Privacy Policy
About this document
Effective date: October 5, 2026 (draft under legal review)
Who we are: Duovo Corporation ("Duovo", "we", "us"), Ontario, Canada.
Privacy contact: Jonah Munnings, Privacy Officer — jonah@duovosupport.com · 416-400-0533 · https://duovo.godaddysites.com
1. What this policy covers
Duovo is an app businesses use to run their teams and serve their clients: scheduling, shift tracking, pay calculations, bookings, quotes, chat and documents. This policy explains what personal information Duovo collects, why, who it's shared with, how long it's kept, and your rights.
It applies to everyone who uses Duovo:
• Business owners ("Strategic"), managers ("Tactical") and employees ("Task"), who have Duovo accounts;
• Clients of those businesses, who use Duovo through a private link without an account.
Two roles. For your Duovo account itself, Duovo decides how your information is used and is responsible for it. For the records a business keeps in Duovo about its own staff and clients (shifts, pay, bookings, client contacts), the business decides what to collect and keep, and Duovo processes that information on the business's behalf. Questions about a business's records may need to go to that business as well as to us.
2. What we collect
FROM EVERYONE WITH AN ACCOUNT
• Identity and contact: first and last name (which can't be changed after sign-up), email address, phone number, date of birth, mailing and billing addresses.
• Sign-in and security: password (stored by our sign-in provider in a protected, one-way form — we never see it), two-step verification method (authenticator app or text message), sign-in times.
• Profile numbers: every account gets a permanent profile number. After an account is deleted we keep only its number, the internal account ID and the dates it was created and deleted, so numbers are never reused. No name, email or other details are kept with it.
• Signed agreements: the Driver Safety and Accountability Agreement, Employee Shift Protection Agreements, and other documents you sign in the app, with the name you typed and the time.
• Work preferences: if you work for a business, the hourly rate and weekly hours you're asking for.
• Device: a push-notification address for each phone you use, so alerts reach you.
FROM PEOPLE WHO WORK A SHIFT (EMPLOYEES AND MANAGERS)
• Location — only during a shift. From the moment you tap Start shift until Trip done, the app records your GPS location, including while the phone is locked (phone app only), so your walking and driving distance, stops, routes, mileage and hours can be worked out. No location is collected outside a shift.
• Where you start: the address you start a shift from (for example your home), which you choose at Start shift.
• Live position: while you're on shift, your latest location is shared with your business's owner and managers on a live map. It is removed when you tap Trip done.
• Shift records: start and end times, breaks, walking/driving segments, stops and the legs between them, safety ("Drive Mode") events, flyer counts and the photos you take as proof of work (for example a delivered flyer or a no-soliciting sign).
• Pay records: hours, mileage, bonuses and pay-period summaries the app calculates for your employer, and your responses to them.
• Ride declarations: if you declare a bike, board, skates or similar for the transport bonus.
• Requests and history: time-off and shift-swap requests, and a permanent log of schedule changes.
FROM BUSINESS OWNERS
• Business details: business name, address, type, service area, business number, and identity verification where there's no business number (handled by Stripe Identity — see section 5).
• Billing: your subscription and payments are handled by Stripe. Duovo keeps Stripe reference numbers and a card "fingerprint" (an identifier Stripe creates that can't be used to charge the card) — we never see or store your full card number.
• Settings: pay rates, pay cycles, business hours, ride bonus, agreement wording and similar.
MESSAGES
• Chat messages, read receipts and "typing" indicators between people at the same business, and announcements from the owner.
FROM CLIENTS (NO ACCOUNT)
Entered by the business that serves you, or by you through your private link: your name, email, phone, service address, quotes and agreements you sign (with your typed name and the time), bookings you confirm, the Service Waiver you sign for each job, deposits and payments (handled by Stripe on the business's own Stripe account), and, for pet-care businesses, details about your pets.
3. Why we use it
• To run the app for you and your business: scheduling, shifts, pay calculations, bookings, chat, documents and notifications.
• To calculate pay and mileage fairly and verifiably from real records rather than self-reported numbers.
• For safety: the Driver Safety Agreement, Drive Mode (which locks the screen at driving speed and records when it does), and mandatory breaks.
• To bill subscriptions and process client payments through Stripe.
• To prevent fraud and abuse, including the one-time "new to Duovo" discount (see section 7).
• To keep the service secure, investigate problems and provide support.
• To meet legal obligations, for example employment and tax record-keeping.
We do not sell personal information, and we do not use it for advertising.
4. Who can see what inside a business
• Owners see their business's staff, schedules, live map during shifts, trip records, pay, bookings, clients and the company activity log.
• Managers see the staff, schedules, live map and trip records needed to manage them. Managers cannot see anyone's pay.
• Employees see their own shifts, trips, pay and documents, the chats they're in, and the bookings they're assigned to (including the client's name and service address).
• Clients see only their own quotes, agreements, bookings and payments through their private link. Employees can never message a client directly.
• Start address: owners and managers can see the address a shift was started from.
• Duovo's platform administrator (one verified, two-step-protected account) can access records to provide support, investigate abuse and meet legal obligations.
5. Service providers we share information with
We use these providers to run Duovo. They may only use the information to provide their service to us.
• Google Cloud / Firebase — Hosting, database, sign-in (including texted sign-in codes), file storage, encryption keys, backups — All app data (stored in Toronto, Canada — region northamerica-northeast2)
• Stripe — Subscriptions, client payments, identity verification — Name, email, business details, payment details, ID check images
• Mapbox — Maps and address look-ups — Addresses and map locations
• OpenWeather — Weather alerts and weather days — General locations of service areas and properties
• Twilio — Service texts to clients who agreed to them (e.g. weather changes) — Client phone numbers and message text
• Resend — Emails (sign-in, quotes, links) — Email addresses and message content
• Expo (Expo push service) — Phone notifications — Push addresses and notification text
• Intuit QuickBooks, DocuSign — Only if the business connects them — Invoices/payments (QuickBooks); documents for e-signature (DocuSign)
• Backblaze or Amazon S3 — Off-site backup copy — An encrypted copy of the database (sensitive fields stay encrypted)
Some providers may store or process information outside Canada, including in the United States, where it may be accessible to authorities under local law.
TEXT MESSAGES (SMS)
Clients receive service texts from a business that uses Duovo only if they tick the separate, optional text-message box when they sign their Client Business Agreement (see https://duovo-4a773.web.app/sms-consent). Reply STOP to any text to stop, or HELP for help.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent will not be shared with any third parties. Phone numbers are shared only with Twilio, our text-message provider, so the messages can be delivered.
We may also disclose information if required by law, to protect someone's safety, or as part of a sale or reorganisation of Duovo (with this policy continuing to apply).
6. How we protect it
• Encryption in transit (HTTPS) and at rest (Google Cloud).
• Additional encryption of the most sensitive details — birth dates, phone numbers, addresses and the text of signed documents — with a key Duovo controls in Google Cloud Key Management Service, rotated every 90 days.
• Strict access rules tested automatically, so each person sees only what their role allows.
• Two-step verification available to everyone, and required for Duovo's administrator.
• Daily backups (kept 14 weeks), a 7-day recovery window, deletion protection, and a nightly off-site copy.
No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify affected people and the Privacy Commissioner of Canada as the law requires.
7. How long we keep it
• Your account: while it's open. When you delete your profile we delete your profile, sign-in, personal details, your copies of documents, notifications and push addresses, and remove you from teams and chats.
• Business records: shifts, location records from shifts, hours, pay, schedules and the activity log are the business's records. They are kept while the business uses Duovo and afterwards as employment and tax laws require (for example, Ontario requires employers to keep payroll records for at least 3 years).
• Messages you sent in shared chats remain part of the others' conversation history.
• Fraud prevention: after an account is deleted we keep a one-way, unreadable fingerprint of the email address (it can't be turned back into the address) and the card fingerprint, only so the one-time "new to Duovo" discount can't be claimed twice.
• Signed agreements: the Driver Safety and Accountability Agreement and other signed agreements may be kept as legal records.
• Backups: daily backups are kept up to 14 weeks and nightly exports up to 90 days; deleted information disappears from them as they age out.
8. Your choices and rights
Under Canadian privacy law (PIPEDA) you can:
• Access the personal information we hold about you, and ask how it's been used and shared;
• Correct it if it's wrong;
• Withdraw consent — for example by not starting a shift (no location is collected), turning off notifications, or deleting your account — though some features won't work without certain information;
• Delete your account in the app: Settings → Leave Duovo → Delete my profile (owners close their business first). Instructions without signing in: https://duovo-4a773.web.app/delete-account
• Complain to us, and if you're not satisfied, to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
To make a request, email jonah@duovosupport.com. We'll respond within 30 days.
9. Children
Duovo is not for children. You must be at least 14 to have an account; business owners must be adults who can enter into contracts.
10. Cookies and local storage
The Duovo website app uses your browser's storage to keep you signed in and remember your choices (for example which business you were last viewing). We don't use advertising or cross-site tracking cookies.
11. Changes
If we make important changes we'll tell you in the app or by email before they take effect. The date at the top shows when this policy last changed.
12. Contact
Privacy Officer, Duovo Corporation — jonah@duovosupport.com · 416-400-0533