Duno Legal
PRIVACY POLICY
Duno Software (Pty) Ltd
Last Updated: 6 October 2026
1. Introduction
Duno Software (Pty) Ltd ("Duno", "we", "us", or "our") respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA).
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Duno platform.
By using Duno, you agree to this Privacy Policy.
2. Responsible Party
The responsible party for your personal information is:
Duno Software (Pty) Ltd
Republic of South Africa
Email: hello@duno.win
3. Information We Collect
3.1 Information You Provide
When you create an account or use Duno, we may collect:
- Full name
- Email address
- Account login details
- Subscription status
- Billing status (processed by third parties)
- Content you upload (games, text, images, GIFs, links)
3.2 Student Use
Duno does not require students to create accounts.
Teachers are responsible for ensuring that any content uploaded does not contain personal information of minors.
3.3 Automatically Collected Information
We may automatically collect:
- IP address
- Browser type
- Device information
- Usage data
- Log files
- Cookies and similar technologies
3.4 Google Sign-In Data
If you choose to sign in with Google, Duno requests only the email and basic profile permissions. We receive your email address, first and last name, and profile photo when available. We use your email to create or identify your Duno account, and your name and photo to populate your Duno profile. Your name and photo may appear with content you share publicly on Duno.
Google handles your Google password; Duno never receives it. These permissions do not give Duno access to your Gmail messages, Google Drive files, calendars, or contacts. Our sign-in implementation does not store Google access or refresh tokens for later API access.
We store the account details in our PostgreSQL database hosted by Neon. A profile photo URL is stored as an account media record, and our media service may process and store a copy using Cloudflare R2. Account details are also used by service providers supporting Duno: Resend for email/contact management and, when enabled, Telegram for internal signup notifications. These integrations may receive your name and email address. We do not sell Google user data or use it for advertising or AI model training.
We retain these details while they are needed to operate your account, subject to the retention purposes in section 9. You can edit your name and photo in your Duno profile, or request access, correction, or deletion of your account and Google-derived data by emailing hello@duno.win. We may need to verify that you own the account before handling your request. Records needed for legal, accounting, or security purposes may be retained as described in section 9, and deleted data may remain temporarily in backups.
You can also remove Duno's access from your Google Account connections. Removing access prevents further Google sign-in authorization; it does not automatically delete data already stored by Duno.
4. How We Use Your Information
We process personal information for the following purposes:
- To provide and operate the Duno platform
- To manage user accounts
- To administer subscriptions
- To improve functionality
- To ensure platform security
- To enforce our Terms of Service
- To comply with legal obligations
- To communicate with you
We do not sell personal information.
5. Legal Basis for Processing (POPIA)
We process personal information based on:
- Your consent
- The performance of a contract (account and subscription)
- Compliance with legal obligations
- Legitimate interests (platform security, fraud prevention, improvement)
6. User-Generated Content
Users are solely responsible for content they upload.
You must not upload:
- Personal information of minors
- Sensitive personal information
- Confidential third-party data
Duno does not pre-screen content but may remove content at its discretion.
7. Sharing of Information
We may share personal information with:
- Payment processors (e.g., Lemon Squeezy or other providers)
- Hosting providers
- Cloud infrastructure providers
- Legal authorities where required by law
- Professional advisors
We require third-party service providers to maintain appropriate safeguards.
We do not sell or rent personal information.
8. International Transfers
Your information may be processed in countries outside South Africa where our service providers operate.
We take reasonable steps to ensure adequate data protection safeguards are in place.
9. Data Retention
We retain personal information only for as long as necessary for:
- Providing the service
- Legal compliance
- Accounting requirements
- Fraud prevention
- Dispute resolution
Certain records may be retained for up to 5 years in accordance with legal and tax requirements.
Deleted content may remain temporarily in backup systems.
10. Security Safeguards
We implement reasonable technical and organizational measures to protect personal information against:
- Unauthorized access
- Loss
- Misuse
- Alteration
- Disclosure
However, no online system is completely secure.
11. Your Rights Under POPIA
You have the right to:
- Access your personal information
- Request correction of inaccurate information
- Request deletion (subject to legal retention requirements)
- Object to processing
- Withdraw consent (where applicable)
- Lodge a complaint with the Information Regulator of South Africa
Requests may be submitted to: hello@duno.win
12. Cookies
Duno may use cookies and similar technologies to:
- Maintain sessions
- Improve functionality
- Analyze usage
- Enhance user experience
You may control cookies through your browser settings.
13. Children's Privacy
Duno does not require student accounts.
Teachers are responsible for ensuring compliance with applicable laws when using Duno in classroom environments.
We do not knowingly collect personal information directly from children.
14. Changes to This Policy
We may update this Privacy Policy from time to time.
Continued use of Duno constitutes acceptance of the updated version.
15. Contact Information
If you have questions regarding this Privacy Policy or your personal information:
Duno Software (Pty) Ltd
Email: hello@duno.win
You may also lodge a complaint with:
The Information Regulator (South Africa)