App Privacy Policy
Effective October 16, 2026. DuoTask operates DuoTask Spark for iOS and Android. Contact: aislan@longevitytlabs.tech.
Information the app uses
Account information includes your email, name, account ID, sign-in provider and any profile photo supplied by that provider. The app stores the group memberships, tasks, assignments, rewards, photos, completion history and reward requests you create or participate in. Optional push notifications use a device notification token. Reports include the reported content and the details you submit; blocking records the affected account IDs.
Purpose and providers
We use this information to sign you in, synchronize shared groups, deliver requested notifications, provide support, and address abuse. Google Firebase provides Authentication, Cloud Firestore, Cloud Storage, Cloud Functions and Firebase Cloud Messaging. These services process technical connection and security information such as IP addresses. Google or Apple also processes your sign-in if you choose that provider.
We do not sell your information. Optional usage analytics and optional campaign measurement are separate choices, each disabled until you enable it. Usage analytics uses Google Analytics for Firebase to understand app use. Campaign measurement helps us measure and improve DuoTask advertising: on Android it sends fixed app milestones, a random installation identifier, a Meta advertising referral when present and technical information to Meta; on iOS it uses Apple's privacy-preserving SKAdNetwork reports. Neither feature sends your photos, task or reward text, account ID, name, email or invite codes. Change each choice in Settings on iOS or the You tab on Android. See the analytics and campaign measurement notice for what is collected, providers, retention and withdrawal. Group content is shared with people in your group as part of the features you choose. Reports are available to DuoTask support for moderation.
Photo previews and security
Connections to our backend use HTTPS. Current versions encrypt new reward photos on the device using a private group key that members share separately. Firebase receives the encrypted bytes; the group key is not stored there. Legacy photos are not retroactively encrypted, and profile photos and task/reward metadata are not end-to-end encrypted. Visible, Blurred and Hidden previews control presentation, not cryptographic access between members who have the key. A recipient can save a revealed image. Only share photos you have the right and consent to share.
Retention and deletion
Account and group data is retained while needed to provide the service. You can delete your account in the app or request deletion using our account deletion page. Deletion removes your authentication account, profile, authored tasks and rewards, uploaded reward photos and personal activity. Shared groups may remain for other members, with ownership transferred. A minimal account-ID deletion record is retained to prevent old sign-in tokens from restoring deleted data. Service-provider security logs and backups may remain for their applicable retention periods.
Request deletion of specific data
To delete selected DuoTask Spark data while keeping your account, email aislan@longevitytlabs.tech from your account email address. Identify the tasks, rewards, uploaded photos or activity records you want removed. Do not send your password or private photos. We may verify account ownership and will respond within 30 days. Your account and data not covered by your request remain. Other members' content is not deleted. Security records and provider backups may remain for their applicable retention periods.
Your choices
You can edit your content, leave a group, disable notifications in your device settings, report content or block a member. You may request access, correction or deletion by emailing aislan@longevitytlabs.tech; we respond within 30 days. The app is intended for adults 18 and over.
Changes
Updates to this policy will appear here with a revised effective date.