Privacy Policy

What Duly does with what you say, in plain words. Last updated September 28, 2026.

What you say

Duly listens only while the capture bar is open. Your iPhone turns your voice into text. For the few languages your iPhone can't handle on its own, Apple's speech recognition does it, under Apple's privacy policy. The recording is saved on your iPhone so you can play it back, and it never goes to Duly's server or to iCloud.

Sorting and idea sketches

To sort a ramble, Duly sends its text to Duly's server, along with the items it might need to change, so it can find the right one (their text, dates and lists, never recordings). It also sends your language, time zone and the current time, so "tomorrow at 8" means your tomorrow. The server runs on Vercel in Frankfurt, Germany.

The server passes the text to an AI model through OpenRouter and sends the result back to your iPhone. Duly asks OpenRouter to use only AI providers that don't train on what they receive or store it for their own use. The model may run outside the EU, for example in the United States. Duly's server doesn't store what you said: its logs record timing, cost and how many things were changed, never the words. Idea sketches (the gist, angles and first steps for an idea) work the same way, with the idea's text.

Keeping the service safe

Only the real Duly app can use the server. Your iPhone proves this with Apple's App Attest: once per install it creates a key in the iPhone's secure hardware, and the server keeps that key's public half. The server counts each device's requests per day to stop abuse; the counts expire after two days. If a device can't use App Attest, the server counts that day's requests by internet address instead, and those counts also expire after two days. None of this is linked to your name, your Apple account or what you said.

Your things and iCloud

Everything you save (reminders, lists, ideas, notes and the rest) is stored on your device. If you have Duly Pro and turn on iCloud Sync, it's also kept in your own private iCloud database, encrypted by Apple, so your other devices can show it. Duly's developer can't read it. Turning sync off stops syncing, and your things stay on your device.

A list you share is kept in iCloud, and the people you invite can see and change it. When you stop sharing it, they lose access.

Signing in

Signing in is optional. Sign in with Apple gives Duly an ID for your Apple account and, if you choose, your name and email. They're kept on your devices, in your iCloud Keychain and iCloud so your other devices know it's you. They're never sent to Duly's server. You can pick a photo for your profile; like your name, it's kept on your devices and in your iCloud, so your other devices show it, and never on Duly's server.

Subscriptions

Apple handles payment for Duly Pro, and Duly never sees your payment details. Duly uses RevenueCat to check whether your subscription is active. RevenueCat receives your App Store purchase records and a random ID the app creates, not your name or email. See RevenueCat's privacy policy.

Notifications and widgets

Reminder notifications are scheduled on your iPhone. Widgets read your next reminders from your iPhone. Nothing goes to a server for either.

What Duly doesn't do

Duly doesn't show ads, sell or share data for advertising, track you across other apps or websites, or include analytics tools.

Deleting your data

• Settings > Delete Everything in Duly erases your things, recordings and undo history from the device. With iCloud Sync on, it clears them from your iCloud too, and it stops sharing your shared lists (or leaves lists others shared with you).
• Deleting the app removes what's stored on the device.
• You can also remove Duly's iCloud data in your iPhone's Settings: your name > iCloud > Storage.

Duly's server keeps nothing linked to you to delete. If you have a question about your data, write to the address below.

Children

Duly isn't made for children under 13 and doesn't knowingly collect data from them.

Your rights

Depending on where you live (for example under the GDPR or Turkey's KVKK), you have the right to ask what data is held about you, to have it corrected or deleted, and to complain to your data protection authority. Since your things stay on your devices and in your iCloud, most of this is in your hands, and anything else can be asked by email.

Changes

If this policy changes, the new version will be posted here with a new date. Important changes will also be mentioned in the app's release notes.

Contact

Duly is made by Ömer Balkan. Questions about privacy: hi@blcnyy.dev.