Last updated: August 2026
This summary is here for clarity. The full sections below are what applies.
Account information. Your email address. If you sign in with Google, your name and profile picture.
Financial information you enter. Bills, income, transactions, savings goals, debts, accounts and budgets.
Bank connection information. If you choose to connect a bank account, we receive account balances, transaction history, the institution name and a masked account number. We never receive or store your online banking username or password — that connection is handled entirely by Stripe.
Business information. If you use business features, the bookkeeping records, invoices and business accounts you create.
Payment information. Handled by Stripe. Duezy never sees or stores your full card number.
Usage and diagnostic information. Anonymous events about which parts of the app are used, and technical details when something goes wrong. Both are deliberately configured to exclude your financial data — see sections 4 and 8.
We do not use your data for advertising. We do not sell it. We do not use your financial data to train AI models.
Duezy is local-first. Your data is stored on your own device, in your browser's local database, and the app works without a connection. A copy is synced to our database so that you can use Duezy on more than one device and so your data survives losing a phone.
Synced data is held with Supabase. It is encrypted in transit and at rest, and each account's data is isolated from every other account by row-level security enforced at the database.
Our providers store data in the United States. If you use Duezy from outside the United States, your information is transferred there.
We do not sell your data, and we do not share it for anyone else's marketing. We do rely on a small number of companies to operate Duezy. They process data on our instructions and for no other purpose. This is the complete list:
Supabase — Database and authentication
Your account, and the financial data you choose to sync across devices.
Stripe — Payments and bank connections
Your billing details and subscription status. If you connect a bank, Stripe also handles that connection and passes us balances and transactions. Duezy never sees or stores your card number or your bank login credentials.
Netlify — Hosting
Serves the app and processes requests to it, including standard server logs.
Resend — Email delivery
Your email address, for account and service emails.
Anthropic — AI features
If you use an AI feature, the financial information relevant to that request is sent to Anthropic to generate a response. This happens only when you use those features.
PostHog — Product analytics
Anonymous usage events — which screens are reached and which actions occur. Configured to send no financial data: automatic capture of page content is switched off, session recording is switched off, and only a fixed, pre-approved list of events can be sent.
HeyCatch — Marketing analytics
Usage of our PUBLIC marketing pages only — which pages are viewed and what is clicked there. It is deliberately switched off once you sign in, and never runs inside the app itself, so it does not see your financial data.
Sentry — Error monitoring
Technical diagnostics when something breaks — error messages and code locations. Configured to strip anything resembling an amount, an account number or an email before it is sent.
We may also disclose information if required by law, or to investigate suspected fraud or abuse of the service. If Duezy were ever sold or merged, your data could transfer to the new owner, and we would tell you before that happened.
Some Duezy features use AI to categorise transactions or offer suggestions about your budget. When you use one, the financial information relevant to that request is sent to Anthropic to generate a response. This happens only when you use those features, and only with the information that request needs.
Your financial data is not used to train AI models, by us or by Anthropic.
AI output can be wrong. It is a suggestion, not advice — see the Terms of Service.
If you join or create a household, the members of that household can see the shared financial data within it. That is the purpose of the feature, but it is worth stating plainly: sharing a household means sharing that data with the people in it.
If a household is disbanded, or you are removed from one, the shared data is removed from your account and from the accounts of former members.
We keep your data for as long as your account exists. If you delete your account, your financial data is deleted from our systems. We may keep a minimal record of the deletion itself, and records we are required to keep for tax and accounting purposes, such as invoices.
Duezy uses local storage and IndexedDB on your device to hold your data for offline use. We use session cookies for authentication — these keep you signed in and nothing else.
We do not use tracking or advertising cookies. This is a deliberate commitment rather than an accident: our analytics are configured to use local storage instead of cookies, with automatic content capture and session recording both switched off, specifically so this stays true.
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to how it is used. These rights are available to you regardless:
We will not treat you differently for exercising any of these rights. We do not sell personal information, so there is nothing to opt out of.
Data is encrypted in transit and at rest. Accounts are isolated from one another at the database level. You can add a PIN lock and multi-factor authentication in Settings.
No service can promise perfect security. If a breach affected your personal information, we would notify you and the relevant authorities as required by law.
Duezy is not intended for anyone under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it.
We may update this policy. If a change is significant we will tell you in the app before it takes effect. The date at the top always reflects the current version.
For privacy questions, data requests, or anything in this policy, email privacy@duezy.finance.
Duezy is operated by Duezy Finance, United States.