Your memories are yours.

This policy explains how Duet (letsduet.studio) (“Duet”, “we”, “us”) handles personal data when you use the website and its features: the photobooth, Filter Studio, the live booth, games and letters, the shared album, and the Boutique for prints and keepsakes.

Duet is an independent service operated from India. For the personal data described here, we act as the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”). You can reach us any time through the contact form (topic “Privacy or data request”).

A lot of Duet is built so that we never receive your data in the first place.

• The photobooth and Filter Studio run in your browser. Your camera feed, filters, AR face masks and the strips you make are processed on your device and are not uploaded. A photo only leaves your device if you choose to download, share, save it to your album or order a print.
• Face tracking for AR masks runs on your device using models served from our own website. Face landmarks are used only to place the mask in the moment and are never sent to us or stored.
• Games, countdowns and date ideas keep things like the names you type, your countdown date, love-language results and ticked-off date ideas in your browser’s local storage. They stay on that device until you clear your browser data.
• Letters to the Future are sealed inside the link itself, in the part after the #. Browsers never send that part to a server, so we never see or store your letter. The “lock” is a lock of patience, not encryption: anyone who has the link can read it, so share it only with the person it is for.

We collect only what a feature needs, and only when you use that feature.

Your account (only if you sign in)

You can use the photobooth without an account. If you sign in, we use Appwrite for accounts. With Google sign-in, Google shares your name and email address with us. With an email link, we store your email address and Appwrite emails you a one-time sign-in link. We use this to sign you in, keep your album private, and link you with your partner (we store your partner invite code and which two accounts are linked).

Photos you save to your album

When you tap “Save to our album”, we store that image, its caption, the kind of capture (booth, live or studio) and the date. Album files are private: they are shown only to you and, if you have linked accounts, your partner. You can delete any memory from your album at any time, which deletes the image file too.

The live booth and Draw Together

The live booth connects exactly two people. Your audio, video, the photos you take together, backdrops you choose, stickers, game moves and drawings travel between you and your partner in real time through LiveKit, a real-time media service. Duet does not record live sessions and does not store them. To connect you, LiveKit processes connection details such as the room code, the display name your browser sends and your IP address. Each partner’s browser builds the finished strip on their own device; it is stored only if one of you saves it to the album.

Prints and keepsake orders

To make and deliver an order we collect the recipient’s name, mobile number and delivery address, the product, any personalisation (text, and the photo or album strip you choose), the amount, the order status and, once dispatched, the India Post tracking number. Print orders also record which album photo was ordered. You can buy a keepsake without signing in.

Payments

Payments are handled by Razorpay. You enter your card, UPI or bank details on Razorpay’s secure checkout, and Duet never sees or stores them. Razorpay tells us whether a payment succeeded and gives us order and payment reference numbers, which we keep with your order.

Messages you send us

If you use the contact form we store your name, email address, the topic, your message and any order reference you add, so we can reply and keep a record of your request. If you joined our waitlist, we hold your email address to tell you about the launch.

Analytics (no cookies)

We run our own simple analytics, with no advertising networks and no third-party trackers. We record the page you visited (without the query string), the website that sent you and any campaign tags in the link, your device type, browser, operating system, time zone and an approximate country, plus product events such as “strip captured” or which filter was used. Events never include photos, names or email addresses.

To count unique visitors, your browser keeps a random ID in local storage and a session ID in session storage. Before anything is stored, the server combines that ID with a secret value and hashes it, so the stored ID cannot be linked back to your device. Our analytics does not store IP addresses. If your browser sends Do Not Track or Global Privacy Control, no ID is created or stored at all and we only count the page view.

Technical logs and abuse protection

Like any website, our hosting provider may keep standard technical logs (such as IP address, browser and time of request) to run and secure the service. Our own rate limiting looks at your IP address briefly, in memory, to stop abuse; it is not saved.

Duet does not use advertising or cross-site tracking cookies. Here is everything we store in your browser:

When you pay, Razorpay’s checkout window may set its own cookies, as described in Razorpay’s privacy policy. You can clear Duet’s storage at any time from your browser settings; you will simply be signed out and your on-device preferences will reset.

We process your personal data with your consent, which you give when you choose to use a feature: signing in, saving to your album, joining a live booth, placing an order or writing to us. Each time we use the data only for that purpose. We may also process data where the DPDP Act allows it without fresh consent, such as data you voluntarily give us for a specific purpose (for example, an address to deliver your order) or to comply with the law.

You can withdraw consent as easily as you gave it:

• delete memories from your album, or sign out;
• leave a live booth at any time, which ends the connection;
• clear your browser storage, or turn on Do Not Track / Global Privacy Control;
• ask us to delete your account and data through the contact form (topic “Privacy or data request”).

Withdrawing consent does not affect processing that already happened. If an order is already in production or shipped, or the law requires us to keep a record (for example, payment and tax records), we will keep only what is necessary for that.

We do not sell your personal data and we do not use it for advertising. We share it only with the service providers who help us run Duet, and only what each needs:

• Appwrite — website hosting, accounts and sign-in emails, our database and private file storage for albums.
• LiveKit — relays live booth and Draw Together audio, video and data between the two people in a room.
• Razorpay — processes payments.
• Google — only if you choose Google sign-in.
• India Post — the recipient’s name, address and mobile number appear on the parcel so Speed Post can deliver it.

Your partner sees the memories you save to your shared album once your accounts are linked. We may also disclose information if the law requires it, or to protect the safety of our users or the service.

To print and post an order, we open the photo you ordered. We do not browse albums; beyond printing your orders, we look at stored content only when you ask us for help or when the law requires it.

Our service providers may process data outside India. Our Appwrite project (hosting, database and storage) is in Appwrite Cloud’s Singapore region. LiveKit routes live sessions through its global network, usually via servers close to the two participants. Razorpay processes payments in India, and Google sign-in runs on Google’s global infrastructure.

The DPDP Act allows personal data to be processed outside India except in countries the Government of India restricts. We choose providers that protect data with encryption in transit and access controls.

• Account: until you ask us to delete it. We then delete your account, album and partner link.
• Album photos: until you delete them, or your account is deleted.
• Live booth and Draw Together: not stored. They exist only while the session is running.
• Orders and payment records: for as long as needed to deliver the order and handle any reprint or refund, and afterwards for as long as Indian tax and accounting laws require us to keep transaction records.
• Contact messages: as long as needed to resolve your request and keep a record of it. You can ask us to delete them sooner.
• Waitlist: until you ask to be removed.
• Analytics: the short-lived records used to count visitors and online users are deleted automatically after about three days. Page views and product events, which carry no name, email or IP address, are kept to understand how Duet is used over time.

• The whole site is served over HTTPS, and browsers are told to always use a secure connection.
• Album files sit in private storage with per-person permissions. Images are served only after we check that you own the memory or are the owner’s linked partner.
• Contact messages and analytics are kept in collections that only our server can access.
• Live booth rooms are capped at two people, and access tokens expire quickly.
• We rate-limit sensitive actions and use a strict Content Security Policy.
• We never handle or store your card or bank details.

No system is perfectly secure. If a personal data breach affects you, we will tell you and report it to the Data Protection Board of India, as the DPDP Act requires.

Under the DPDP Act you have the right to:

• Access — get a summary of the personal data we hold about you, how we process it, and who we have shared it with;
• Correction and erasure — have inaccurate or incomplete data corrected or updated, and have data erased when it is no longer needed or you withdraw consent;
• Grievance redressal — have a complaint about how we handle your data answered;
• Nominate — name someone who can exercise these rights for you if you die or become unable to.

To use any of these rights, write to us through the contact form (topic “Privacy or data request”). Please write from, or include, the email address on your Duet account so we can find your data. We may ask you to confirm the request from that address before acting on it, to protect your account.

Duet is intended for people aged 18 and over. Teenagers aged 13 to 17 may use Duet only with the consent and supervision of a parent or legal guardian, who must place any order for them. Duet is not meant for children under 13.

We do not knowingly collect personal data from children without a parent’s or guardian’s consent, and we do not track children or show them advertising. If you believe a child has given us personal data, tell us through the contact form (topic “Privacy or data request”) and we will delete it.

If you have a concern about your personal data, please contact us first through the contact form (topic “Privacy or data request”). We will acknowledge your message, look into it, and reply with what we have done as quickly as we can, and within the time limits set under the DPDP Act and its rules.

If we change how we handle personal data, we will update this page and the “Last updated” date at the top. If a change is significant, for example a new purpose or a new kind of data, we will also tell you on the site, or by email if you have an account, before it takes effect and ask for your consent where the law requires it.

Questions, requests or complaints about privacy: write to us through the contact form (topic “Privacy or data request”). We read every message ourselves.