Skip to content

Slyduo Privacy Policy

Last updated · August 11, 2026

This Privacy Policy explains how Sollabs Technology FZ-LLC, a free zone limited liability company registered with the Ras Al Khaimah Economic Zone (RAKEZ), United Arab Emirates, Licence No. 17009738 (“Slyduo”, “we”, “us”, or “our”), collects, uses, shares, and protects your personal information when you use the Slyduo mobile application and related services (the “App” or “Service”).

Slyduo is a consensual comedy game for couples. Both partners always know the game is running; only the daily task content is temporarily secret. Slyduo is not a monitoring, tracking, or surveillance tool, and we do not design it to be used as one.

By using the App you agree to this Privacy Policy. If you do not agree, please do not use the App.

Contact for privacy questions and requests: couplesappdxb@gmail.com

1. Who we are (Data Controller)

The data controller responsible for your personal information is:

  • Sollabs Technology FZ-LLC (free zone limited liability company, RAKEZ Licence No. 17009738)
  • FDBC5800, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates
  • Email: couplesappdxb@gmail.com

For users in the EEA/UK, this email is also the contact point for data-protection matters. We are a small operator and do not have a separately appointed Data Protection Officer; privacy requests are handled directly at the address above.

2. Age requirement — adults only

The App is intended only for adults aged 18 or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete it. If you believe a minor has provided us information, contact us at couplesappdxb@gmail.com.

3. What information we collect

We collect only what we need to run the game.

3.1 Information you provide

  • Account / sign-in identity. When you sign in with Google or Apple, we receive a unique user identifier and your email address from that provider. We do not create or store passwords; authentication is handled by our provider, Supabase Auth. (Sign in with Apple can hide your real email via a private relay address — this is your choice.)
  • Pairing information. A 6-digit activation code you generate or enter to link with your partner, and the resulting couple relationship.
  • Gameplay content. Your daily guesses (free text), objections/confirmations, and — if the game is played in a group of couples — group participation data.
  • Proof media. Photos, audio, or video you record and upload as “proof” that you completed your own daily task. See Section 5 for how this sensitive content is handled.
  • Support communications. If you email us, we receive your message and email address.

3.2 Information collected automatically

  • Device push token. A token from Firebase Cloud Messaging (Android) or Apple Push Notification service (iOS) so we can send you game notifications (deadline reminders, “the reveal is ready”, etc.).
  • Local time zone. An IANA time-zone identifier captured from your device solely to anchor your couple’s daily schedule (assignment, deadline, reveal) to your local time. We do not use it to locate or track you.
  • Subscription status. Whether you have an active free trial or paid subscription, and related purchase events, received through our billing provider (RevenueCat) and the app stores.
  • Basic technical/diagnostic data. Standard information needed to operate, secure, and debug the service (e.g., timestamps of requests, error logs, crash reports, device model and operating-system version, and a technical identifier for a crash event). We use Sentry as our error- and crash-monitoring provider to receive this diagnostic data so we can find and fix problems. We do not use third-party advertising or marketing-analytics SDKs, we do not build advertising profiles about you, and we do not use diagnostic data to track you across other apps or websites.

3.3 What we do NOT collect

  • We do not collect precise GPS location.
  • We do not sell your personal information.
  • We do not use your content to train artificial-intelligence models.
  • We do not perform any automated or AI analysis of your proof media — only your partner sees and judges it (human judgment is the only verification layer, by design).

We use your information to:

Purpose Data used Legal basis (GDPR/UK GDPR)
Create your account and pair you with your partner Sign-in identity, pairing code Performance of a contract
Run the daily game loop (assign tasks, accept guesses, reveal, score) Gameplay content, time zone Performance of a contract
Store and serve proof media between partners at reveal time Proof media, round metadata Consent (you choose to record/upload) and performance of a contract
Send game notifications Push token Consent (you can disable notifications)
Manage trials, subscriptions, and entitlement Subscription status Performance of a contract
Keep the service secure and prevent abuse Technical/diagnostic data Legitimate interests
Respond to your support requests Support communications Legitimate interests
Comply with legal obligations As required Legal obligation

Where we rely on consent, you may withdraw it at any time (for example, by disabling notifications, or by not recording proof media). Withdrawing consent does not affect processing that already took place.

5. Proof media — special handling

Proof media is the most sensitive information in the App, and we handle it accordingly.

  • Content rule. By the rules of the game, proof media may capture only you, the player. You must not capture other people’s faces or voices. This protects you and others, and is required by our Terms.
  • Where it is stored. Proof media files are stored with Cloudflare R2 object storage. Our database stores only metadata about the media (such as the media type, the round it belongs to, and expiry), never the media files themselves.
  • How it is accessed. Media is never publicly readable. It is served only through short-lived, signed URLs (valid for about five minutes) that are generated only after our server confirms you are entitled to view it and that the round’s reveal time has passed. Before the reveal time, your partner’s task, guess, and proof are unreachable — this is enforced on our servers and at the database layer, not merely hidden in the app.
  • Automatic deletion. Proof media is automatically deleted after the round it belongs to closes. A recurring background job removes the files shortly after closure; in normal operation this happens within approximately 48 hours, and orphaned uploads are also swept out. We do not keep proof media as a long-term archive.

6. Who we share information with (Processors / Sub-processors)

We do not sell your personal information and we do not share it for advertising. We share data only with service providers (“processors”) who help us operate the App, under contracts that require them to protect it and use it only on our instructions:

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users or the public.

7. International data transfers

We operate globally. Your information may be processed in countries other than your own, including where our providers host infrastructure (for example, our primary database region is in India (ap-south-1), and Cloudflare operates a global network). Where we transfer personal data out of the EEA, UK, or other regions with transfer restrictions, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), as offered by our providers. You can contact us for more information about these safeguards.

8. How long we keep your information

  • Proof media: deleted automatically after the round closes (typically within ~48 hours) — see Section 5.
  • Partner disconnect: when you disconnect from your partner, your shared couple data (streak, level, and history) is frozen for a 3-day grace period during which you can reconnect with no data loss. If you do not reconnect (or if you choose “disconnect permanently now”), the shared couple data is permanently deleted.
  • Account data: kept while your account exists. When you request account deletion (Section 10), it enters a reversible 7-day grace period — you can cancel during that time — after which your account and all associated data are permanently deleted as described there.
  • Legal/technical records: limited records may be retained where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

9. Your privacy rights

Depending on where you live, you may have some or all of the following rights. We honor these requests regardless of your location.

9.1 Everyone

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your account and associated data (see Section 10).
  • Withdraw consent (e.g., disable notifications).

9.2 EEA / UK (GDPR / UK GDPR)

In addition, you have the right to restrict or object to processing, the right to data portability, and the right to lodge a complaint with your local supervisory authority (for example, your national Data Protection Authority, or the UK ICO). We would appreciate the chance to address your concerns first at couplesappdxb@gmail.com.

9.3 California (CCPA / CPRA)

California residents have the right to know what personal information we collect and how we use it, to delete it, to correct it, and to not be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under California law, and we do not use it for cross-context behavioral advertising.

9.4 UAE, Saudi Arabia, and other regions

Residents of the UAE (Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data), Saudi Arabia (PDPL), and other jurisdictions may have comparable rights of access, correction, deletion, and objection. We apply the protections in this policy to all users.

How to exercise your rights: email couplesappdxb@gmail.com from the address associated with your account, or use the in-app tools (Settings). We will verify your request and respond within the time required by applicable law (generally within 30 days). You will not be charged for making a request, and you may use an authorized agent where the law allows.

10. Deleting your data

You are in control of your data:

  • Disconnect from your partner — in Settings, you can disconnect. This starts a reversible 3-day grace period, after which shared couple data is permanently deleted (see Section 8). You may also choose to delete it immediately (“disconnect permanently now”).
  • Delete your account — in Settings → Delete my account, you can request deletion. This starts a reversible 7-day grace period: you stay signed in and can cancel any time from Settings → Cancel deletion. During the grace period gameplay is paused, and if you have a partner they are unpaired and notified. After 7 days, your account and all data you own are permanently deleted — including your profile, your sign-in identity, your task history, guesses, stats, subscription link, any remaining proof media, and the shared couple data — and you are signed out. Once the 7 days pass, this cannot be undone.
  • If you no longer have the app installed, you can request deletion by emailing couplesappdxb@gmail.com from your account email address, and we will delete your data.

For a step-by-step guide, see Delete your Slyduo account.

Note: deleting your account removes your data from our systems; it does not cancel a subscription billed by Apple or Google. Manage or cancel subscriptions through your App Store or Google Play account (see our Terms).

11. How we protect your information

We use industry-standard measures to protect your data, including:

  • Encryption in transit (HTTPS/TLS).
  • Row-level security in our database so that a user can only access data belonging to their own couple, and cannot read a partner’s task, guess, or proof before the reveal time — enforced at the data layer, not only in the app.
  • Signed, expiring, non-public URLs for all proof media.
  • Least-privilege access controls and scoped credentials for our storage and services.

No method of transmission or storage is completely secure, but we work to protect your information and continuously improve our safeguards.

12. Notifications

We send push notifications related to gameplay (for example, deadline reminders and reveal alerts). You can turn notifications off at any time in your device settings or in the App. Turning them off does not stop the game — it only stops the alerts.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the App. Your continued use of the App after changes take effect means you accept the updated policy.

14. Contact us

Questions, requests, or complaints about this Privacy Policy or your data:

Sollabs Technology FZ-LLC FDBC5800, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates Email: couplesappdxb@gmail.com