Privacy policy
Last updated 20 October 2026
Duebird is a homework and exam planner used by parents, by children their parents add, and by students aged 13 and over on their own. It is operated by Duebird in Singapore (“we”, “us”). This policy explains what we collect, why, and the choices you have. We follow Singapore’s Personal Data Protection Act (PDPA).
In short: we collect only what the app needs to work, we never show ads or sell data, we don’t run analytics on children’s profiles, children never create a login, and deleting your account deletes your family’s data.
What we collect
Parents
- Your name as you want it shown, and your email address or Apple or Google sign-in.
- Your country, time zone and language, so dates and reminders are correct.
- Whether you have a Duebird Plus subscription. Payments are handled by Apple or Google; we never receive your card details.
Children added by a parent
- The name you give them, and optionally an avatar, colour and school level.
- The homework, exams and subjects added for them, when items are completed, and their reminder settings.
- For a child’s own phone or tablet: a device name if one is given, whether it is iPhone or Android, when it was connected and last used, and a notification token so reminders can be delivered.
Children do not give an email address, password, phone number, photo or location. A child’s device is connected with a one-time code shown on the parent’s phone.
Students using Duebird on their own
The same details as a parent, plus your birth month and year. We use these only to check that you are old enough to use Duebird on your own, and we don’t ask for your full date of birth. If you are under the minimum age, nothing is stored and we ask you to have a parent set up the app.
Technical information
- Server logs (such as IP address and the time of a request) to keep the service secure and fix problems. These are kept for up to 30 days.
- Crash reports, with names and other personal details removed, so we can fix errors.
What we don’t collect
We don’t collect contacts, photos, location or browsing history. We don’t use advertising or tracking tools, and we don’t run analytics on children’s profiles.
How we use it
- To run the app: showing homework and exams, counting down to exams and syncing devices.
- To send the reminders and alerts you have switched on.
- To manage subscriptions and the number of children a plan allows.
- To keep accounts secure and prevent misuse.
- To answer you when you contact us.
We never sell personal data or use it for advertising.
Children
Duebird is designed for children, with parents in control. A child under the minimum age for their country (13 in Singapore) can only use Duebird through a parent’s account. The parent decides what is added, can see and change their child’s information, and can remove the child or delete the whole account at any time. By adding a child, a parent consents to us handling that child’s information as described here.
Students using Duebird on their own are not visible to anyone else, including parents.
Who we share it with
We use a small number of service providers to run Duebird. They process data only on our instructions and only for these purposes:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and sign-in | Singapore |
| Railway | Running our server | Singapore |
| Google Firebase Cloud Messaging | Delivering notifications | Global |
| RevenueCat, Apple and Google | Subscriptions and in-app purchases | United States and global |
| Sentry | Crash reports, without personal details | United States |
Where data is handled outside Singapore, we choose providers that protect it to a standard comparable to the PDPA. We may also disclose information if the law requires it.
How long we keep it
We keep your information while your account exists. When you delete your account, or a parent removes a child or a device, the information is removed from our live systems straight away and from backups within 30 days. Expired connection codes are deleted automatically.
Security
Data is encrypted in transit. Each family’s data is separated at the database level, so one family’s account cannot read another’s. Access to our systems is limited to people who need it to run the service, and every administrative action is logged.
Your choices and rights
- See and correct your information, and your children’s, in the app.
- Switch reminders and parent alerts on or off in the app.
- Remove a child or a connected device from the parent’s account.
- Delete your account and all your family’s data: see how to delete your account.
- Ask us for a copy of your information, or ask a question, at privacy@duebird.study. We reply within 30 days.
If you are not satisfied with our answer, you can contact Singapore’s Personal Data Protection Commission.
Changes to this policy
If we change this policy in a way that affects you, we will tell you in the app before the change takes effect. The date at the top shows when it was last updated.
Contact
Questions about privacy: privacy@duebird.study