Privacy & data
Privacy policy
Updated October 11, 2026
How Nubesti LLC handles personal data for Duoniva, a US service that people may use worldwide.
1. Who is responsible
Nubesti LLC, 1111B S Governors Ave STE 23840, Dover, Delaware, United States, is the company responsible for personal data collected through Duoniva, duoniva.com, and api.duoniva.com. Privacy requests go to hello@duoniva.com.
Duoniva is a US service. If you use it from another country, your information is processed in the United States. Where the GDPR or UK GDPR applies, Nubesti LLC is the controller of account and service data. The two people in a couple decide what they place in the shared space.
2. What the product is
Duoniva is a private place for two adults who are already partners. It is coming soon on iPhone. It is not a dating app. A partner does not automatically see everything you do. Sharing is a choice.
Message text is end-to-end encrypted. We cannot read it. Photos and other story files stored for the couple are not end-to-end encrypted. Calls and the optional assistant are not available yet. If an assistant is offered later, it will be off unless you turn it on, and it will not read private messages on its own.
3. Data we collect
The categories are described in more detail in App data. In short, we handle account details, couple membership, content you choose to store, sealed messages, session security data, and messages you send to hello@duoniva.com. We do not buy personal information, and we do not sell it.
4. Why we use it
- To create and protect your account, including email verification and Sign in with Apple.
- To run the couple space you asked for: story, plans, and sealed messages.
- To send service email, such as a sign-in code or a reply to a request you made.
- To keep the service secure, prevent abuse, and fix failures.
- To meet law, including a valid legal request.
Where the GDPR or UK GDPR applies, the bases are contract (running the account and space you asked for), legitimate interests (security and keeping the service reliable, balanced against your rights), consent (where we ask for a choice, such as a future optional assistant), and legal obligation.
5. Who receives it
Your partner receives what you choose to share in the couple space, and the sealed messages you send them. They do not receive your password. Service providers that host and deliver Duoniva are listed in Service providers. Apple receives what it needs for Sign in with Apple and, later, for an App Store subscription.
We may disclose information if the law requires it, or to protect someone from serious harm. We will not sell personal information or share it for cross-context behavioral advertising.
6. How long we keep it
Account and space data stay while the account is open and for as long as we need them to provide the space, resolve a dispute, or meet a legal duty. When you delete an account, we delete or de-identify the personal data we still control, except copies in backups until those backups expire, and except content your partner already holds in the shared space. Security logs are kept only as long as needed to investigate abuse.
7. Your rights
You may ask to access, correct, export, or delete personal data we hold about you. Write to hello@duoniva.com from the email on the account. We may need to confirm it is you. You may also use the in-app deletion control when that control ships with the app.
California residents may ask to know, correct, and delete personal information, and to opt out of sale or sharing. We do not sell personal information and we do not share it for cross-context behavioral advertising. We will not discriminate against you for exercising these rights. You may use an authorized agent if you prove the agent is allowed to act for you.
If the GDPR or UK GDPR applies, you may also ask us to restrict or object to certain processing, and to receive a portable copy of data you provided. You may lodge a complaint with your local supervisory authority. You may withdraw a consent you gave, which does not affect processing that already happened.
8. Children
Duoniva is not for anyone under 18, and it is not directed to children under 13. We do not knowingly collect personal information from a child. If we learn that we have, we will delete it. Write to hello@duoniva.com if you believe a child has an account.
9. International use
We are in the United States. Cloudflare processes data on a global network, which can include the United States. If you are in the European Economic Area, the United Kingdom, or Switzerland, those transfers are made to operate the service you requested. Where a transfer tool is required and an adequacy decision does not cover it, we use the contractual safeguards that apply to that transfer.