Privacy Policy

Effective: 12 July 2026

DueSoon helps you keep track of document, bill, subscription, warranty and contract dates so you don't miss them. It is built local‑first and privacy‑first.

What DueSoon does

DueSoon stores your documents and reminders on your device and shows you what's coming up. The internet is only needed for optional features: cloud AI extraction (Smart Scan), email forwarding, encrypted backup, account sign‑in and push notifications.

Local‑first by default

By default your documents and their data are kept on your device. They are not uploaded to our servers unless you turn on a feature that needs it.

Data kept on your device

• Your documents and the files you add (encrypted at rest with a device key)
• Reminders, subscriptions, warranties and life objects
• Your settings and app preferences

Data that may go to a server when you choose a feature

We only process data on our servers to provide a feature you turn on:

• Forwarded emails. If you forward an email to your DueSoon address, the message and its attachments wait briefly in a temporary, encrypted queue so the app can import them, then are deleted (see Data Retention).
• Encrypted backup. If you enable backup, your documents are encrypted on your device and the encrypted blobs are stored in our object storage. The readable content doesn't leave your device, and the backup can't be opened without your recovery key.
• Smart Scan. When you start it — or automatically, if you turn on automatic mode, for a document you scan or share (never a forwarded item) — the text extracted from a document is sent to an AI provider for extraction. The document file itself stays on your device.
• Account / inbox identity. An anonymous account id and a forwarding‑address identity let the service route forwards and back up to the right account. No name or email is required.
• Push notification token. Only if you opt in to new‑document push, a device token is stored so the server can notify you that something arrived.
• Purchase / subscription status. Handled by the App Store or Google Play and our subscription infrastructure (RevenueCat); we receive entitlement status, not your payment details.

How encrypted backup works

Backup is end‑to‑end encrypted on your device before upload. The keys that open it (your recovery key and related keys) stay with you. We store only encrypted data we can't read.

If you lose your recovery key

Your encrypted backup is opened with your recovery key. If you lose it, we can't open your backup for you — that is the trade‑off of end‑to‑end encryption.

Smart Scan and AI

Smart Scan runs when you choose it, or — if you turn on automatic mode (a Plus setting) — automatically for a document you scan or share when the on‑device read isn't confident. It never runs automatically for a forwarded or inbound email. It sends the document's text (not the file) to an AI provider to suggest dates, amounts and types. Results are always shown to you as a draft to review and confirm — DueSoon does not save or act on them automatically. AI can be wrong; please check important details.

Third‑party services

DueSoon uses a small number of providers to deliver features:

• App Store / Google Play — subscriptions and purchases.
• Subscription infrastructure (RevenueCat) — processes purchase and entitlement events (from the App Store / Google Play) so we can apply your Plus status. It receives purchase/entitlement data, not your payment‑card details.
• Inbound email provider — receives forwarded emails for the temporary queue.
• Cloud object storage (Cloudflare R2) — holds the encrypted backup blobs and the temporary forward queue.
• AI provider — performs Smart Scan text extraction (primary OpenAI‑family model; a failover model may be used on errors). Only document text you send is processed.
• Apple / Google push services (APNs / FCM) — deliver opt‑in new‑document notifications.

DueSoon does not use third‑party advertising or cross‑app tracking, and does not embed third‑party analytics or crash‑reporting SDKs.

Data security

Local files are encrypted at rest with a device key in the OS secure store. Backups are end‑to‑end encrypted. Network traffic uses HTTPS. No method is perfectly secure, but we aim to minimise what leaves your device and to encrypt what does.

Deleting your data

• Delete local data removes your on‑device documents, files and database.
• Delete account also erases your server footprint: the forward queue, encrypted backup, forwarding alias and related records.
• Local files on a device that is offline are removed when that device performs the delete; we don't claim to remotely wipe an offline device.

Email updates (optional)

If you sign up for DueSoon email updates on our website, we process only: your email address, your language, where you signed up, the subscription topic (product updates), the version of the consent text you ticked, the time of your consent, and the subscription's status. The purpose is to send you beta and launch news, product updates, new features and occasional DueSoon offers. The address is not used for third‑party advertising, and the list is never sold or shared. We do not permanently store your IP address or browser user‑agent with your signup. Signing up is optional and is never a condition of using DueSoon. Before real email updates begin we will ask you to verify your address, and every marketing email will include a way to unsubscribe. You can also withdraw your consent at any time via privacy@duesoon.co; retention periods are described in Data Retention.

Children

DueSoon is not directed to children and is not intended for use by children.

Contact

Questions about privacy: privacy@duesoon.co

Changes

We may update this policy. Material changes will be reflected here with a new effective date.