🏠 Duelhouse is built on a simple principle: your household data belongs to your household. We collect only what we need, we never sell it, and you can delete all of it at any time.
1. Who we are
Duelhouse is a household chore-tracking app operated as a sole proprietorship based in Sweden. We are the data controller for personal data processed through duelhouse.app.
For any question about your data, contact duelhouseapp@proton.me.
2. What data we collect
Account data
- Email address — used to create, verify and recover your account
- Password — stored only as a secure hash, which we cannot read
- Display name and chosen avatar
Household data
- Household name, rooms and the chores you set up
- Names and avatars of household members you add, including members who have no account of their own
- Chore completions, including who completed each one and when
- Points, streaks and badges
- Shopping list items
What we do not collect
- Location or GPS data
- Device identifiers or advertising IDs
- Browsing history outside the app
- Contacts, photos or files
We use no third-party analytics, advertising networks or tracking pixels.
3. Members added by someone else
Duelhouse lets you add household members who do not have their own account — a housemate who has not signed up yet, or a child. For those members we store only a name, an avatar, and their chore activity.
If you add someone this way, you are responsible for making sure they are content to be included. Any member can later claim their own account, or ask you or us to remove them entirely.
4. Why we collect it (legal basis)
Contract performance — Art. 6(1)(b) GDPR
Your email and household data are required to provide the service: creating your account, syncing your household across devices, and recording chores.
Legitimate interests — Art. 6(1)(f) GDPR
We keep anonymised, aggregated statistics — such as household size and number of chores completed — after account deletion, to understand how the product is used. This data cannot identify you.
5. How we store your data
Your data is stored in Supabase, a hosted PostgreSQL database. It is encrypted in transit over HTTPS and encrypted at rest.
The app is hosted by Netlify, which may keep anonymised access logs for security purposes.
We also store a small amount of data in your browser's local storage: your login session, and a cached copy of your household so the app opens quickly. This is essential to the app working and is never used for tracking. Clearing your browser data removes it.
6. How long we keep your data
- Account and household data — until you delete your account
- Anonymised statistics — indefinitely, as they cannot identify you
- Server logs — 30 days maximum
7. Your rights under GDPR
- Access — request a copy of the data we hold about you
- Rectification — correct anything inaccurate
- Erasure — delete your account and personal data, available in the app under Settings → Delete my account
- Restriction — limit how we process your data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interests
Email duelhouseapp@proton.me to exercise any of these. You also have the right to complain to a supervisory authority — in Sweden, Integritetsskyddsmyndigheten (IMY).
8. Data sharing
We never sell, rent or share your personal data for marketing. We share it only with:
- Supabase — database provider, acting as a data processor
- Netlify — hosting provider, acting as a data processor
- Law enforcement, only where legally required
9. Children
You must be at least 13 years old to create your own Duelhouse account.
Children may take part in a household as members added by a parent or guardian, without an account of their own. In that case the parent or guardian controls the account and is responsible for the data entered about their child. We do not knowingly allow anyone under 13 to register directly.
If you believe a child under 13 has created an account, contact us and we will remove it.
10. Changes to this policy
We may update this policy as the product develops. If we make significant changes we will notify active users by email, and the date at the top of this page will always show the current version.
📬 Contact us
For privacy questions, data requests or concerns:
We aim to respond within 5 business days, and are legally required to respond within 30 days for GDPR requests.