Privacy
Privacy Policy
What the Duobot extension and appduobot.com do with information, in plain English. Most of it never leaves your browser.
01Who we are
Duobot ("Duobot", "we", "us") makes the Duobot browser extension and runs appduobot.com. This policy covers both. Duobot is an independent project and is not affiliated with, endorsed by, or sponsored by Duolingo, Inc.
Questions about this policy go to contact@appduobot.com.
02What stays on your device
The following is kept in your browser's extension storage and is not sent to us:
- The question and answers on each lesson screen, which the extension reads only to answer them
- The Automation and Titan Mode switches, which are kept per browser on purpose
- Your reminder times and notes
- Figures shown in the panel from your open Duolingo page, such as day streak, total XP, words learned, gems and profile picture
These Duolingo figures are read from the page using the session already open in your browser, the same way the Duolingo page reads them. We never receive your Duolingo password and cannot sign in as you.
03What we receive
When you sign in, a small account record is created and kept up to date:
- Google account details: account identifier, email address, display name and profile picture, received from Google when you choose Continue with Google. We use only the openid, email and profile scopes.
- Your Duolingo username: the @username of the Duolingo profile you use with Duobot. It links one Duolingo profile to one Duobot account, which keeps the free plan fair.
- Duobot totals: lessons run, normal and Titan runs, questions answered, questions missed, XP earned, total lesson time, and the dates of your first and latest lesson. These power the Done with Duobot card on every browser.
- Portable settings: your delays, letter by letter typing setting, natural error rate and keyboard shortcuts, so they follow you between browsers.
- Plan status: whether Max is active, when the current period ends, and the Stripe customer and subscription identifiers.
We do not receive the content of your lessons, your answers, your Duolingo password, or your browsing on other sites.
04How we use it
- To sign you in and keep you signed in
- To check whether your plan includes Max
- To keep your stats and settings the same on every browser you use
- To answer you when you write to support
- To prevent abuse of the free plan
We do not use any of it for advertising, we do not build profiles of you, and we do not sell it.
05Browser permissions
| Permission | Why Duobot asks for it |
|---|---|
| Access to duolingo.com | To read the question on screen, answer it, and show the dock and chips on your path. The extension runs on duolingo.com pages only. |
| tabs | To find your Duolingo tab and keep the toolbar icon and panel in step with it. |
| storage | To keep your settings, totals and session in the browser between visits. |
| identity | To run the Google sign in window. |
| alarms and notifications | To show the streak reminders you set, and to refresh your plan status in the background. |
| Access to supabase.co | To reach our backend for sign in, your plan, stats and settings. |
06Payments
Max is billed by Stripe. Card details go straight to Stripe on its checkout page and never pass through Duobot. Stripe tells us the result: which account paid, the subscription identifiers and the end of the paid period. Stripe's handling of payment data is covered by the Stripe Privacy Policy.
07Who else sees it
Three providers process data for us, each only for its own part:
- Supabase hosts our database and handles sign in sessions.
- Stripe processes payments and subscriptions.
- Google provides the sign in, under its own privacy policy.
We share nothing with anyone else, except where the law requires it.
08This website
appduobot.com uses no cookies, no analytics and no advertising scripts. It remembers your light or dark theme choice in your own browser's storage if you pick one. Fonts are loaded from Google Fonts, which means your browser contacts Google's servers to download them.
09How long we keep it
Your account record is kept while your account exists. If you ask us to delete it, we remove the account together with its stats, settings, Duolingo username link and plan record within 30 days. Stripe keeps payment records as financial regulations require. Anything held only in your browser is removed when you remove the extension or clear its data.
10Your choices and rights
- Sign out at any time from the panel, which clears the session on that browser.
- Get a copy of what we hold about you.
- Correct or delete your data.
- Remove the extension, which stops all collection immediately.
Write to contact@appduobot.com from your account address for any of these. Depending on where you live, data protection laws may give you further rights, including the right to complain to your local data protection authority.
11Security
Data travels over HTTPS. Each row in our database can be read only by its owner, and plan status can be written only by our payment webhook, which runs on the server. No method of storage or transfer is completely secure, but we keep what we hold small on purpose.
12Children
Duobot is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.
13Changes to this policy
If we change what we collect or who sees it, we will update the date at the top of this page. For significant changes we will also tell you in the extension before they take effect.