Privacy Policy
Last Updated - 05-02-2026
Duddy (“Duddy,” “we,” “us,” or “our”) operates the website https://duddy.io and provides an AI enabled, visual no-code drag-and-drop platform that enables users to build iOS, Android, and Progressive Web Applications (the “Services”).
This Privacy Policy explains how we collect, use, disclose, and protect personal information, and how you can exercise your privacy rights. Duddy is based in India and processes personal information in accordance with applicable laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”), and, where applicable, global data protection standards.
By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Scope of This Privacy Policy
This Privacy Policy applies to personal information processed by Duddy in connection with the Services, including our website, web application, and related offerings.
Important Note on Customer Data:
Our Services allow users to create applications, templates, and digital products. Personal data that end users collect, store, or process within applications built using Duddy (“Customer Data”) is controlled by the creator of those applications. Duddy processes such data only on behalf of users and in accordance with applicable agreements. This Privacy Policy does not govern Customer Data. End users should review the privacy policy of the application creator.
2. Personal Information We Collect
The categories of personal information we collect depend on how you interact with the Services.
A. Information You Provide Directly
We may collect personal information you voluntarily provide, including:
Account and Profile Information
- Name
- Email address
- Password (stored in hashed form)
- Authentication details via Google or GitHub
- Optional profile information, if provided:
- Bio
- Company name
- Designation
- Website
- Social profile links
- Phone number
- WhatsApp number
- Email address
- Physical address
Users can control whether profile information is public or private.
Developer and Integration Information
- Figma integration credentials
- Apple Developer account information, including Issuer ID, Key ID, and API Key (.p8 file), used for testing and publishing iOS applications
- Pixabay API keys for importing design assets
Wallet and Financial Information
- Wallet balance and transaction history
- UPI ID
- PayPal ID
- Bank account details for withdrawals
This information is collected and stored to operate the wallet system, enable purchases, facilitate payouts, and comply with legal obligations.
Communications
- Information provided when you contact us for support, inquiries, surveys, or feedback
- Email communications related to your account or the Services
B. Information Collected Automatically
When you use the Services, we may automatically collect:
- Internet Protocol (IP) address
- Browser type and device information
- Operating system
- Approximate location (derived from IP address)
- Usage data, including pages visited, features used, and interaction patterns
- Log files and diagnostic data
Cookies and Similar Technologies
We use cookies, local storage, and session storage to operate and improve the Services, maintain sessions, and analyze usage. You can control cookies through your browser settings, but disabling them may affect functionality.
Analytics
We use Google Analytics to understand how users interact with the Services and to improve performance.
C. User-Generated Content
We collect and store content you create or upload through the Services, including:
- App configurations and layouts
- AI prompts
- Code logic generated or configured through the platform
- Uploaded assets
- Templates listed or sold in the marketplace
3. How We Use Your Information
We use personal information for the following purposes:
A. Providing and Operating the Services
- Creating and managing user accounts
- Authenticating users
- Enabling app creation, testing, publishing, and deployment
- Operating AI enabled features
- Managing the marketplace and wallet system
- Processing transactions and withdrawals
- Providing customer and technical support
B. Administrative and Operational Purposes
- Maintaining security and preventing fraud or abuse
- Monitoring and improving performance and reliability
- Debugging and error resolution
- Internal research, analytics, and product development
- Enforcing our terms, policies, and agreements
- Complying with legal and regulatory obligations
C. Communications and Marketing
- Sending service-related communications, including updates and security notices
- Sending marketing or product emails, where permitted by law
You may opt out of marketing emails at any time using the unsubscribe link.
D. Legal and Compliance
- Meeting obligations under applicable laws
- Responding to lawful requests from authorities
- Establishing, exercising, or defending legal claims
4. How We Disclose Your Information
We may disclose personal information in the following circumstances:
A. Service Providers
We share information with trusted third-party service providers who assist us with:
- Hosting and infrastructure
- Analytics
- Email delivery
- Payment processing and payouts
These providers process information only on our instructions and are required to protect it.
B. Legal Requirements
We may disclose information if required to do so by law or if we believe disclosure is necessary to:
- Comply with legal obligations or lawful requests
- Protect the rights, property, or safety of Duddy, users, or others
- Prevent or investigate fraud or illegal activity
C. Business Transfers
In the event of a merger, acquisition, restructuring, or sale of assets, personal information may be transferred as part of the transaction, subject to applicable law.
We do not sell personal data.
5. Your Privacy Choices and Rights
Depending on applicable law, you may have the right to:
- Access personal information we hold about you
- Correct inaccurate or incomplete information
- Request deletion of personal information
- Withdraw consent where processing is based on consent
- Request data portability, where applicable
To exercise your rights, contact us at [email protected]. We may need to verify your identity before fulfilling your request.
6. Data Security
We implement reasonable technical and organizational safeguards to protect personal information, including access controls and secure storage practices. However, no system is completely secure, and we cannot guarantee absolute security.
If we become aware of a data breach that poses a risk to your rights, we will notify affected users as required by law.
7. International Data Transfers
Your information may be processed and stored outside India, including on servers operated by our service providers. Where required, we take steps to ensure appropriate safeguards are in place for cross-border data transfers.
8. Data Retention
We retain personal information for as long as necessary to:
- Provide the Services
- Operate the wallet and marketplace
- Comply with legal and regulatory requirements
- Resolve disputes and enforce agreements
Financial and transactional data may be retained for longer periods as required by law, even after account deletion.
9. Children’s Information
The Services are not specifically directed at children, but minors may use the platform, including in educational contexts. Where required by law, consent must be obtained from a parent, guardian, or educational institution. If we become aware that personal information has been collected in violation of applicable laws, we will take appropriate steps to delete it.
10. Third-Party Links and Services
The Services may contain links to third-party websites or integrations. We are not responsible for the privacy practices of those third parties. Your interactions with third-party services are governed by their own privacy policies.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated Last Updated date. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.
12. Contact Us
If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise your rights, contact us at:
Email: [email protected]