Legal

Privacy Policy

Effective date: October 9, 2025

DutyCall (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (“App”) for rallying friends for gaming sessions. The App is built with Flutter for iOS and Android, and is powered by AWS Amplify with Firebase Cloud Messaging (FCM) for notifications.

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use the App.

1. Information We Collect

We collect information that you provide directly, information collected automatically, and information from third-party sources. We minimize data collection to what's necessary for the App's functionality.

a. Personal Information

Account Information: When you create an account, we collect your username and optionally your phone number (stored as a hashed string for security and to help find contacts who are also users).
Contact Information: With your permission, we may access your device's contacts to suggest friends (allies) already using the App. We do not store your full contacts list, only hashed phone numbers are used for matching, and this is optional.
User-Generated Content: Information you provide in profiles, groups (squads), rallies, looking-for-group calls, friendships, and rally responses, such as group names, game preferences, rally details, in-game names, and responses (e.g., yes/no/adjust).
Preferences and Settings: Flags like over-18 verification, show explicit content, hide calls on Home, and notification preferences.
Notification Tokens: Firebase FCM tokens for sending push notifications about rallies, ally requests, looking-for-group accepts, or other app activities.

b. Non-Personal Information

Device and Usage Data: Automatically collected data such as device type, OS version, IP address, app usage patterns (e.g., time spent in app, features used), and crash reports to improve the App.
Analytics: Aggregated data on app performance via AWS Amplify and Firebase tools.

We do not collect sensitive information like full phone numbers (beyond hashing), payment details (premium is billed by Apple or Google), or location data unless explicitly required for future features.

2. How We Use Your Information

We use the collected information to:

Provide and maintain the App's core features, such as creating squads, sending rally invitations, looking-for-group calls, managing friendships, and delivering push notifications.
Facilitate social interactions, like matching contacts via hashed phone numbers to suggest allies.
Personalize your experience, including showing relevant games, rallies, or content based on your preferences (e.g., explicit content toggle).
Send notifications for app events (e.g., new rallies, ally requests, or looking-for-group accepts) using FCM tokens.
Improve the App through analytics, debugging, and performance monitoring.
Ensure security, prevent fraud, and comply with legal obligations.
If you opt into premium features, manage subscriptions and access to exclusive catalog content.

We do not use your data for targeted advertising or sell it to third parties.

3. Sharing Your Information

We may share your information in the following ways:

With Service Providers: We use third-party services like AWS (for backend storage and hosting), Firebase (for notifications), and analytics tools. These providers are bound by contracts to protect your data and use it only for the services they provide to us.
Within the App: Your username, group memberships, rally responses, and (after a looking-for-group accept) in-game names are visible to other users in your squads, allies, or that call as part of the social features.
Legal Requirements: We may disclose information if required by law, to protect our rights, or in response to legal processes (e.g., subpoenas).
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

We do not share hashed phone numbers or contacts with anyone outside the App's matching functionality.

4. Data Security

We implement reasonable security measures to protect your information, including encryption in transit (HTTPS), secure hashing for phone numbers, and access controls in our AWS Amplify backend. However, no method of transmission over the internet or electronic storage is 100% secure, so we cannot guarantee absolute security.

5. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy, or as required by law. For example:

Account data is kept while your account is active.
Hashed phone numbers are stored optionally and can be deleted via app settings.
Inactive accounts may be deleted after a period of inactivity (e.g., 12 months).

You can request deletion of your data through the App's privacy settings or by contacting us.

6. Your Rights and Choices

Access and Update: You can view and update your profile, preferences, and stored data (e.g., delete hashed phone number, edit in-game names) in the App's settings.
Notifications: Opt out of push notifications via app settings or device settings.
Contacts Access: Revoke permission to access contacts at any time through your device settings.
Deletion: Request account deletion, which will remove your personal data from our systems (subject to legal retention requirements).
California/GDPR Rights: If applicable (e.g., CCPA or GDPR), you may have rights to access, correct, delete, or port your data. Contact us to exercise these rights.

7. Children's Privacy

The App is not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children. If we learn we have collected such data, we will delete it.

8. International Data Transfers

Your data may be stored and processed in the United States (via AWS and Firebase servers). By using the App, you consent to the transfer of your data to the US, where privacy laws may differ from your jurisdiction.

9. Changes to This Privacy Policy

We may update this policy from time to time. We will notify you of significant changes via in-app notifications or email. Insignificant changes will not trigger a notification. Insignificant changes include new app features that add user-information fields used only for essential app functionality. Any change to how we use your data outside of essential app functionality will be treated as a significant update. Your continued use of the App after changes constitutes acceptance.

10. Contact Us

If you have questions about this Privacy Policy, use Contact Us below.