulate taps.
  • Technical permissions (local Wi-Fi network access, foreground service, keeping the CPU awake, vibration, restart): needed for syncing with your computer, the focus timer, and rescheduling your reminders after your phone restarts.

You can see the full, detailed list of permissions on the app’s Google Play listing.

5.4 Premium plan purchases

The premium plan is purchased through Google Play Billing. When you buy:

  • Google handles the entire payment. duqe does not receive your name, address, email, or card details, or even which Google account you use.
  • The only thing duqe keeps, encrypted and on your device, is the type of plan you have and an opaque identifier for the transaction (a “token” that can’t be used to identify you outside Google’s ecosystem).
  • The controller for payment data is Google Ireland Ltd., under its own privacy policy: https://policies.google.com/privacy
  • Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

5.5 App updates

duqe uses Google’s official Google Play In-App Updates system to keep you on a secure, up-to-date version.

  • When you open the app, it checks with Google Play whether there’s a newer version.
  • Some updates are optional; others, when they fix critical or security bugs, may be required to keep using the app.
  • Google Play handles the download and installation. The data exchanged is technical (the installed version and the device data needed to serve the right version) and doesn’t include your content or any data about how you use the app.
  • Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and the duty to keep software up to date for security (Art. 32 GDPR).

5.6 Error reports (Firebase Crashlytics)

To help us find and fix bugs, duqe may send automatic technical reports when the app closes unexpectedly, through Firebase Crashlytics (a Google service).

  • It’s entirely voluntary and off by default. We ask you clearly the first time you use the app, and you can turn it on or off whenever you like in Settings > Privacy > Error reports. If you don’t turn it on, absolutely nothing is sent.
  • What’s sent (if you turn it on): technical information about the crash (where in the code it happened, the type of error), the app and Android versions, the device model, the language, and an opaque installation identifier generated by Firebase. It can’t be used to identify you directly.
  • What’s NEVER sent, under any circumstances: the content of your tasks, notes, photos, or audio recordings; your name or email; advertising identifiers; or your location.
  • Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by turning the option off.
  • Processor: Google Ireland Ltd. See section 10 on international transfers and Firebase’s privacy policy: https://firebase.google.com/support/privacy

5.7 Backups

duqe includes a backup system that you control:

  • You choose when to back up and which folder to save to (local storage, or a cloud service you pick through Android itself). duqe doesn’t integrate with any particular provider and doesn’t upload anything on its own.
  • Backups can be encrypted with a password you set. You’re in control of that encryption: duqe can’t decrypt your backups without your password.
  • The app explicitly disables Android’s automatic backup, so your data doesn’t get uploaded to the cloud without you doing anything.

5.8 Syncing with your computer (Web Sync)

The sync feature connects your phone to your computer over your own Wi-Fi network, without going through any intermediate server:

  • The connection runs directly between your phone and your computer (there’s no duqe server in between).
  • It requires manual pairing (by scanning a code): without it, no connection is accepted.
  • All communication is end-to-end encrypted, so the content traveling over your network can’t be read.
  • Sync only works on your local network; no access is opened up from the internet.

6. Legal basis for processing

  • Data on your device (app): no legal basis is required on our part, because duqe neither receives nor processes it; you’re the one in control of your own information.
  • Premium plan purchases: performance of a contract (Art. 6(1)(b) GDPR).
  • App updates: performance of the contract (Art. 6(1)(b)) and the security obligation (Art. 32 GDPR).
  • Error reports (Crashlytics): your consent (Art. 6(1)(a) GDPR), which is off by default and which you can withdraw whenever you like.
  • Contact form and website analytics: your consent (Art. 6(1)(a) GDPR).

7. Your rights

You have the right to access, rectify, and erase your data, to object to its processing, to request restriction of processing and the portability of your data, and to withdraw your consent at any time.

  • In the app, you exercise these rights directly: you always have access to your data, you can edit or delete it whenever you like, export it as a backup (portability), and erase it completely by uninstalling the app (which also destroys the encrypted data). You can withdraw your consent to error reports at any time in Settings > Privacy > Error reports.
  • For the website and the contact form, you can exercise them by writing to us using the contact details in section 2.
  • For payment data, you exercise them directly with Google Play.

If you feel we haven’t handled your request properly, you can file a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es

8. Minors

duqe is not aimed at minors and doesn’t collect users’ ages. It has no social networking, chat, or person-to-person communication features. It must not be used by anyone under the minimum age set by applicable law without the consent of their parents or legal guardians.

9. Data retention

  • Data on your device: kept for as long as the app is installed, and deleted completely when you uninstall it.
  • Contact form messages: for as long as needed to deal with your question, plus the applicable legal periods.
  • Error reports (if you turn them on): Google keeps them for approximately 90 days, under Firebase’s policy.
  • Payment data held by Google: according to Google’s policy.

10. International transfers

duqe itself doesn’t make any international data transfers, because it has no servers and doesn’t receive your data.

However, if you turn on error reports in the app, or if you accept this website’s statistics cookies (Google Analytics), the relevant data is processed by Google Ireland Ltd. (European Union) and may be subprocessed by Google LLC in the United States. That transfer is covered by the European Commission’s Standard Contractual Clauses and by the EU-U.S. Data Privacy Framework (DPF), to which Google has signed up.

Transfers arising from purchases and updates are likewise governed by your relationship with Google, under the same safeguards.

11. Changes to this policy

We may update this Privacy Policy to reflect changes to the app or the website, or for legal reasons. We recommend checking it from time to time. The date of the last update appears at the top.

12. Contact

For any questions about this policy or about how your data is processed, write to us at:

  • Email: info@duqe.app
  • Controller: Luis Manuel Navarro
  • Website: https://duqe.app