UnoDuo Privacy Policy

Effective date: June 29, 2026
Version: 2026-06-29

1. Controller

The operator of UnoDuo is UnoDuo online, Republic of Armenia, city of Yerevan.

Contact for privacy, support, and account deletion requests:
support.unoduo@gmail.com.

This policy describes how data is processed in the UnoDuo mobile app, on
`https://unoduo.online`, and through the backend at `https://api.unoduo.online`.

2. Data We Process

We may process:

- account email and sign-in verification information;
- Google or Apple sign-in identifiers if the user chooses those sign-in methods;
- guest or anonymous session identifiers;
- app settings, selected languages, live translation settings, and learning mode
settings;
- text, audio, and processing results submitted for speech recognition,
translation, text-to-speech, or learning materials;
- live conversation history and learning materials when account-only features
are used;
- support requests: name, account email, message text, and one optional JPEG
attachment;
- legal acceptance records: document key, version, locale, and acceptance time;
- technical logs for security, limits, errors, email delivery status, and
provider operations;
- usage, trial quota, balance, and payment information if paid features are
enabled.

We do not request contacts, precise location, advertising identifiers, or device
file access outside actions explicitly selected by the user.

3. Purposes

We process data to:

- provide live translation, speech recognition, text translation, text-to-speech,
and language learning features;
- create and protect accounts;
- synchronize user settings and account-only features;
- handle support requests;
- process account deletion requests;
- keep records of legal document versions and acceptances;
- protect the service from abuse, excessive use, and unauthorized access;
- diagnose errors, monitor reliability, and perform release checks;
- account for trial or paid limits if those features are enabled.

4. Legal Bases

Depending on the situation, processing may rely on:

- user consent, including consent to personal data processing and acceptance of
required legal documents;
- the need to perform the user's request, such as sign-in, translation, speech
recognition, text-to-speech, settings storage, support, or account deletion;
- legitimate interest in protecting the service, preventing abuse, diagnosing
errors, maintaining security, and proving accepted document versions;
- compliance with legal obligations where they apply to the operator or a
specific operation.

If consent is required for a specific feature, refusing or withdrawing consent
may make that feature unavailable.

5. Recipients And Processors

Data may be accessed by a limited set of people and systems:

- the operator and persons helping with support, security, infrastructure, and
release checks;
- speech recognition, translation, text generation, and text-to-speech
providers;
- sign-in providers such as Google or Apple;
- email, SMTP, or webhook providers for one-time codes and notifications;
- hosting, database, monitoring, logging, and infrastructure services;
- payment or billing providers if paid features are enabled;
- public authorities or other parties where disclosure is required by law,
court order, or necessary to protect rights.

We do not sell personal data or share it with advertising networks for
behavioral advertising.

6. International Transfers

UnoDuo may use external services located in other countries. This means audio,
text, email, technical data, or service metadata may be processed outside the
user's country.

Transfers are limited to what is needed for the selected feature, security,
message delivery, infrastructure, or quota accounting. The user should not
submit materials they are not prepared to send to the external services required
for the selected feature.

7. External Services

UnoDuo may send audio, text, and technical request parameters to external
providers for speech recognition, translation, text generation, text-to-speech,
OAuth sign-in, email delivery, hosting, and monitoring.

External providers are used only to perform the requested feature, deliver
service messages, protect accounts, or operate infrastructure. More detail is
provided in the External Audio and Text Processing Notice.

8. Retention

Account data is kept while the account exists or while it is needed to provide
the service, protect the service, audit legal acceptances, or comply with legal
obligations.

Support requests may be kept until the request is closed and then deleted under
the retention policy. Closed support requests are normally eligible for
automatic deletion after 180 days unless an administrator deletes them earlier.

Legal acceptance records and audit records may be retained longer when needed
to prove the accepted document version, protect rights, or comply with legal
obligations.

Retention guidelines:

- account sessions are kept until sign-out, expiry, or revocation;
- account settings are kept until account deletion or reset of the relevant
feature;
- live conversations and learning materials are kept while the user uses
account-only features or until account deletion;
- one-time codes and security events are kept for a limited period sufficient
to prevent abuse;
- support requests are kept until handled and then under the retention policy;
- acceptance records, audit records, and billing records may be kept longer
where needed for proof, security, financial accounting, or legal defense.

9. Account Deletion

Users may delete their account in the app or through
`https://unoduo.online/account-deletion`.

After confirmation, the account, active sessions, and related user data are
deleted without a recovery period. A deleted account cannot be restored.

Only anonymized technical records, audit records, legal acceptance records, or
financial records may be retained where limited retention is necessary for law,
security, or abuse prevention.

10. User Rights

Users may contact `support.unoduo@gmail.com` to request access, correction,
deletion, restriction, or an answer to a privacy question.

To protect the account, we may ask the user to prove control over the account
email or other account information.

Depending on applicable law, the user may also have the right to:

• receive information about purposes, data categories, and recipients;
• receive a copy of data in a reasonable format;
• withdraw consent for future processing;
• object to processing or request restriction;
• complain to a competent data protection authority.

We respond within a reasonable time. If a request is complex, requires identity
verification, or affects the rights of others, the response time may be extended
within applicable law.

11. App Store And Third-Party Platform Data

If the user installs UnoDuo through an app store or signs in through Google or
Apple, those platforms may process data under their own rules. UnoDuo receives
only the data needed for the selected sign-in method, app publication,
diagnostics, or store compliance.

12. Security

We use sessions, role checks, rate limits, admin audit logging, HTTPS, and
restricted access to the admin area. Provider secrets are kept outside public
interfaces and are not sent to the mobile app.

No transmission or storage method is completely secure, so we limit the amount
of data and access to it based on necessity.

13. Age Audience

UnoDuo is intended for users aged 16 and older. If you are under 16, use the
service only with permission from a parent or legal guardian.

We do not direct the service to children under 13 and do not knowingly collect
their data. If you believe a child provided data without required permission,
contact support.unoduo@gmail.com.

14. Changes

We may update this policy. A new required version will be published with a new
date and version. If the document requires renewed acceptance, the app or
backend will request acceptance of the current version.

15. Contact And Requests

Questions about privacy, user rights, external processing, account deletion,
and security may be sent to support.unoduo@gmail.com.