Privacy Policy

DutyRelay ("we", "us") operates the DutyRelay service. This policy explains what personal data we collect, why we use it, and the rights you have. For any privacy question, contact dutyrelay@inbox.lv.

• Account data: email address, name (if you provide one), password (stored as a hash), account status.
• Consent records: timestamps of when you accepted the Terms and Privacy Policy and confirmed your age.
• Trusted contacts: names and contact channels (e.g. email, phone, push) you add for your backup plans.
• Plans and tasks: the plans, tasks, messages, deadlines, and instructions you create.
• Invite and task tokens: unique links used to identify recipients securely.
• Activation and notification logs: records of when plans were activated, notifications sent, delivery status, and responses.
• Authentication logs: sign-in events, IP addresses, and user agents for security.
• Technical logs: error reports, performance data, and basic device/browser info.
• Billing status: if paid plans are added and you subscribe, we will store subscription status through our payment processor (e.g. Stripe). Card details are handled by the processor, not by us.

• To create and secure your account and let you sign in.
• To let you build plans, add contacts, and assign tasks.
• To send notifications (push, email, SMS) when you activate a plan.
• To keep the service secure, detect abuse, and enforce rate limits.
• To provide customer support.
• To process payments and manage subscriptions, if applicable.
• To comply with legal obligations.

• Contract: to provide the service you signed up for.
• Legitimate interests: to secure the service, prevent abuse, and improve reliability.
• Consent: where required, for example for non-essential cookies or optional communications.
• Legal obligations: to meet tax, accounting, or lawful information requests.

• Backend hosting and database: Supabase (via the Lovable Cloud platform), which stores account data, plans, tasks, and logs.
• Email delivery: a transactional email provider (e.g. Resend) for account and notification emails.
• SMS delivery: Twilio, when you enable SMS as a notification channel.
• Payments: Stripe, only if paid plans are enabled and you subscribe.
• Analytics: we do not currently use non-essential analytics or advertising trackers. If we add them, we will request your consent first.

Processors act on our instructions under data processing agreements and may store data in the EU, US, or other regions where they operate.

We keep account, plan, and contact data for as long as your account is active. Logs are kept for a limited period for security and support. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to meet a legal obligation.

Under the GDPR and similar laws, you have the right to: access your data, correct it, delete it, receive a portable copy, object to certain processing, restrict processing, and withdraw consent at any time. To exercise these rights, email dutyrelay@inbox.lv.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority.

Data is transmitted over TLS and stored in managed infrastructure with row-level access controls. No system is perfectly secure, but we take reasonable measures to protect your data.

DutyRelay is not intended for children under 13. If you believe a child has provided personal data, contact us and we will delete it.

We may update this policy. Material changes will be communicated by email or in-app notice.