Data we collect
DUO stores only the data needed to authenticate members, route billing, issue invoices, and remember progress in the current-week experience.
- Account identity, locale preference, and subscription status.
- Portuguese NIF, billing references, and watch-progress checkpoints.
How we use your data
Data is used to verify access, create and reconcile subscriptions, issue invoices, and support the watch and account experiences.
- Supabase powers authentication, profile storage, and current-week access checks.
- Watch progress is saved silently so playback can resume from the last checkpoint.
Processors and sub-processors
DUO relies on a small processor set for hosting, payments, video delivery, transactional email, invoicing, and diagnostics.
- See the public processor register for Supabase, Stripe, Mux, Resend, Vercel, Sentry, and KeyInvoice.
- Optional browser diagnostics stay disabled until cookie consent is set to Accept all.
Retention baseline
Feedback ratings, guided answers, optional comments, discomfort reports, and video playback context are linked to the member account and visible to clinic administrators. Feedback is retained indefinitely while the account exists; clinic and legal review is required before production release.
- Account deletion cascades to feedback submissions, while administrators may retain feedback for service-quality and clinical-content improvement during the account lifetime.
- Invoice and tax records continue to follow the current Portuguese legal retention window.
Gift vouchers
To sell and deliver a voucher we process the data the buyer gives us: their name, email and, optionally, NIF and address (for the Fatura-Recibo), and the name, email and message meant for the recipient.
- The recipient's email is used only to send them the voucher and reminders about it.
- The recipient's data and the message are kept with the voucher record; the buyer's fiscal data is kept for the legal period.
Invitation codes
When you arrive at DUO through a member's, partner's or influencer's link or code, we record that code on your account to know who recommended the platform (legitimate interest).
- The code's owner only sees how many people subscribed — never who.
- The code is kept in your browser for 30 days in the duo_code cookie, so it can be applied when you sign up.