Privacy Policy

Last updated: June 17, 2026

1. Information We Collect

When you sign in with Google, we collect:

• Your Google account email address
• Your display name and profile photo
• Your unique Google account identifier

We also collect the links, tags, folders, and notes you save within the app. This data is stored locally on your device and optionally synced to Firebase Firestore for cross-device access.

2. How We Use Your Data

• To authenticate you and associate your saved content with your account
• To sync your vault across devices via cloud backup
• To provide AI-powered tag suggestions (titles and URLs are sent to DeepSeek AI)

3. Data Storage & Security

Your link data is stored primarily on your device using SQLite (Android) or IndexedDB (web). When cloud sync is enabled, data is also stored on Firebase Firestore servers.

Your vault PIN is hashed using SHA-256 with salt. No plaintext PIN is ever stored or transmitted.

AI categorization requests are proxied through Firebase Cloud Functions. Your API keys are never exposed to the client.

4. Third-Party Services

• Google Firebase — Authentication, Firestore database, Cloud Functions, Hosting
• DeepSeek AI — Link categorization (title and URL only)
• Google Fonts — Inter typeface

5. Your Control

You can delete all your data at any time by signing out from Settings and clearing app data. You can also request data deletion by contacting us.

6. Contact

For privacy-related inquiries, contact: napender@duck.com