Privacy policy

Last updated November 2, 2026

Duo is a companion app for your Mac, with Sidecar, its companion app for iPhone. This policy explains what Duo keeps on your Mac, what it sends to the cloud and when, what your Duo account holds, and how to delete it. It also covers this website.

In short

• Your conversations, memories and learned actions are stored on your Mac.
• Cloud model requests happen only while you are signed in. Signed out, Duo sends nothing to cloud models and uses the model on your Mac instead.
• When Duo uses the cloud, your message goes with the few memories most relevant to it. Screen text goes only while “Share screen text with the cloud” is on.
• Choose “On your Mac” in Settings and every answer comes from a model on your Mac.
• Sharing feedback with the Duo team is off unless you turn it on.

What stays on your Mac

Duo keeps its data in a database on your Mac, at ~/Library/Application Support/Duo/duo.sqlite:

• Conversations: your messages, Duo’s replies, the tools it used and their results.
• Memories: facts Duo learned, why they matter, where and when it learned them, who and what they are about, and how sure it is. Duo groups them into topics (people, projects, places and preferences) with a short note on each. Notes are written by the model on your Mac only. The same notes are also saved as plain text files in ~/Library/Application Support/Duo/memory/, so you can read them.
• Learned actions: the steps of tasks Duo has done before, with tiny pictures (16 by 16 and 48 by 30 pixels) to find its place on screen. These pictures are never shared.
• Processes Duo watched, when “Learn from what I do” is on: the controls and menus you used, window titles, page addresses, the values you left in fields (up to 200 characters, never from secure or password fields) and a few small window pictures, kept for up to 24 hours.
• Screen comments: the picture of the region you selected, saved with your comment.
• Feedback on suggestions you give with “Give feedback”, kept for 180 days.
• Message ideas Duo offered while you wrote, kept in the Suggestions tab for 30 days. Your draft itself isn’t saved.

Sidecar on your iPhone talks to Duo on your Mac directly, over your local network. Your sign in session is kept in the macOS Keychain. Screenshots Duo takes to work in an app, or for quick screenshot checks, are held in memory while they are used and are not saved.

Secrets Duo removes

Duo strips API keys, passwords, long random tokens, card numbers, bank account numbers, IBANs, card security codes, Social Security numbers and private keys. It does this before saving memories, topic notes and the values it recorded while watching, and before checking screen text for suggestions. Messages you type yourself are sent as you wrote them.

Duo never reads password managers (1Password, Bitwarden, LastPass, Keychain Access) or System Settings for context, and quick screenshot checks never capture password managers or secure fields.

What goes to the cloud, and when

Cloud models need a Duo account. While you are signed in, and unless you chose “On your Mac”, Duo sends the following:

• Your messages, with the conversation so far and any images or text files you attach, plus up to 5 memories most relevant to the message and notes on up to two topics it names. If the model needs more, it can look up more memories or a topic’s note.
• Screen context (the app, the window title and the text in focus) with your messages, only while “Share screen text with the cloud” is on.
• Screen text for suggestions, only while “Share screen text with the cloud” is on, with a few relevant memories. This includes a message you are writing in a chat or mail app before you send it, the conversation beside it, notification text and your calendar for the next two weeks. On flight, hotel and stay pages it also includes your calendar up to 6 months ahead, memories about your trips and short excerpts of other windows from the last 15 minutes that mention a date or a trip. With the setting off, suggestions are made by the model on your Mac.
• Small window screenshots every few seconds while the screen changes, for quick checks, while “Quick screenshot checks” is on.
• The picture of a screen region you comment on, with that message.
• Screenshots during computer use in apps Duo can only work by looking, such as Figma.
• Checks on learned actions: after Duo replays one, what each step was given and answered, or the app’s window screenshot, to confirm it worked. For a step Duo leaves to the model, the request, the goal and that step’s details.
• A process Duo watched (its steps, field values and up to 6 small window pictures), to turn it into a learned action, while “Learn from what I do” and “Share screen text with the cloud” are on.
• Your feedback, summarized: a short summary of the suggestions you marked “Not for me” goes with suggestion requests. A feedback note sent without a reason goes once, with the suggestion it is about, so Duo can tell a mistake from a preference.

These requests go through Duo’s server, which checks that you are signed in, records a usage entry and passes the request to the cloud model service with Duo’s key. The server does not store what you send or what comes back, and the request it passes on carries nothing that identifies your account. No model key ships in the app.

Your voice

The wake word, dictation and voice messages use Apple’s speech recognition. On the Mac, Duo asks for recognition on the device whenever your Mac supports it for your language; where it doesn’t, the audio goes to Apple’s speech recognition service. Dictation in Sidecar on the iPhone may send the audio to Apple. Duo’s spoken replies are made on your Mac.

Shared learned actions

While “Share learned actions” is on, Duo sends learned actions that pass strict rules to a shared pool, where they are reviewed, and downloads the approved ones. A shared action holds the request pattern with placeholders, the app and its version, the mode, the window size, the steps with your values replaced by placeholders, and the goal. Duo also sends a random ID for your Mac and whether a replay worked.

It never sends the values you used, screen pictures, shell commands or AppleScript, or any action with links, file paths, email addresses, long text or personal details. Shared actions are not tied to your account. Actions Duo learned by watching you stay on your Mac, unless your Mac holds a trust token from the Duo team.

Your Duo account

You can sign in with a code sent to your email, with Google or with Apple. Accounts are run on Supabase, which stores:

• Your email address and when you sign in. With Google or Apple, also the profile details they share, like your name. Duo asks Google only for your basic profile and email address.
• The sign in codes it emails you. Each code works once and expires after 10 minutes. The emails are sent through Resend, from noreply@with-duo.com.
• A usage log with one entry per cloud request: your user ID, the model, the kind of request, the token counts, the result and the time. You can read your own entries and no other user can. The Duo team can see them, to run the service.

Signing out deletes the session from your Mac and ends it on the server.

Sharing feedback with the Duo team

“Share feedback with the Duo team” (Settings, General, Suggestions) is off by default. When you turn it on while signed in, each piece of feedback you give from then on is sent with your account: the suggestion it is about, the app and window it appeared in, what made Duo look, your reason and your note, and the app version. Other users can’t read it; the Duo team can. Feedback you gave while sharing was off stays on your Mac.

Who handles your data

• Supabase runs Duo’s accounts, its server, the shared pool of learned actions and shared feedback.
• Resend sends the sign in emails.
• Apple recognizes speech when it can’t be done on your device, as described above.
• A cloud model service receives the requests listed above from Duo’s server, without your account details.
• Vercel hosts this website.

Models on your Mac run through Ollama, on your Mac, and send nothing anywhere.

Your choices

• Where Duo thinks (Settings, Privacy, Models): “On your Mac” keeps every answer, your memories and notes on your Mac and turns quick screenshot checks off.
• Share screen text with the cloud (Settings, Privacy, Screen): on by default.
• Quick screenshot checks (Settings, Privacy, Screen): on by default.
• Learn from what I do (Settings, Privacy, Screen): turning it off stops watching and clears what was watched.
• Share learned actions (Settings, Privacy, Actions): on by default.
• Share feedback with the Duo team (Settings, General, Suggestions): off by default.

Deleting your data

In Settings, Memories you can correct or delete any memory, and the note and file for its topic are rewritten without it. To delete everything Duo keeps on your Mac, quit Duo and remove the folder ~/Library/Application Support/Duo.

To delete your Duo account, write to us at the address below. Deleting the account also deletes its usage log and any feedback you shared. Shared learned actions are not tied to your account.

This website

with-duo.com sets no cookies and runs no analytics, tracking or scripts.

Changes

When this policy changes, we will update this page and the date at the top.

Contact

Questions or requests: eduardo@trysupervisor.com.