DuoTask privacy policy

Last updated: 26 September 2026

DuoTask is an app for sharing housework within a group (a couple, a family or friends living together, up to six people) or for organising yourself if you live alone. This policy explains what data it keeps, what for and for how long, in plain language.

Who is responsible

DuoTask is a personal project. Data is stored on the own hosting of the domain lienzovirtual.com, located in the European Union. It is never sold or handed to third parties for commercial purposes. Contact: duotask@lienzovirtual.com.

What data is stored

• Your account: email address, the name you choose and your language. The password itself is never stored, only a cryptographic hash it cannot be recovered from.
• Your group: the 6-letter code that pairs you and the group type.
• Activity: tasks created, done, approved or rejected (with the reason), coins earned and spent, shelf rewards and redeemed rewards.
• Photos (optional): the photo you attach as proof of a task.
• Notifications: if you allow them, a device identifier so they can be delivered.

DuoTask does not collect your location, contacts, files or your use of other apps. There are no ads and no third-party trackers.

What it is used for

Only to make the app work: signing you in, showing the board you share with your group, keeping count of the coins and telling you what the others do. No profiling, no automated decisions.

How long it is kept

• Photos are deleted automatically after 15 days, and also as soon as you remove them or the task is deleted.
• Everything else is kept while your account exists.
• Deleting your account removes your personal data, your sessions and your coin movements. If your group is left empty, the group is deleted too.
• If someone types a wrong code to sign in on a kid's tablet, an encrypted fingerprint of their connection (not the IP address) is kept for one day at most, to stop anyone trying codes at random.

Who it is shared with

• The people in your group: your name, the tasks, the photos you attach, rejection reasons, your rewards and how many tasks you did each week. That is the point of the app. Not your coins: each person's balance is visible only to them. Custom tasks are visible only to whoever assigns them and whoever receives them.
• The notification service (Expo and, underneath, Google Firebase Cloud Messaging), only if you allow notifications: it receives the text of the notification and the device identifier, nothing else.
• Nobody else.

Adult content

The app includes an optional section of adult rewards, switched off by default. Using it requires switching it on deliberately, confirming you are of legal age and protecting it with a PIN or your fingerprint. That PIN is stored encrypted on your phone only and is never sent to any server. The section does not exist in "Family" groups.

Children

DuoTask accounts are for people aged 18 or over. In «Family» groups, an adult can create kid profiles for the children in their household. Those profiles have no email, password or access of their own: the child plays on the adult's phone or on their own tablet, which the adult links with a single-use code that expires after ten minutes. The adult creates the profile, is responsible for it and can sign the tablet out at any time. For a kid, the app keeps only the name the adult types (we recommend a nickname) and their activity in the app: tasks, coins and rewards. No photos, date of birth or any other data are requested. The adult can delete the profile at any time from Profile → My group, and everything belonging to it is deleted with it.

Security

All traffic is encrypted with HTTPS. Passwords are stored as a modern cryptographic hash. Sessions are stored encrypted on the phone and can be closed at any time. Photos get a long random address that cannot be guessed, and their hidden data (EXIF), including location, is stripped on upload.

Your rights

You can access, correct or delete your data, object to its processing or ask for a copy. The quickest way:

If you believe your data is not handled properly you may complain to the Spanish Data Protection Agency (aepd.es).

Changes

If this policy changes, it will be published here with a new date and, for important changes, announced inside the app.