Privacy Policy

1. Who operates Ducere

Ducere is operated by Evan Lokahi Vaughs and Ethan James Garcia Jackson (collectively, “Ducere,” “we,” “us,” or “our”) from Hawaii, United States. Questions and privacy requests may be sent to privacy@useducere.com.

2. Scope

This policy applies to the Ducere iPhone application, the useducere.com website, the private Ducere backend, beta services distributed through TestFlight, and supported third-party integrations. It does not govern Oura, Apple, or other third parties, which maintain their own policies.

3. Information we collect

Information stored on your device

Ducere is local-first. Tasks, notes, schedules, preferences, and locally displayed health values may be stored on your iPhone. iOS Keychain stores your private Ducere access key. Removing the app may remove local data, subject to Apple device backups and iOS behavior.

Information sent to the Ducere backend

• Account identifiers, display name, account status, and one-way hashes of Ducere access keys.
• Tasks and associated fields you choose to back up, including titles, notes, dates, priorities, categories, completion state, and similar task metadata.
• Connection status, authorization scopes, encrypted provider access and refresh tokens, synchronization timestamps, and errors.
• Health snapshots received through a connection you authorize, which may include Oura sleep and readiness scores, resting heart rate, HRV, workout information, and source records needed to create those snapshots.
• Limited operational information generated by infrastructure providers, which may include request times, network addresses, error details, and security logs.

Website information

The website host may process ordinary technical request information necessary to deliver and secure the site. Ducere does not currently use advertising trackers or sell website visitor information.

4. Oura integration

Ducere accesses Oura information only after you choose Connect, sign in to Oura, and approve Oura’s authorization screen. Ducere requests the personal, daily, heartrate, and workout scopes. These permissions support health context inside Ducere, including sleep, readiness, resting heart rate, HRV, and recent workout information.

Oura account passwords and Oura client secrets are never stored in the iPhone app. Provider tokens are encrypted on the private backend and associated with the Ducere account that authorized access. Oura information is not used for advertising, sold, used to determine insurance or employment eligibility, or provided to train artificial-intelligence models.

Disconnecting Oura removes stored Oura authorization credentials and stops future synchronization. Previously synchronized health snapshots may remain until the Ducere account is deleted or you submit a verified deletion request. We are working to make removal of previously synchronized snapshots automatic when a provider is disconnected.

5. How we use information

• Provide local planning, backup, account, synchronization, and health-context features.
• Authenticate users, isolate each user’s records, and prevent unauthorized access.
• Maintain, diagnose, secure, and improve the beta service.
• Respond to support, privacy, safety, and legal requests.
• Comply with applicable law and enforce our Terms.

Ducere’s Polaris artificial-intelligence functionality is dormant. No Oura information, tasks, notes, or private memories are currently sent to an AI provider.

6. When information is disclosed

We do not sell personal or health information and do not share it for cross-context behavioral advertising. Information may be processed by service providers only as needed to operate Ducere, including Fly.io for backend hosting, Apple for application and TestFlight distribution, Oura when you initiate an Oura connection, and the infrastructure providers that host useducere.com. We may also disclose information when reasonably necessary to comply with law, protect users or the service, investigate abuse, or complete a reorganization subject to appropriate protections and notice where required.

7. Retention and deletion

Local information remains on your device until you delete it or remove the app, subject to device backups. Backend account and task-backup information is retained while the beta account remains active or until deletion is requested, except when limited retention is reasonably necessary for security, dispute resolution, or legal compliance. OAuth state values expire after a short authorization window. Provider credentials remain until disconnection, revocation, account deactivation, or a verified deletion request. Health snapshots remain until account deletion or a verified deletion request while automatic provider-data deletion is being completed.

To request access, correction, export, or deletion, email privacy@useducere.com. We may need to verify that the requester controls the relevant Ducere account. We will act within the period required by applicable law. Deletion from active systems may not immediately remove encrypted backups, which are isolated and expire through the applicable backup cycle.

8. Security

We use measures designed to protect information, including HTTPS, encrypted provider credentials, one-way-hashed Ducere access keys, per-user record isolation, iOS Keychain storage, access controls, and limited operator administration. No system is perfectly secure. Keep your Ducere access key private and notify us if you believe it has been exposed.

9. Your choices and rights

You may decline backend backup or third-party health connections and continue using local features. You may revoke Oura authorization through Ducere or Oura, request a replacement Ducere key, or request account deactivation. Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information, and to appeal or complain to a regulator. We will not discriminate against you for exercising an applicable privacy right.

10. Children

Ducere is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. A person below the age of legal majority should use Ducere only with permission and supervision from a parent or legal guardian. Contact us if you believe a child provided information without appropriate consent.

11. International processing

Ducere is operated from the United States. Information processed by us or our providers may be transferred to and processed in the United States or other countries where privacy rules may differ. Where required, we use lawful transfer mechanisms and appropriate safeguards.

12. Changes

We may update this policy as Ducere changes. The updated date will appear above. If a change materially expands our use of health or personal information, we will provide additional notice or obtain consent when required before applying the new use.

13. Contact

Evan Lokahi Vaughs and Ethan James Garcia Jackson
Ducere · Hawaii, United States
privacy@useducere.com