Legal

Privacy Policy

Last updated: October 27, 2026 · Effective: October 27, 2026 · Controller: TFORA TECHNOLOGIES LLP

Privacy Policy

Last updated: October 27, 2026 Effective date: October 27, 2026

This Privacy Policy explains how TFORA TECHNOLOGIES LLP, a Limited Liability Partnership incorporated under the laws of India, with its registered office at Building No./Flat No.: 10/440
Name Of Premises/Building: QATAR TOWER NIRANNAPARAMB
Road/Street: THRIKKALANGODE
Locality/Sub Locality: ELANKUR
City/Town/Village: Manjeri
District: Malappuram
State: Kerala
PIN Code: 676122 (“Tfora”, “Duiqo”, “we”, “us”, or “our”), collects, uses, stores, shares, retains, and protects personal data when you use Duiqo.

Duiqo is an AI-assisted personal life-admin layer. It may help you capture, organise, retrieve, summarise, and surface information and potential follow-up actions.

This Privacy Policy applies to the Duiqo website at duiqo.com, any web-based interfaces, mobile applications, bots, messaging integrations, email services, capture tools, and related software, features, and services we operate or make available from time to time (collectively, the “Service”).

1. Who This Policy Applies To

This Privacy Policy applies to individuals who visit our website, join a waitlist, contact us, create an account, communicate with Duiqo through a supported messaging platform, or otherwise use the Service.

The Service is not intended for anyone under 18 years old. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us at hello@duiqo.com.

2. Personal Data We Collect

The personal data we collect depends on how you use the Service and the features available to you.

Account and contact information

We may collect:

  • Your name, username, email address, phone number, messaging-platform identifier,
  • and account identifier;
  • Information submitted when you join a waitlist, contact us, request support, or
  • subscribe to communications;
  • Authentication and account-verification information; and
  • Your communication preferences and opt-in or opt-out status.

Life Admin Information and User Content

We collect the information you choose to submit to Duiqo. This may include:

  • Messages, notes, ideas, tasks, reminders, obligations, goals, and journal entries;
  • Voice notes, audio recordings, transcripts, images, documents, files, screenshots,
  • URLs, and links;
  • Information about expenses, purchases, subscriptions, payments, financial
  • reminders, household matters, appointments, and calendars;
  • Contact-related information, such as names, relationship context, and reminders
  • involving other people;
  • Prompts, searches, requests, corrections, feedback, and interactions with Duiqo;
  • and
  • Other information you choose to capture, organise, retrieve, or process through
  • the Service.

Some User Content may contain sensitive or highly personal information. You should use your judgement before submitting sensitive information to the Service.

Data about other people

You may submit personal data about other people, for example, a person's name in a reminder or information contained in a message, image, document, or voice note. You are responsible for ensuring that you have the rights, permissions, notices, and consents required to provide that information to us.

Technical, usage, and security data

We may automatically collect or receive:

  • Device, browser, operating-system, and application information;
  • IP address, approximate location derived from IP address, language, and time zone;
  • Log data, timestamps, feature usage, searches, interactions, and error reports;
  • Messaging-platform metadata, including message delivery or account identifiers
  • provided by the relevant platform; and
  • Security, fraud-prevention, diagnostic, and audit information.

Cookies and similar technologies

We may use cookies, local storage, pixels, SDKs, and similar technologies to operate the website and Service, remember preferences, maintain security, understand aggregated usage, and improve performance. Where required by law, we will request consent before placing non-essential cookies or similar technologies. You can manage browser cookies through your browser settings. Disabling some cookies may affect the availability or functionality of the Service.

3. How We Use Personal Data

We use personal data only as necessary to operate, secure, support, and improve the Service. This includes using personal data to:

  • Provide the Service and respond to your requests;
  • Receive, process, store, organise, search, retrieve, summarise, transcribe,
  • classify, and display Life Admin Information;
  • Generate requested AI-assisted outputs, including suggested reminders, categories,
  • summaries, follow-up actions, and retrieved information;
  • Create and use embeddings, indexes, and similar technical representations needed
  • to make User Content searchable and retrievable for you;
  • Create and manage accounts, authenticate users, and provide customer support;
  • Communicate about account access, security, privacy, support, service changes,
  • outages, policy updates, and other essential service matters;
  • Send optional newsletters, product updates, upgrade offers, or other marketing
  • communications only where you have opted in or where otherwise permitted by
  • applicable law;
  • Monitor, maintain, troubleshoot, secure, and improve the Service using aggregated
  • and privacy-conscious analytics;
  • Detect, investigate, and prevent fraud, abuse, security incidents, and violations
  • of our Terms of Service;
  • Comply with applicable law, legal obligations, lawful requests, and enforceable
  • orders; and
  • Establish, exercise, or defend legal claims.

Google API Services and Google Connected Services

If you choose to connect your Google account to Duiqo, we may request access to Google user data only to provide the Google-connected features that you choose to enable and authorise.

Depending on the Google services and permissions you choose to connect, this may include:

- Basic Google Account information, such as your name, email address, and profile information; - Google Calendar events, event details, calendars, availability information, and related metadata; - Google Drive files, file names, file metadata, folders, and file content; - Gmail messages, message metadata, attachments, labels, and related content; and - Other Google user data only where you have specifically authorised the relevant Google permission and Duiqo has clearly disclosed the relevant feature and purpose.

We use Google user data only to provide and improve user-facing Duiqo features that you actively choose to use, such as displaying, searching, retrieving, organising, summarising, creating, or updating information in connection with your authorised Google services.

We do not use Google user data for advertising, retargeting, interest-based advertising, creditworthiness, lending, sale to data brokers, surveillance, or any purpose unrelated to the user-facing features you have authorised.

We do not allow humans to read Google user data except where you have given affirmative consent for a specific support request, where necessary for security or fraud investigation, where required by applicable law, or where permitted by the Google API Services User Data Policy.

You may revoke Duiqo's access to your Google account at any time through your Google Account security settings or by contacting hello@duiqo.com. Revoking access stops future access to Google user data, but does not automatically delete data that Duiqo previously received and stored. To request deletion of stored data, follow the deletion process described in Section 10 of this Privacy Policy.

Duiqo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy

4. Legal Bases for Processing

Where the GDPR or similar law applies, we process personal data under one or more of the following legal bases:

  • Performance of a contract: to provide the Service you request, maintain your
  • account, process User Content, and provide support;
  • Consent: where you choose to provide consent, including for optional marketing
  • communications, non-essential cookies, or other processing where consent is
  • required;
  • Legitimate interests: to secure, maintain, improve, and protect the Service,
  • prevent fraud and abuse, understand aggregated usage, and defend our legal rights,
  • where those interests are not overridden by your rights and interests; and
  • Legal obligations: where processing is necessary to comply with applicable law,
  • lawful requests, or enforceable legal orders.

Where Indian data-protection law applies, we process personal data with consent or for another lawful purpose permitted by applicable law.

5. AI Processing and No Model Training

Duiqo uses AI technologies, including language models and automated systems, to provide the Service.

We may send User Content to carefully selected third-party AI-processing providers where necessary to provide requested features, such as transcription, analysis, classification, summarisation, retrieval, or generation of outputs.

We do not use your User Content or personal data to train, improve, or fine-tune Duiqo's general-purpose or underlying AI models. We require AI-processing providers to process User Content only for authorised service-provision, security, and operational purposes under the applicable agreements and service configurations.

Where User Content includes Google user data obtained through Google APIs, we use and transfer that data only as permitted by the Google API Services User Data Policy and only to provide or improve user-facing features that you have authorised.

AI-generated results may be inaccurate, incomplete, misleading, or unsuitable for your circumstances. Please review important outputs before relying on them.

6. How We Share Personal Data

We do not sell your personal data. We may share personal data only with the following categories of recipients where necessary to provide, secure, support, or improve the Service:

  • Hosting, cloud-infrastructure, database, storage, backup, and security providers;
  • AI-processing, transcription, OCR, embedding, search, and related technology
  • providers;
  • Messaging, email, communications, authentication, and account-management
  • providers;
  • Privacy-conscious analytics, diagnostics, and error-monitoring providers;
  • Customer-support, professional-adviser, legal, accounting, insurance, and payment
  • providers, where applicable;
  • Government authorities, regulators, courts, law-enforcement bodies, or other
  • parties where required by law or necessary to protect rights, safety, security, or
  • property; and
  • A buyer, successor, investor, lender, or professional adviser in connection with a
  • merger, acquisition, financing, restructuring, sale of assets, or similar
  • corporate transaction, subject to appropriate safeguards. Service providers may process personal data only on our instructions and for the purposes described in this Privacy Policy, except where they are legally required to process it otherwise.

7. Messaging Platforms and Communications

The Service may be accessed through third-party messaging platforms, including WhatsApp and Telegram, when and if those integrations are made available. Your use of a third-party messaging platform is subject to that platform's own terms, privacy policy, and data practices. We may receive information that the platform provides to us, such as your messaging-platform identifier, phone number where available, profile information, messages, attachments, and message-delivery data. We may respond to requests that you send through a supported messaging platform. We may also send essential account, security, service, outage, privacy, support, or policy-related communications.

We will obtain any opt-in or consent required by applicable law or the relevant messaging platform before sending business-initiated promotional communications, product offers, upgrade offers, or other non-essential messages. Where supported, you may opt out of non-essential messages by replying “STOP”, using the unsubscribe method included in the relevant communication, adjusting future communication settings when available, or contacting hello@duiqo.com.

8. Duiqo Browser Extension

This section applies to the Duiqo Capture extension for Google Chrome (the “Extension”) and supplements the rest of this Privacy Policy. The Extension lets you save web content to your Duiqo account and shows your Duiqo workspace on the browser’s new tab page.

What the Extension sends to us

The Extension sends content to Duiqo only when you act: by clicking save in the Extension popup, using the right-click “Add to Duiqo” menu, or pressing a keyboard shortcut. When you do, it sends to your Duiqo account:

  • the address (URL) and title of the page;
  • any text you have selected;
  • the address of an image or link, if you save one from the right-click menu; and
  • any note you write.

The Extension does not read pages you have not chosen to save, and it does not access your browsing history, cookies, or other tabs. It does not request access to all websites. Content you save is User Content and is handled as described in the rest of this Privacy Policy, including Section 5 (AI Processing and No Model Training).

New tab page

If you sign in, the new tab page loads your tasks, schedule, reminders, saved items, and account email address from Duiqo so that it can display them. Spending data from Duiqo Finance is loaded only if you turn on finance in the Extension’s settings, and is displayed on your device. The default “Search only” layout does not require an account. Searches you type there are sent to the search provider you choose (Brave or Google), which handles them under its own privacy policy and not ours.

Data stored in your browser

Data Where it is stored How long
Short-lived sign-in token Browser session storage Until the browser closes, you sign out, or the token expires
Device sign-in credential for that browser Extension local storage Until you sign out or revoke the device
Saves waiting to sync while you are offline Extension local storage Until synced, and no longer than 7 days
Temporary copy of tasks, schedule, and saved items for the new tab Extension storage Minutes for tasks and schedule; previews of saved items and finance data are kept for the browser session only
Layout, theme, and privacy preferences Browser sync storage Until you change or clear them. If Chrome Sync is on, Google may sync these preferences, but never your sign-in credentials or saved content, across your devices

Extension storage is restricted so that web pages and content scripts cannot read it.

Security and audit data

When the Extension communicates with Duiqo, we may record the Extension version, the device session, the type of action, a timestamp, and the IP address of the request for security, abuse-prevention, and audit purposes. We do not record sign-in tokens or Authorization headers in these logs. These logs are retained as described in Section 10.

Permissions the Extension uses

  • activeTab and scripting: after your click or shortcut, to read the current tab’s title, address, and selected text. The Extension runs only code included in its package and does not load or execute remote code.
  • contextMenus: to provide the “Add to Duiqo” right-click menu.
  • storage: to keep the stored items listed above.
  • alarms: to retry offline saves and refresh the short-lived sign-in token.
  • notifications (optional): to confirm saves, only if you allow it.
  • Access to duiqo.com, app.duiqo.com, and api.duiqo.com: to sign in, save content, and load your data. The Extension communicates only with Duiqo’s own services, apart from the search provider you select.

Privacy controls

On the new tab you can hide or blur workspace content, require a click to reveal it, and lock it after a period of inactivity. Finance is hidden by default.

Use and sharing

We use data from the Extension only to provide the saving and new tab features to you. We do not sell it, use it for advertising, or use it to determine creditworthiness or for lending. We share it only with the categories of recipients described in Section 6.

Signing out and deleting data

  • Sign out in the Extension to revoke that browser’s access on our servers and clear its stored tokens, offline queue, and cached data.
  • Uninstall the Extension to remove everything it stored in your browser.
  • Content you have already saved remains in your Duiqo account until you delete it or request account deletion as described in Section 10.

9. International Data Transfers

Duiqo is operated by an Indian entity and may use service providers located in India or other countries. As a result, your personal data may be processed in a country other than the one where you live. Data-protection laws in another country may differ from those in your country. Where required by applicable law, we will take appropriate steps designed to protect personal data transferred internationally, including using contractual safeguards or other transfer mechanisms recognised by applicable law.

10. Data Retention and Deletion

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our principal retention periods are:

Data category Retention period
Account and active User Content While your account is active, unless you delete content or request account deletion
Personal data and User Content after a verified deletion request Deleted or anonymised from active systems within 30 days
Secure backup copies after deletion from active systems Up to 90 days, after which they are overwritten or deleted under our backup processes
Technical, security, and server logs Up to 180 days
Limited account identifiers retained after deletion for security, abuse prevention, or legal compliance Up to 180 days, unless a longer period is required or permitted by law
Waitlist and pre-launch contact information Until you withdraw consent, unsubscribe, or the information is no longer reasonably necessary for the waitlist or launch communications
Payment, tax, accounting, and transaction records, if paid services are introduced For the period required by applicable law

You may request deletion of your account and User Content by emailing hello@duiqo.com from the email address associated with your account. We may request information reasonably necessary to verify your identity and protect your account. We may retain limited information beyond the periods above where necessary for legal compliance, a court order, a lawful government request, security or fraud prevention, dispute resolution, or the establishment, exercise, or defence of legal claims. The Service does not currently provide a full export function. You are responsible for retaining independent copies of information that is important to you.

11. Your Privacy Rights and Choices

Depending on where you live and applicable law, you may have rights to:

  • Request access to personal data we hold about you;
  • Request correction, completion, or updating of inaccurate personal data;
  • Request deletion of personal data;
  • Withdraw consent where processing is based on consent;
  • Object to or request restriction of certain processing;
  • Request portability of personal data, where applicable;
  • Opt out of non-essential marketing communications; and
  • Raise a concern or complaint with a relevant data-protection authority. To exercise a privacy right, email hello@duiqo.com. For formal legal notices or privacy grievances, contact legal@duiqo.com. We may need to verify your identity before responding to a request. We will respond within the time period required by applicable law. If you are in the EEA or UK, you may also have the right to lodge a complaint with your local data-protection supervisory authority. If you are in India, you may have the right to raise a grievance regarding the processing of your personal data through the mechanisms available under applicable law.

12. Security

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include access controls, authentication measures, security monitoring, encryption in transit where supported, and restrictions on access to personal data. No method of electronic transmission, storage, or processing is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your account, device, email account, messaging account, passwords, authentication codes, and access credentials.

13. Third-Party Links and Services

The Service may contain links to, rely on, or integrate with third-party websites, platforms, applications, and services. We are not responsible for the privacy, security, or content practices of third parties. We encourage you to review their privacy policies before providing them with personal data.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, our data practices, legal requirements, or other operational reasons. If we make a material change, we will provide notice through the Service, by email, through a supported messaging channel, or by another reasonable method before the change takes effect where required by applicable law. The “Last updated” date at the top of this Privacy Policy indicates when it was most recently revised.

15. Contact and Grievances

For general questions, support, privacy requests, access requests, correction requests, deletion requests, and communication preferences, contact: Email: hello@duiqo.com For legal notices, formal privacy grievances, or matters requiring legal review, contact: Email: legal@duiqo.com Data Controller: TFORA TECHNOLOGIES LLP
Registered Office: Building No./Flat No.: 10/440
Name Of Premises/Building: QATAR TOWER NIRANNAPARAMB
Road/Street: THRIKKALANGODE
Locality/Sub Locality: ELANKUR
City/Town/Village: Manjeri
District: Malappuram
State: Kerala
PIN Code: 676122
Grievance Officer: Ayhab Kv Grievance Officer Contact: legal@duiqo.com Grievance Officer Postal Address: Building No./Flat No.: 10/440
Name Of Premises/Building: QATAR TOWER NIRANNAPARAMB
Road/Street: THRIKKALANGODE
Locality/Sub Locality: ELANKUR
City/Town/Village: Manjeri
District: Malappuram
State: Kerala
PIN Code: 676122

Read Terms of Service→