Effective 7 September 2026

Privacy Policy

Duesday keeps the financial details you enter manually on your iPhone. Optional Connected Spending, currently limited to private testing, uses a protected backend to deliver transactions you choose to connect.

Data stored on your device

Your subscription names, prices, renewal dates, categories, notes, imported images, OCR results, budgets, other spending, savings goals, goal allocations and cancellation proof are stored locally. Duesday uses these details to calculate totals, display insights and schedule local notifications.

Optional account and referral data

You can use the free tier without an account. If you create an account, Duesday's backend stores your email address and authentication identifiers. Referral rewards also use an app-install identifier, referral code, referral relationship and qualification timestamps. Your manually entered subscriptions, budgets, spending, savings goals, imported images and proof are not uploaded. Bank transactions are processed separately only if you opt into Connected Spending, as explained below.

Optional Connected Spending: private evaluation

Connected Spending is not enabled in the current public App Store release. Invited private testers can choose to connect a supported account through a secure Duesday webpage and Finverse-hosted consent. Testbank connections contain sample data, not real purchases. Real-bank access additionally requires Finverse to enable the app and support the chosen institution.

Bank login, card-entry, PIN, CVV and one-time-password forms belong to Finverse or your bank, not Duesday. Duesday does not store those credentials or full card/account numbers. Finverse may present its own choices about remembering credentials; review its consent, terms and privacy information before agreeing.

Finverse's API can transiently return additional account fields to our protected server. To distinguish connected accounts, we retain only a validated final 2–4 digits from a bank-provided masked account number in its generic label. We discard full card/account numbers, the original mask, account-holder names, account nicknames and unneeded counterparty fields before storage. We do not retain or log raw provider responses. We retain generic account type and currency, opaque provider references, consent and connection status, and the transaction amounts, direction, dates, descriptions and status needed to deliver the feature. Descriptions are conservatively filtered for numeric references, but free text can still contain personal information.

This transaction information is personal financial data linked to your Duesday account. It is used to deliver and reconcile your connected feed, support export and deletion, and show connection health. You review imported items in Duesday. Matching to subscriptions or manual spending and your review choices are kept on your phone; your existing budgets, savings goals and manually entered records are not sent to Finverse for matching.

Bank data can be delayed or incomplete. A connection is not a real-time card feed. Review the account selection, transaction status and freshness notices before relying on your budget totals.

Optional release notifications

If you enable Duesday update alerts, the app sends an Apple Push Notification service token, a separate random installation identifier, the installed app version and build number, and your notification preference to Duesday's backend. This information is used only to deliver and manage release alerts. It is not used for advertising or tracking and is not combined with the financial records stored on your phone.

Purchases

Apple processes Duesday Pro purchases. Duesday receives the information needed to determine whether the subscription entitlement is active. We do not receive your complete payment-card details.

Analytics and advertising

Duesday does not use third-party advertising SDKs. Upload of usage telemetry and crowd intelligence is disabled for the initial release.

Service providers

Apple provides distribution, purchases, local notifications and push delivery. Supabase provides optional authentication, referral, push-token and Connected Spending infrastructure. The primary Duesday database is hosted in Japan (Tokyo), not Singapore. Vercel hosts the secure connection webpage using its hosting network. Finverse provides bank connectivity for the private evaluation and processes information under its own consent, terms and privacy commitments. These providers may process information outside your country; their own locations and subprocessors are separate from our database region.

We use this information to operate Duesday, not to sell it or target advertising. Service providers may process limited technical request and security logs to operate their services. Bank credentials and raw bank-response payloads are not intentionally included in Duesday application logs.

Retention and deletion

Local information remains until you delete it in Duesday or remove the app. Turning off Duesday update alerts disables the stored push registration. Invalid Apple push tokens are disabled automatically.

For Connected Spending, the cloud transaction feed uses a rolling 90-day retention window with scheduled cleanup. Local imported items and your review choices can remain on your phone until removed, independently of cloud retention. Connection and consent records remain while needed to operate the connection.

In Money → Spending → Connected Spending, private testers can export their connected data or choose “Disconnect and delete imported data.” This first requests provider unlinking, then removes Duesday's linked connection, tokens, accounts and transactions; if provider unlinking fails, the app reports the failure so it can be retried. Deleting your Duesday account from Settings also requests removal of linked connected data and the referral record. Sensitive export and deletion actions require a recent sign-in. Provider-held records, service backups and legally required records can have separate retention rules. Contact us if an export or deletion request cannot be completed.

Children

Duesday is not directed to children and does not knowingly collect personal information from children.

Changes

We may update this policy as Duesday evolves. The effective date above will change when material revisions are published.

Contact

For support, feature requests or privacy requests, email hello@dakotatechsg.com or visit the Duesday support page.