Privacy Policy
At DuoNiche, your privacy matters. This policy explains what data we collect, how we use it, how long we keep it, and your rights.
Last updated: 30-04-2026
1. Data We Collect
We may collect and process the following data:
- Account identifiers: internal user ID, public support handle, Telegram ID, Apple ID, Google ID, email address, guest installation identifier, and similar login identifiers.
- Profile data: name, username, avatar URL, language preferences, onboarding answers, and app settings.
- Learning activity: exercises, answers, attempts, session statistics, streaks, progress reports, selected topics, and similar app usage data.
- Feedback: feedback reason, related exercise, optional user comment, and timestamps.
- Payment and subscription data: subscription status, plan, billing period, payment provider, provider transaction identifiers, and payment history needed for billing, refunds, fraud prevention, accounting, and support.
- Support communications: messages you send to support and metadata needed to resolve your request.
- Technical and security data: logs needed to operate the service, prevent abuse, investigate incidents, and protect users.
We do not intentionally collect special categories of personal data, such as health, biometric, political, religious, or precise location data.
2. Purpose of Data Use
We use your data to:
- provide and personalize language learning features;
- authenticate your account;
- save progress, preferences, and learning history;
- generate progress reports;
- process subscriptions and manage access;
- provide customer support;
- detect abuse, fraud, technical errors, and security incidents;
- improve the service and user experience;
- comply with legal, accounting, tax, and regulatory obligations.
3. Legal Bases
Where GDPR applies, we process personal data based on one or more of the following legal bases:
- performance of a contract, to provide DuoNiche features and paid access;
- legitimate interests, including service security, support, abuse prevention, product quality, and business operations;
- legal obligations, including accounting, tax, and compliance requirements;
- consent, where required by law.
4. Data Storage
Data is stored securely in the European Union where possible. Some service providers may process data outside the EU. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent protections.
Inactive accounts may be deleted or anonymized after 12 months.
5. Payments and Subscriptions
Depending on the platform, payments may be processed by Telegram, Polar.sh, Apple App Store, Google Play, or another payment provider shown at checkout.
We do not store full payment card details. Payment providers may process your payment details under their own terms and privacy policies.
Deleting your DuoNiche account does not automatically cancel an active subscription managed by Apple App Store, Google Play, Telegram, Polar.sh, or another payment provider. You must cancel active subscriptions through the platform or payment provider where the subscription was started.
6. Account Deletion and Data Retention
You may request deletion of your DuoNiche account in the app or by contacting support@duoniche.com.
When you request account deletion, we disable the account, revoke active sessions, remove external login identifiers, and delete or anonymize profile data and app data that is no longer needed.
For support, security, fraud prevention, legal claims, billing, accounting, tax, and regulatory compliance, we may retain limited records after account deletion.
Retention categories:
| Data category | What happens after deletion request | Retention period |
|---|---|---|
| External login identifiers | Telegram ID, Apple ID, Google ID, email, guest installation identifier, username, name, avatar, and profile data are deleted or anonymized. | Immediately or within 30 days |
| Learning activity | Exercise attempts, session data, progress reports, preferences, onboarding data, and app settings are deleted or anonymized. | Immediately or within 30 days |
| Feedback | Free-text feedback comments are deleted. Feedback reason, exercise reference, internal user ID, and public support handle may be retained for product quality, abuse investigation, and support history. | Up to 5 years after deletion, unless a longer period is required for an open dispute, incident, or legal obligation |
| Account deletion record | Internal user ID, public support handle, deletion status, and deletion timestamps are retained so we can prove and support deletion requests. | Up to 5 years after deletion |
| Support communications | Support messages may be retained to resolve requests, investigate abuse, and defend legal claims. | Up to 24 months after ticket closure, or up to 5 years if related to a dispute or incident |
| Security and fraud logs | Logs needed to protect the service, investigate abuse, prevent fraud, and maintain system integrity may be retained. | Up to 24 months, or longer if required for an active investigation |
| Billing, accounting, tax, refund, and dispute records | Transaction records, invoice-related data, subscription events, provider transaction IDs, and accounting records may be retained where required by law or needed for refunds, chargebacks, fraud prevention, or audits. | Up to 10 years, or longer if required by law or an active dispute |
| Aggregated or anonymized analytics | Data that no longer identifies a user may be retained for product analytics and service improvement. | Indefinitely |
| Backups | Deleted data may remain in encrypted backups until backups expire. If a backup is restored, deletion requests are re-applied where technically possible. | Up to 90 days, unless a longer disaster-recovery period applies |
After account deletion, you will no longer be able to sign in with the deleted account. If you contact support, we may use your public support handle to locate the deletion record and retained support history.
7. Your Rights
Where applicable, you may request:
- access to your personal data;
- correction of inaccurate data;
- deletion of your data;
- restriction or objection to processing;
- data portability;
- withdrawal of consent where processing is based on consent.
To exercise your rights, contact support@duoniche.com.
We may refuse or limit a deletion request where retention is required for legal obligations, security, fraud prevention, billing, accounting, dispute resolution, or the establishment, exercise, or defense of legal claims.
8. Cookies and Analytics
We do not use tracking cookies. Essential analytics, such as page views and service reliability metrics, are processed in anonymized or aggregated form where possible and do not identify users.
9. Data Security
Communications are encrypted. We apply technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.
10. Policy Acceptance
By accessing or using DuoNiche, you acknowledge that you have read, understood, and agreed to this Privacy Policy.
11. Contact
Company Name: Finglobal Ltd.
Company Number: 207908823
Registered Address: Bulgaria, Burgas, zh.k. Slaveykov, bl. 173, 7th floor, ap. 11
Email: support@duoniche.com