隱私權政策

最近更新日期：2026 年 10 月 7 日

本文件為營運草案，並非法律意見。上文所列法律實體、註冊地址、主要營業省份與隱私負責人資料已填妥（供營運使用，並非律師正式審閱或簽署）。中英文如有歧義，以英文為準。本公司於加拿大營運，並依加拿大《個人資訊保護與電子文件法》（PIPEDA）及適用的省級隱私法律處理個人資訊。若您居住於魁北克，下文說明《25 號法》下的額外權利。本政策目前提供英文與台灣繁體中文；法文版尚在規劃。

本政策說明營運 Mobi 的公司（下稱「本公司」）如何處理您在應用程式與本網站的資料。本網站只提供資訊，不會另外建立帳號。請與使用條款一併閱讀。

我們是誰與聯絡方式

Mobi 由設於加拿大的 CIRMOYED TRADING INC 營運。
註冊地址：1767-1711 Robson St, Vancouver, BC V6G 3B7。
主要營業省份／地區：British Columbia。

負責個人資訊實務的人員職銜為 Privacy Officer。
隱私查詢與投訴：admin@duomobi.com。一般支援：admin@duomobi.com。

若您對回覆不滿意，可向加拿大隱私專員公署投訴：https://www.priv.gc.ca/
若您居住於魁北克，亦可向魁北克資訊近用委員會（CAI）查詢：https://www.cai.gouv.qc.ca/

刪除帳號（應用程式內或已卸載後）：https://www.duomobi.com/delete-account（本站頁面：刪除帳號）。

我們收集什麼

若未提供營運所需資料，部分功能可能無法使用。視使用方式，我們可能收集：

帳號：電子郵件、登入識別、顯示名稱、頭像、語言與時區。登入方式為 Apple、Google 或 Magic Link。Apple 與 Google 會依其自身政策處理登入資料。
配對：伴侶關係、邀請碼及配對時間。
您與伴侶產生的內容：待辦、記事、心情、家務、共同開支、每日小秘密（文字或照片）、倒數和好時段及留言、寵物、遊戲進度與點數。
私人待辦：您標示為私人的事項，僅供您自己使用。
情侶時區名稱：一組 IANA 時區，僅供畫面顯示，不驅動伺服器日界。我們不收集精確地理位置或 GPS。
裝置與技術：裝置類型、作業系統、應用程式版本、推播權杖、有限網絡資料。
裝置權限（您可在系統設定拒絕）：相機與照片圖庫用於每日小秘密與掃描配對 QR 碼；推播通知用於提醒與產品通知。我們不要求麥克風。
裝置加密金鑰：金鑰存在您的裝置上。我們不會以明文備份金鑰。
交易：經 Apple、Google 或 RevenueCat 處理的訂閱狀態（我們一般不會收到完整信用卡號碼）。目前應用程式內購買尚未開放。
廣告：若啟用 Google AdMob，該工具可能收集廣告識別碼及類似裝置資料，作廣告及測量。

資料可直接從您、從已配對伴侶（僅限功能設計下可見的共用內容），或從服務供應商收集。心情分數是溝通用標記，不是健康紀錄，我們也不把它當醫療資料販售。我們不會故意收集未滿 18 歲人士的個人資訊。

若提供 Mobi Premium，訂閱與付款相關資料之處理見 Premium 隱私說明；訂閱條款見 Premium 訂閱條款（EULA）。

端到端加密範圍

每日小秘密與部分加密備註，在兩人裝置完成金鑰設定後，以端到端加密保護。伺服器只保存密文，我們無法閱讀明文。若金鑰遺失且未轉移到新裝置，舊密文將無法開啟。帳號刪除時，我們也不會把金鑰明文留下來。待辦標題、帳號資料與推播權杖不在這層加密範圍。裝置或 iCloud 相簿中的原圖，不在這層加密範圍。

使用資料

我們使用資料以：提供、維持、操作及改善 Mobi，包括在配對期間依功能向伴侶顯示共用內容；帳號管理、身分核實、安全、防止濫用及除錯；處理訂閱及支援；在您同意或法律允許時展示廣告；遵守法律、處理爭議及執行條款；以及與上述有直接關連的用途。我們不會用個人資訊做會對您產生法律效果的自動化決策。

我們不會把您的倒數和好留言、心情、每日小秘密或私密通訊內容出售給第三人，供其作為獨立行銷名單。

敏感的情侶內容

部分功能（尤其每日小秘密）可能涉及伴侶之間的私密文字或照片。此類資訊可能屬於敏感個人資訊。我們僅為提供您選擇使用的功能、在功能設計下向已配對伴侶顯示，以及安全、防止濫用與法律遵循而處理。

請只上傳您與伴侶願意在 Mobi 內分享的內容。開啟相機或照片圖庫權限並選擇送出每日小秘密，即表示您同意該等處理。您可在系統設定拒絕權限，或停止使用該功能。離開情侶空間會結束您對該共用空間的即時存取，詳見下文保存期限。刪除帳號會依下文永久移除您的帳號資料，且無法復原。端到端密文我們無法閱讀；我們仍會處理傳送與刪除功能所需的中繼資料。

我們不會將每日小秘密、倒數和好留言或心情標記用於第三方廣告。

披露資料

我們不會出售個人資訊。我們可能把資料提供給：

已配對的伴侶，僅限按功能設計可見的共用內容。這是產品核心運作方式，不是意外洩漏。
服務供應商及其人員，僅按我們指示處理，例如託管與資料庫（Supabase）、認證、推播、建置（Expo）、訂閱（RevenueCat，於功能啟用時）及廣告（Google AdMob，於功能啟用時）。
Apple 與 Google，就其登入及付款系統。
法律要求的政府機關、法院或執法機關。
本公司業務的實際或建議承讓人，以便評估或營運該交易。

目前沒有使用第三方當機分析工具。本政策若日後新增分析或廣告追蹤，會再更新。

跨境處理

部分服務供應商（例如託管、認證、推播、建置工具，以及啟用時的訂閱或廣告）可能在加拿大境外（包括美國或其他國家）的伺服器儲存或處理個人資訊。

使用 Mobi 即表示您明白：

個人資訊可能在該等司法管轄區儲存或處理；且
在該地時，可能受當地法律約束，包括當地法院、執法或國家安全機關依法取用。

我們依 PIPEDA 對為處理而移轉的個人資訊持續負責。我們透過合約與供應商選擇，力求提供與本政策相符的保障。我們不會出售個人資訊。

離開情侶空間、刪除帳號與保存期限

離開情侶空間不會刪除您的帳號。在應用程式內選擇「離開共同空間」。不屬於情侶範圍的私人待辦不受離開影響，仍可供您使用。

第一次離開

您離開仍在使用中的情侶空間時：

空間改為僅餘對方一人。您的成員身分進入可撤回狀態，期限為 24 小時。
您帳號上指向該情侶空間的使用中連結會被清除。我們會移除您用於該空間的金鑰包裹。在重新連接被接受之前，您失去即時存取，不能再開啟該空間的加密內容。
留下的人仍可閱讀共同歷史，但不能新增共同內容。該空間對留下的人是唯讀。

撤回與重新連接

在 24 小時內，您可選擇「撤回離開」，恢復使用中的成員身分。若您已經開始另一段使用中的情侶空間，則不能撤回。

留下的人只能邀請原來的伴侶重新連接。第三人不能加入該空間。邀請在 7 日後失效，而且必須由對方接受。若未在期限內接受，空間不會恢復為兩人使用中。若任一方已經有另一段使用中的情侶空間，重新連接無法完成。

雙方離開後的封存

若留下的人也離開——無論當時空間仍是僅餘一人，或已有尚未結束的重新連接邀請——該情侶空間會封存。雙方的成員身分都設為已離開。尚未結束的重新連接邀請會失效。該空間會從應用程式移除，期間內無法查看。屬於情侶範圍的資料（寵物、共用錢包、點數、每日小秘密、倒數和好紀錄、共同任務，以及端到端密文）保留 6 個月，其後永久刪除。我們不以明文備份加密金鑰。共同情侶資料的保留後清除，是在空間封存時開始的這 6 個月，不是在只有一人離開時開始。

日後另一段情侶空間中的新伴侶，不能看到過往情侶空間的共同資料。他人保存在自己裝置上的副本（例如截圖）不在我們控制範圍。法律要求更長保留期者（例如交易審計、爭議或防止欺詐）除外。

刪除帳號

您仍可另外刪除帳號。刪除帳號不能代替離開情侶空間，也不是結束即時共用的唯一方式。

您刪除帳號時：

之後不能再用同一個 Mobi 帳號登入，也不能再開啟原來的情侶空間。
若 24 小時撤回期間仍未結束，刪除帳號即放棄該次撤回。
我們會永久刪除與該帳號相關的個人資料與內容。此動作無法復原，我們也不能為您還原帳號或資料。

在應用程式：設定 → 帳號 → 刪除帳號。若已卸載，請前往網頁刪除帳號（https://www.duomobi.com/delete-account）。

其他保存

空間封存後的情侶共用資料：如上所述保留 6 個月，其後永久刪除。端到端密文在無明文金鑰備份的情況下於期滿一併刪除。
一般網站與基礎設施紀錄（例如 IP、瀏覽器類型）：通常保存不超過 90 日，安全調查或法律要求除外。
較長法律保存：審計、爭議、防止欺詐，或親密影像／法院命令，可能須較長時間保存有限紀錄。

查閱、更正、匯出與撤回同意

在 PIPEDA 及適用法律下，您可要求查核我們是否持有您的資料、查閱、更正不準確資料，以及匯出當時可取用的資料。請寄 admin@duomobi.com。我們目標在 30 日內回覆；若法律允許需要更多時間，我們會通知您。我們可能依法收取合理費用。

您可撤回同意，例如停用推播、拒絕相機或照片權限、離開情侶空間，或刪除帳號。部分營運所必需的處理（例如帳號安全）在您使用服務期間無法完全撤回。部分資料在共用情侶空間期間亦存在於伴侶可見範圍。離開情侶空間會停止新增共同活動；留下的人在空間封存前仍可能閱讀歷史。刪除帳號會永久移除您的帳號資料且無法復原。若 24 小時撤回期間仍未結束，刪除即放棄撤回。端到端密文在無金鑰時無法以明文匯出。

直接促銷、CASL 與廣告追蹤

我們目前不寄促銷電子郵件。若日後寄送商業電子訊息，會遵守加拿大反垃圾郵件法（CASL），事先取得法律要求的同意，並提供退訂途徑。裝置廣告識別碼可在系統設定中限制。如應用程式提供開關，您也可關閉非必要分析。

廣告與追蹤

應用程式內廣告（例如 Google AdMob）為可選功能，目前可能尚未開放。若啟用：

廣告 SDK 可能收集廣告識別碼及類似裝置資料，作廣告及測量；
在 Apple 裝置上，若實務符合 Apple 對「追蹤」的定義，我們會使用「App 追蹤透明度」，僅在您允許時追蹤；
您可在裝置設定限制廣告個人化（例如限制廣告追蹤／App 追蹤，或 Android 上的 Google 廣告設定）；
我們不會以每日小秘密、心情、倒數和好留言或其他私密情侶內容投放廣告；
若應用程式顯示廣告，我們會提供舉報不適當廣告的途徑，以符合 Apple 指引。

若日後新增分析或當機工具，我們會在上線前或上線時更新本政策及 App Store／Google Play 資料披露。

本網站

主機可能留下一般伺服器紀錄（例如 IP、瀏覽器類型），僅供維運與安全，通常保存不超過 90 日（安全調查或法律要求除外）。除非您主動寄信，我們不會透過本網站另外收集個人資訊。本站不使用行銷 Cookie。

安全

我們採取可行步驟，包括傳輸加密、存取控制及限制供應商權限。互聯網傳送無法保證絕對安全。請保護登入方式，並只與信任的人完成配對。

保安措施外洩

我們會依 PIPEDA 要求，就我們控制範圍內涉及個人資訊的保安措施外洩事件保存紀錄。

若外洩對個人構成「真實的重大損害風險」，我們會在可行範圍內盡快：

向加拿大隱私專員公署通報；並
通知受影響人士，說明外洩情況及可採取的步驟。

「重大損害」可包括身體傷害、屈辱、名譽或關係受損、身分盜用、金錢損失等。您也可來信給我們的 Privacy Officer：admin@duomobi.com。

親密影像與安全舉報

若有人未經同意散布您的親密影像或其他 Mobi 私密內容，請寄信至 admin@duomobi.com，主旨註明 Intimate image / safety report。處理方式（包括目標在 72 小時內回覆）載於使用條款。離開情侶空間會結束您的即時存取。刪除帳號會永久移除您的帳號資料且無法復原；若 24 小時撤回期間仍未結束，刪除即放棄撤回。我們無法刪除對方已保存在自己裝置上的截圖。若有即時危險，請撥打當地緊急服務（在加拿大請撥 911）。

魁北克（《25 號法》）

若您居住於魁北克，私部門個人資訊保護法（經《25 號法》修正）可能另有適用。簡言之，您可能享有查閱、更正、撤回同意、在部分情況下要求去索引，以及適用時的資料可攜權。在法律要求時，科技產品應預設最高程度的機密設定。

本公司的 Privacy Officer 為 Mobi 個人資訊保護負責人。聯絡：admin@duomobi.com。
您亦可聯絡魁北克資訊近用委員會（CAI）：https://www.cai.gouv.qc.ca/

本政策目前提供英文與台灣繁體中文。我們規劃為魁北克使用者提供法文版；在法文版上線前，請來信，我們會以英文協助或另行安排。中英文如有歧義，以英文為準；法文版上線後，我們會在律師審閱後說明魁北克居民的歧義處理方式。

兒童

Mobi 只供年滿 18 歲的人士使用。如我們得悉收集了兒童的個人資訊，將刪除有關帳號。

App Store 與 Google Play 資料披露

App Store 隱私營養標籤與 Google Play 資料安全表應與本政策一致：帳號與情侶內容用於應用程式功能；照片用於每日小秘密；裝置與推播資料用於運作應用程式；廣告識別碼僅在啟用廣告（例如 AdMob）時；不收集精確地理位置；目前沒有第三方當機或診斷工具。應用程式內購買尚未開放。您可在應用程式內刪除帳號，或前往 https://www.duomobi.com/delete-account。

修改

我們可更新本政策，並以適當方式通知重大變更。本頁所載日期為當時有效版本。

聯絡

法律實體、註冊地址、隱私負責人與刪除帳號網址見上文「我們是誰與聯絡方式」。隱私查詢：admin@duomobi.com 或 admin@duomobi.com。加拿大隱私專員公署：https://www.priv.gc.ca/。魁北克 CAI：https://www.cai.gouv.qc.ca/。

This is an operating draft, not legal advice. The legal entity name, registered address, province of principal establishment, and privacy-officer details above are completed for operational use (not a formal solicitor review or sign-off). If the Chinese and English versions conflict, the English version prevails. The Company is based in Canada and handles personal information under PIPEDA and applicable provincial privacy laws. If you reside in Quebec, additional rights under Law 25 are described below. This policy is currently in English and Traditional Chinese (Taiwan). A French version is planned.

This policy explains how the company that operates Mobi (the Company) handles data in the app and on this website. The website is information-only and does not create accounts. Read it with the Terms of Use.

Who we are and how to contact us

Mobi is operated by CIRMOYED TRADING INC, a company registered in Canada.
Registered office: 1767-1711 Robson St, Vancouver, BC V6G 3B7.
Province or territory of principal establishment: British Columbia.

The person accountable for personal-information practices is our Privacy Officer.
Privacy requests and complaints: admin@duomobi.com. General support: admin@duomobi.com.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada: https://www.priv.gc.ca/
If you reside in Quebec, you may also contact the Commission d’accès à l’information du Québec (CAI): https://www.cai.gouv.qc.ca/

Account deletion (in-app or after uninstall): https://www.duomobi.com/delete-account (on this site: Delete account).

What we collect

If you do not provide data we need to operate, some features may not work. Depending on use, we may collect:

Account: email, sign-in identifiers, display name, avatar, language, and timezone. Sign-in is Apple, Google, or Magic Link. Apple and Google handle sign-in data under their own policies.
Pairing: couple relationship, invite codes, and pairing time.
Content you and a partner create: tasks, notes, mood, chores, shared spending, Daily Secrets (text or photos), Count Down to Us sessions and notes, pet, game progress, and points.
Private tasks: items you mark private, for you only.
Couple timezone name: one IANA timezone, used only for on-screen display, not to drive the server day-boundary. We do not collect precise location or GPS.
Device and technical data: device type, OS, app version, push tokens, limited network data.
Device permissions (you can refuse in system settings): camera and photo library for Daily Secrets and pairing QR codes; notifications for reminders and product notices. We do not require a microphone.
Device encryption keys: keys stay on your device. We do not keep a plaintext backup.
Transactions: subscription status processed by Apple, Google, or RevenueCat (we do not usually receive full card numbers). In-app purchases are not available yet.
Advertising: if Google AdMob is enabled, that SDK may collect advertising IDs and similar device data for ads and measurement.

Data may come from you, from a paired partner (only shared content visible by design), or from service providers. Mood scores are communication labels, not a health record, and we do not sell them as medical data. We do not knowingly collect personal information from anyone under 18.

If Mobi Premium is offered, how we handle subscription and payment data is in the Premium Privacy Notice; subscription terms are in the Premium Subscription Terms (EULA).

End-to-end encryption

Daily Secrets and some encrypted notes are protected end-to-end after both devices finish key setup. The server stores ciphertext; we cannot read plaintext. If keys are lost and not moved to a new device, old ciphertext cannot be opened. We also do not keep plaintext keys when an account is deleted. Task titles, account profile, and push tokens are not in that layer. Originals in a device or iCloud photo library are not in that layer.

How we use data

We use data to provide, maintain, operate, and improve Mobi, including showing shared content to a partner while paired; account management, identity checks, security, abuse prevention, and debugging; subscriptions and support; ads where you consent or the law allows; legal compliance, disputes, and enforcing the Terms; and purposes reasonably connected to the above. We do not use personal information for automated decisions that produce legal effects about you.

We do not sell your Count Down to Us notes, mood, Daily Secrets, or private messages as a marketing list.

Sensitive couple content

Some features (especially Daily Secrets) may involve photos or text that are private or intimate between partners. That kind of information can be sensitive. We collect it only to provide the feature you choose to use, to show it to your paired partner as designed, and for security, abuse prevention, and legal compliance.

Please only upload what you and your partner are comfortable sharing inside Mobi. Turning on camera or photo-library permission, and choosing to send a Daily Secret, is how you consent to that processing. You can refuse permissions in system settings or stop using the feature. Leaving the couple space ends your live access to that shared space, as described under retention below. Deleting your account permanently removes the data we hold for that account, as described under retention below, and cannot be recovered. End-to-end ciphertext cannot be read by us; we still process metadata needed to deliver and delete the feature.

We do not use Daily Secrets, Count Down to Us notes, or mood labels for third-party advertising.

Disclosure

We do not sell personal information. We may disclose data to:

A paired partner, only for shared content visible by design. That is how the product works, not an accidental leak.
Service providers who should process only on our instructions, including hosting and database (Supabase), authentication, push, build (Expo), subscriptions (RevenueCat, when enabled), and ads (Google AdMob, when enabled).
Apple and Google for sign-in and payments.
A government body, court, or law-enforcement agency where the law requires it.
An actual or proposed assignee of the business, to evaluate or run that transaction.

We do not currently use a third-party crash reporter. If we add analytics or advertising tracking later, we will update this policy.

Processing outside Canada

Some service providers (for example hosting, authentication, push, build tooling, and — when enabled — subscriptions or ads) may store or process personal information on servers outside Canada, including in the United States or other countries.

By using Mobi you understand that:

personal information may be stored or processed in those jurisdictions; and
while it is there, it may be subject to the laws of that country, including lawful access by courts, law-enforcement, or national-security authorities of that country.

We remain accountable under PIPEDA for personal information we transfer for processing. We use contracts and vendor choice to seek protection consistent with this policy. We do not sell personal information.

Leaving a couple space, account deletion, and retention

Leaving the couple space does not delete your account. In the app, choose Leave couple space. Personal tasks that are not couple-scoped are unaffected by leave and stay available to you.

First leave

When you leave an active couple space:

The space continues with the other person only. Your membership can be undone for 24 hours.
The active-couple link on your account is cleared. We remove your encryption key wraps for that space. Until a reconnect is accepted, you lose live access and cannot open that space’s encrypted content.
The person who stays can still read the shared history. They cannot add new shared entries. The space is read-only for them.

Undo and reconnect

Within 24 hours you can choose Undo leave and return to an active membership, unless you have already started another active couple space.

The person who stayed may invite only the original partner to reconnect. A third person can never join that space. The invitation expires after 7 days and must be accepted. If it is not accepted in time, the space is not restored to active. Reconnect also cannot be completed if either person already has another active couple space.

Archive after both people leave

If the person who stayed also leaves — while the space is still one person after a leave, or while a reconnect invitation is still open — the couple space is archived. Both memberships are marked left. Open reconnect invitations expire. The space is removed from the app and cannot be viewed during the retention period. Couple-scoped data (pet data, the shared wallet, points, Daily Secrets, Count Down to Us records, shared tasks, and end-to-end ciphertext) is kept for 6 months, then permanently deleted. We do not keep a plaintext key backup. Shared couple data is retained and then purged on this 6-month period. The period starts when the space is archived, not when only one person leaves.

A later partner in a new couple space cannot see a previous couple space’s shared data. Copies someone kept on their own device (for example screenshots) are outside our control. Longer retention required by law (audit, disputes, or fraud prevention) is an exception.

Account deletion

You may delete your account separately. That does not replace leaving the couple space, and it is not the only way to end live sharing.

When you delete your account:

You cannot sign in with that same Mobi account afterwards, and you cannot open the original couple space.
If a 24-hour leave-undo window is still open, deletion gives up that undo.
We permanently delete the personal information and content associated with that account. The action is irreversible and we cannot restore your account or its data.

In the app: Settings → Account → Delete account. If you already uninstalled it, use the web delete-account page (https://www.duomobi.com/delete-account).

Other retention

Couple-scoped shared data after the space is archived: kept for 6 months, then permanently deleted, as described above. End-to-end ciphertext is deleted at the end of that period without a plaintext key backup.
Ordinary website and infrastructure logs (for example IP address, user-agent): usually kept no more than 90 days, unless needed longer for security investigation or law.
Longer legal holds: audit, disputes, fraud prevention, or intimate-image / court orders may require longer retention of limited records.

Access, correction, export, and withdrawing consent

Under PIPEDA and applicable law you may ask whether we hold your data, access it, correct inaccuracies, and export data then available to you. Email admin@duomobi.com. We aim to respond within 30 days; if the law allows more time, we will tell you. We may charge a fee the law allows.

You may withdraw consent — for example by turning off notifications, refusing camera or photo access, leaving the couple space, or deleting the account. Some processing needed to operate the service (such as account security) cannot be fully withdrawn while you use it. Some data also exists in a partner’s view while you share a couple space. Leaving the couple space stops new shared activity; the person who stays may still read the history until the space is archived. Deleting the account permanently removes your account data and cannot be recovered. If a 24-hour undo window is open, deletion gives up that undo. End-to-end ciphertext cannot be exported as plaintext without the keys.

Direct marketing, CASL, and ad tracking

We do not currently send promotional email. If we later send commercial electronic messages, we will comply with Canada’s Anti-Spam Legislation (CASL), obtain the consent the law requires, and include an unsubscribe. You can limit advertising identifiers in device settings. If the app offers a switch, you may also turn off non-essential analytics.

Advertising and tracking

In-app ads (for example Google AdMob) are optional and may not be live yet. If enabled:

the ad SDK may collect advertising identifiers and similar device data for ads and measurement;
on Apple devices, if any practice meets Apple’s definition of “tracking,” we will use App Tracking Transparency and only track if you allow it;
you can limit ad personalisation in your device settings (for example Limit Ad Tracking / App Tracking, or Google ad settings on Android);
we will not use Daily Secrets, mood, Count Down to Us notes, or other intimate couple content to target ads;
if the app shows ads, we will provide a way to report inappropriate ads, as Apple’s guidelines require.

If we add analytics or crash tools later, we will update this policy and the App Store / Google Play data disclosures before or when they go live.

This website

Hosting may keep ordinary server logs (such as IP address and browser type) for operations and security, usually for no more than 90 days, unless a security investigation or the law needs them longer. We do not otherwise collect personal information through this site unless you email us. This site does not use marketing cookies.

Security

We take practicable steps including transport encryption, access control, and limiting vendor permissions. Transmission over the internet is not guaranteed to be fully secure. Protect your sign-in method and pair only with someone you trust.

Breaches of security safeguards

We keep a record of breaches of security safeguards involving personal information under our control, as required under PIPEDA.

If a breach creates a real risk of significant harm to an individual, we will, as soon as feasible:

report it to the Office of the Privacy Commissioner of Canada; and
notify affected individuals, with enough information to understand the breach and what they can do.

“Significant harm” can include bodily harm, humiliation, damage to reputation or relationships, identity theft, financial loss, and similar harms. You can also write to our Privacy Officer at admin@duomobi.com.

Intimate-image and safety reports

If someone shares your intimate images or other private Mobi content without consent, email admin@duomobi.com with the subject Intimate image / safety report. How we handle those reports, including a target to acknowledge them within 72 hours, is in the Terms of Use. Leaving the couple space ends your live access. Deleting your account permanently removes your account data and cannot be recovered; if a 24-hour undo window is open, deletion gives up that undo. We cannot erase screenshots already saved on another person’s device. If you are in immediate danger, call local emergency services (in Canada, 911).

Quebec (Law 25)

If you reside in Quebec, additional rules under the Act respecting the protection of personal information in the private sector (as amended by Law 25) may apply. In summary, you may have rights to access, rectification, withdrawal of consent, de-indexation in some cases, and data portability where applicable. Technological products should offer the highest confidentiality settings by default where the law requires.

Our Privacy Officer is the person in charge of the protection of personal information for Mobi. Contact: admin@duomobi.com.
You may also contact the Commission d’accès à l’information du Québec: https://www.cai.gouv.qc.ca/

This policy is currently published in English and Traditional Chinese (Taiwan). A French version is planned for Quebec users; until it is published, email us and we will help in English or arrange assistance. If the Chinese and English versions conflict, English prevails; when a French version is published for Quebec, we will state how conflicts are resolved for Quebec residents after solicitor review.

Children

Mobi is for people 18 and over. If we learn we collected a child’s personal information, we will delete the account.

App Store and Google Play disclosures

The App Store privacy nutrition label and the Google Play Data safety form are meant to match this policy: account and couple content for app functionality; photos for Daily Secrets; device and push data to run the app; advertising identifiers only if ads such as AdMob are enabled; no precise location; and no third-party crash or diagnostics tool today. In-app purchases are not live yet. You can delete an account in the app or at https://www.duomobi.com/delete-account.

Changes

We may update this policy and will notify material changes in an appropriate way. The date on this page is the current version.

Contact

The legal entity, registered address, privacy officer, and delete-account URL are under “Who we are and how to contact us” above. Privacy requests: admin@duomobi.com or admin@duomobi.com. Office of the Privacy Commissioner of Canada: https://www.priv.gc.ca/. Quebec CAI: https://www.cai.gouv.qc.ca/.