DUOclip

Privacy Policy

Last updated:

This is a reference translation. The Japanese version is authoritative; if any discrepancy exists, the Japanese version prevails.

Introduction

VAULT, LIMITED LIABILITY CO. ("we" or "us") sets out this Privacy Policy ("Policy") for how we handle users' information in the DUOclip app and its related web pages (the "Service").

1. Who we are

Company: VAULT, LIMITED LIABILITY CO. (合同会社VAULT)

Representative: Takumi Kawamori, Representative Member

Address: Konotora Building 7F, 1-1-14 Shimomeguro, Meguro-ku, Tokyo 153-0064, Japan

Contact: duoclip@vault-tec.jp

2. Information we collect

  • Sign-in information: the identifier and email address we receive from Apple or Google (a relay address if you choose Apple's Hide My Email), and Google profile information (name and profile picture, if provided). If you sign in with Apple, we store an encrypted token used to disconnect Apple sign-in when you delete your account.
  • Profile: ID (username), nickname, icon image and app language
  • Your content: videos and audio you record, when they were recorded, the shooting mode, still frames and combined videos made from them, notes, stickers and BEST choices
  • DUO Reactions: a video of your face recorded with the front camera while you watch a DUO Reply (no audio is recorded, and you choose whether to record it)
  • Subtitles: transcripts made from the audio of videos, and their translations
  • Friends and activity: friend connections, records of DUOs sent, received, watched and read, blocks, reports (reason and optional details) and appeals
  • Notifications: a push notification token (if you allow notifications)
  • Purchase and subscription information: if you subscribe to DUOclip Plus, the purchase and subscription status we receive from the store (Apple App Store or Google Play), such as the plan, the current period, whether a free trial is in use, and the renewal or cancellation status. Payment details such as card numbers are handled by the store and never reach us.
  • Advertising information: when ads are shown to users without Plus, the advertising identifier sent to Google AdMob (on iOS the IDFA, only if you allow tracking; on Android the Android advertising ID), device and app information, and your approximate region. See section 8.
  • Diagnostics: crash and error details, device type, OS and app versions, and the screen where it happened. Email addresses and other identifying information are removed before sending.
  • Connection logs: IP address, date and time, and pages accessed, recorded automatically by servers and web hosting services
  • Inquiry information: if you contact us through the inquiry form, your email address, the type and content of the inquiry, attached images, and any nickname, ID, sign-in email address, device, OS and app version you enter

We do not collect contacts (address book) or precise location. The app does not use analytics tools. The advertising SDK (Google AdMob) is used only as described in section 8. The top page of our official website (duoclip.jp) uses the web analytics described in section 15.

3. Access to device features

  • Camera and microphone: to record 5-second videos with sound, and DUO Reactions
  • Photos (photo library): to choose your icon, to pick past photos and videos in REPLAY, and to save DUOs and BESTs to your device. Photos and videos used in REPLAY are processed on your device and are not sent to our servers unless you send them.
  • Notifications: to tell you when DUO Replies and reactions arrive
  • Tracking permission (iOS): to let you choose whether the advertising identifier (IDFA) may be used for ads. The Service works even if you do not allow it.

You can change these permissions at any time in your device settings.

4. How we use information

  1. To provide the Service (sending and receiving videos, combining DUOs, subtitles and translation, notifications, REPLAY and saving)
  2. To provide the DUOclip Plus paid plan (verifying purchases, managing subscription status and providing its benefits)
  3. To show ads to users without the paid plan and to measure them, such as counting impressions
  4. To verify identity and manage accounts and viewing permissions
  5. To keep the Service safe (automated content review, handling reports, preventing violations and misuse, and protecting children)
  6. To create DUO Replies from the official DUOclip account
  7. To investigate and fix problems, and to answer inquiries
  8. To send important notices
  9. To comply with the law

5. Processing by an external AI service

We send information to an external AI service (OpenAI) for the following:

  • Content review: still frames taken from posted videos (up to 24), text such as notes and nicknames, and transcripts of video audio are sent to assess possible violations. Reading text that appears in images is done on our own servers.
  • Automatic subtitles and translation: the audio of a video and its transcript are sent. Subtitles are shown to people allowed to watch that video. Turning them on or off with the translation icon only changes what is displayed.
  • Official account DUO Replies: the official DUOclip account may send a DUO Reply in which its characters say a line, when the creator of a DUO asks for one or after some time has passed since the DUO was sent. To write the line, four low-resolution still frames from the DUO's video and its subtitles are sent, and the line is read aloud with a synthetic voice. The working record of the line is deleted after delivery.

Under OpenAI's API terms, information sent to OpenAI is not used to train AI models. OpenAI may keep it for up to 30 days to monitor for abuse.

6. Service providers

We entrust the processing of information to the following providers, to the extent needed to provide the Service:

  • Supabase, Inc. (Supabase): authentication, database and video storage, on servers in Japan (Tokyo)
  • Render Services, Inc. (Render): content review, subtitles, video composition, sending notifications and creating official account DUO Replies, on servers in Singapore
  • OpenAI, L.L.C. (OpenAI): the processing described in section 5, in the United States
  • RevenueCat, Inc. (RevenueCat): verifying DUOclip Plus purchases and managing subscription status. We send an app-internal user identifier and the purchase and subscription information received from the store (no name, email address or video). United States
  • Google LLC (Google AdMob): ad delivery and measurement (see section 8). United States
  • Functional Software, Inc. (Sentry): collecting diagnostics, in the United States
  • Vercel Inc. (Vercel): delivering the duoclip.jp web pages (including invitation pages) and our admin screens, and delivering our website (vault-tec.jp) and processing inquiry form submissions, in the United States and elsewhere
  • Apple Inc. and Google LLC: sign-in and delivery of push notifications (Apple Push Notification service and Firebase Cloud Messaging). Notification text is a fixed message and does not include your content.
  • Google LLC (Google Analytics and Google Tag Manager): web analytics for the top page of our official website (see section 15). United States
  • Notion Labs, Inc. (Notion): recording inquiries and managing their status, in the United States
  • Plus Five Five, Inc. (Resend): sending inquiry notifications and confirmation emails
  • Upstash, Inc. (Upstash): preventing repeated inquiry form submissions (keeps only a transformed value of the sender's IP address, for 10 minutes)

7. International transfers

Some of the providers in section 6 are outside Japan, including in the United States and Singapore. Information on each country's personal data protection system is available on the website of Japan's Personal Information Protection Commission. Through contracts and other means, we take the measures needed to make sure these providers handle personal information properly.

8. Advertising and advertising identifiers

Users who do not subscribe to the DUOclip Plus paid plan may see ads in the app, delivered through Google LLC's advertising service Google AdMob. Ads appear in the Library and in the list of received DUOs. They are never shown while you are recording, sending, making a DUO Reply or choosing a BEST. No ads are shown during the first 7 days after you create your account, or while you subscribe to DUOclip Plus.

  • Recipient: Google LLC (United States)
  • Information sent: the advertising identifier (on iOS the IDFA, only if you allow tracking through App Tracking Transparency; on Android the Android advertising ID), device and app information (such as device type and OS and app versions), and your approximate region estimated from your IP address
  • Purpose: showing ads and measuring them, such as counting impressions and taps
  • Consent: if you live in the EEA (European Economic Area), the UK or Switzerland, we ask for your consent before showing ads. You can change your choice at any time from My Page > "Ad privacy settings".
  • On iOS, you can change tracking permission at any time in your device settings. If you do not allow tracking, you may still see ads that do not use the advertising identifier.
  • Ad content is limited to a rating suitable for teens, and ads in sensitive categories are blocked.
  • The AdChoices icon on each ad leads to Google's ad controls.

For how Google handles information, see Google's Privacy Policy (https://policies.google.com/privacy). Ads and DUOclip Plus may be rolled out gradually, so some users may not see them yet.

9. What other users see

  • Your ID, nickname and icon are shown to your friends, the people you send DUOs to and people who open your invitation. They are also shown to people who search for your exact ID.
  • Videos are shown to the people you choose (all your friends and followers, the ones you picked from them, or people who opened your invitation link and signed in). DUO Replies through an invitation link are accepted for 24 hours from when the sender starts the call for DUO Replies. Anyone with the link may be able to open it.
  • A DUO chosen as BEST is shown to everyone the DUO was sent to. People who open a valid invitation link and sign in to the app after the announcement can also see it.
  • Videos made with the Service show the participants' IDs, nicknames and icons.
  • Nothing is published to people who are not signed in.
  • We never tell the other person that you reported them or who you are.

10. Disclosure to third parties

We do not provide personal data to third parties without your consent, except where required by law, where needed to protect someone's life, body or property, and in similar cases. We may report illegal content involving child safety to the relevant authorities as required by law.

11. Retention and deletion

  • We keep account information and your content while your account exists.
  • Clips you discard before sending are deleted from our servers after about 10 minutes.
  • When you withdraw a DUO or DUO Reply you sent, others can no longer see it. The data on our servers is deleted when your account is deleted.
  • When you delete your account, we immediately stop its use and sharing and delete your profile, content, subtitles, notification tokens and sign-in information from our servers. If you signed in with Apple, we also disconnect Apple sign-in.
  • We stop sending to notification tokens that have not been refreshed for 30 days, and delete a device's token when you sign out on it.
  • Records of reports, content reviews and safety measures may be kept as long as needed to prevent abuse and comply with the law.
  • Diagnostics are deleted when Sentry's retention period ends. Data may remain in backups for a limited time.
  • Deletion does not reach videos that others have saved to their devices.

See the account deletion page for details.

12. Security

We take necessary and appropriate measures to prevent the leakage, loss or damage of personal data, including encryption in transit, checking viewing permissions, managing staff access with two-step verification, and encrypting authentication tokens.

13. Children

The Service is not intended for children under 13. If we learn that we have collected information from a child under 13, we will delete that account and its information.

14. Your rights

  • In the app you can edit your profile, change notification settings, block people and delete your account at any time.
  • You can change your consent to ads at any time from My Page > "Ad privacy settings" (see section 8). On iOS, you can change tracking permission in your device settings.
  • Through our contact channel, you can ask us to disclose, correct, add to, delete or stop using the personal data we hold about you, to stop providing it to third parties, and to disclose records of such provision. We will verify your identity and respond as required by law.
  • If you live in the EU, EEA or UK, you have rights under the GDPR and similar laws to access, rectify and erase your data, restrict or object to processing, and data portability, and the right to complain to a supervisory authority. We process information to provide the Service (performance of a contract), to keep it safe and fix problems (legitimate interests), and to comply with the law (legal obligations).
  • We do not sell personal information. The information sent to third parties for advertising is limited to what is described in section 8.

15. Web analytics on our official website

To understand and improve how the top page of our official website (https://duoclip.jp/) is viewed, we use Google Analytics from Google LLC through Google Tag Manager. It is not used in the app, on invitation, reply or video pages, or on sign-in screens.

  • Recipient: Google LLC (United States)
  • Information sent: views of the top page and their time, the domain of the referring site (page paths and parameters are not sent), browser and device type, screen size, language, approximate region estimated from the IP address, and an identifier stored in a browser cookie
  • Purpose: to understand page views and referring sites, and to improve the website
  • Advertising storage and data use, Google signals and ad personalization are turned off.
  • To stop this measurement, delete or block cookies in your browser, or use Google's opt-out browser add-on (https://tools.google.com/dlpage/gaoptout).

For how Google handles information, see Google's privacy policy (https://policies.google.com/privacy).

16. Changes to this Policy

We may change this Policy to reflect changes in the law or the Service. We will announce important changes on this page or in the app.

17. Contact

Send questions or requests about this Policy to duoclip@vault-tec.jp or through our contact page.

Effective: October 2, 2026

Last updated: October 9, 2026