Privacy Policy

At a glance

We collect what Dueloo needs to work: your mobile number, profile, exam choices, and how you learn and play.
We don’t sell your personal data, and we don’t use advertising trackers.
Voice in lobbies is live only. We don’t record it.
You can ask us to access, correct or delete your data at any time.

Who we are

Dueloo is offered by ZOHM Technologies Private Limited (“ZOHM”, “we”, “us”). We decide how and why your personal data is processed, which makes us the data fiduciary under India’s Digital Personal Data Protection Act, 2023. This policy covers the Dueloo app, the website at dueloo.com and our support channels.

What we collect

We collect information you give us, information created as you use Dueloo, and a small amount of technical information from your device.

Category	What it includes
Account and sign-in	Your mobile number and country code, and a record of the one-time passwords (OTPs) we send, which is deleted automatically within about 30 minutes. If you choose, an email address.
Profile	Name, username, avatar, the exams you prepare for (up to two) and your exam timeline, your state, and interests. Optional details you add, such as a short bio, date of birth or gender.
Learning and play	Your answers, scores and answer times; duel, Battle Royale, quiz and squad results; XP, level, streaks, league and season standings; My Prep plan, progress and revision queue; coins, Ranker Cards, chests and trades; daily activity.
Social and content	Friends and friend requests; squads you join; messages in squad chat and direct messages; notes, questions, images, PDFs and videos you upload; comments, likes and saves; reports and blocks you make.
Voice	Your voice in the Battle Royale lobby and in challenges, only while you have your microphone on. It is relayed live to other players and is not recorded or stored by us.
Purchases	What you bought, the amount, date and status, order and payment IDs, and for Google Play subscriptions the purchase token and plan. If you pay by direct UPI transfer, the payment reference and any screenshot you upload. We never receive your full card number or UPI PIN.
Device and usage	App version, device type and operating system, a push-notification token, IP address, approximate country derived from your network, and events such as which features you open, so we can improve them.
Support and applications	What you tell us when you contact support, including attachments. If you apply to be a creator or instructor: your name, phone, email, city or state, and the social profiles and audience details you share.

Permissions on your phone

Notifications, to remind you about streaks, rounds and results. You choose which kinds you get.
Microphone, only for voice in lobbies and challenges, and only after you allow it.
Camera and photos, only when you choose to take or upload a picture, note or video.

On Android, Dueloo can fill in your sign-in OTP automatically using Google’s SMS Retriever. It reads only the Dueloo verification message, not your other messages. We don’t ask for your location or your contacts.

How we use it

To run Dueloo: sign you in, keep your account secure, match you with opponents, run rounds and leaderboards, and save your progress.
To personalise your prep: use your exam picks, study time and past answers to build your plan, bring back questions you got wrong, and suggest what to do next.
To handle purchases: confirm payments, turn Pro on or off, credit coins, and send receipts.
To talk to you: send notifications you’ve allowed, service messages and replies to your support requests.
To keep Dueloo fair and safe: detect cheating, fake referrals and abuse, review reports, and enforce our Terms.
To improve Dueloo: understand which features and questions work, using our own in-app measurements.
To meet legal duties: keep required records and respond to lawful requests.

We process your data on the basis of your consent, which you give when you sign up and when you allow a permission, and for other legitimate uses allowed by law, such as keeping records we are required to keep. You can withdraw consent at any time (see Your rights); some features may stop working without it.

What other players see

Your name or username, avatar, level, league, badges and Pro badge are visible to other players, for example on leaderboards, in match lobbies and on your profile. Squad members see what you post in that squad. People you message see your messages. Content you publish, such as a reel, is visible to everyone on Dueloo. Your mobile number is never shown to other players.

We don’t sell your personal data or share it for advertising. We share it only with service providers who help us run Dueloo, under contracts that limit their use of it to the work they do for us:

Cloud hosting and storage, such as Amazon Web Services, for our servers, database and the files you upload.
OTP delivery through WhatsApp and SMS messaging providers, which receive your mobile number and the code.
Push notifications through Expo’s push service and Google’s Firebase Cloud Messaging, which receive your device’s push token and the message.
Email delivery, for receipts and support replies.
Payments through Google Play billing and authorized payment gateways, which process your payment under their own policies.
Live voice through LiveKit, which relays lobby audio in real time without recording it.
Video and avatars: streaming providers for classes, and an avatar-image service that creates cartoon avatars from the options you pick.
App distribution: Google Play, including its install referrer, which tells us which referral link brought you to Dueloo.

We may also disclose information when the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of our business, in which case this policy will continue to protect it.

Where it’s stored and how it’s protected

Your data is stored with our cloud providers, primarily in India. Some providers, such as Google and Expo, may process data in other countries, with safeguards required by law. Data travels over encrypted connections, sign-in tokens are kept in your phone’s secure storage, private files such as squad notes are stored privately, and access within our team is limited to people who need it. No system is perfectly secure, so please keep your OTPs private.

How long we keep it

We keep your data for as long as your account is active and as needed to provide Dueloo. OTP records expire within about 30 minutes. When you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep some of it longer: for example, payment and tax records for the period required by Indian law, and limited records needed to prevent fraud or resolve a dispute. Messages you sent to others may remain in their chats without your name.

Your rights and choices

Under Indian law you can:

access a summary of the personal data we hold about you and how we use it;
correct or update it; you can change most profile details in the app yourself;
erase it by deleting your account (see below);
withdraw consent you have given, and turn off notifications or microphone access at any time in the app or your phone’s settings;
nominate someone to exercise these rights for you in case of death or incapacity;
raise a grievance with us, and if you aren’t satisfied with our response, with the Data Protection Board of India.

To use any of these rights, write to support@dueloo.com from the email on your account or with the mobile number on your account. We may ask you to confirm it’s you, for example with an OTP.

Deleting your account

To delete your Dueloo account and personal data, email support@dueloo.com with the subject “Delete my account” and the mobile number on your account. After we confirm it’s you, we’ll delete your account and personal data as described in How long we keep it, and confirm by reply.

Deleting your account is permanent. Your XP, streaks, league rank, coins, Ranker Cards and Pro benefits can’t be restored. If you pay for Pro through Google Play, cancel it in Google Play as well, because deleting your account doesn’t stop Google’s billing.

Children

Dueloo is made for exam aspirants. If you are under 18, you may use Dueloo only with the consent of a parent or legal guardian. We don’t knowingly track children’s behaviour or show them targeted advertising. If you believe a child is using Dueloo without a parent’s consent, write to us and we’ll take appropriate steps, including deleting the account.

Our website

The dueloo.com website doesn’t use advertising or tracking cookies. It stores your language choice (English or हिंदी) in your browser so it’s remembered next time. Its fonts are served by Google Fonts, which receives your IP address when the page loads.

Changes to this policy

We may update this policy as Dueloo changes. The date at the top shows the latest version. If a change is significant, we’ll tell you in the app before it takes effect.

Contact and Grievance Officer

For privacy questions or requests, write to support@dueloo.com. For complaints, contact our Grievance Officer at support@dueloo.com. Details and response times are on our Contact page.

A question about your data?

Write to us. We usually reply within 48 hours.

Keep reading