Duetake Privacy Policy

Last updated: 23 Jul 2026

This Privacy Policy explains how Duetake (formerly ImageDance) (“we”, “us”) collects, uses and safeguards personal data when you use the Duetake mobile application (Android) and related backend services. We comply with the Google Play Data Safety requirements and applicable privacy regulations.

1. Information We Collect

Duetake is built on a core principle: the media you capture and process stays on your device. We never upload your photos or videos. We collect only the minimal data necessary to provide the service.

Content you capture & process (on-device only)

• Photos, videos, and dual-camera recordings captured or imported are processed entirely on your device. Results are saved to your gallery and raw files are never uploaded to our servers.
• Location (coordinates, altitude) obtained by the watermark camera is used only to render the watermark on the photo at that moment; it is not stored or uploaded.

Feedback you submit

• When you use the in-app feedback feature, we receive your feedback text, feedback type, optional contact email, and device details attached automatically.
• Device details include: app version, package name, device model, OS version, language, an anonymized installation ID (UUID), a support ID, and a SHA-256 hash of “package name + ANDROID_ID”. We do not collect the raw ANDROID_ID.

VIP subscription verification data

• When you complete a purchase or verify entitlements, we receive an anonymized installation ID (UUID), the Google Play product ID, and the purchase token (purchaseToken), used solely to validate payment and sync entitlements.

Automatically collected device & technical data

• App version, device model, OS version, language, and network status, used to keep the app running and troubleshoot issues.
• We use Firebase Analytics to collect basic app interaction and technical data, including app instance identifiers, app version, device and operating system information, language, usage information, and rewarded-ad load, display, completion, and failure events. We use this information to assess the operation of our features and advertising flows.
• We do not integrate Firebase Crashlytics or proactively use a crash-reporting service.

2. How We Use Data

• Record, process, and export images and videos locally to deliver app features.
• Receive and handle your feedback to provide support.
• Display pricing, process purchases, validate receipts, and sync VIP entitlements.
• Offer extra usage via rewarded video ads when free limits are reached.
• Prevent fraud, abuse, and malicious calls against our services.
• Fulfil legal and regulatory obligations.

3. Storage & Sharing

Important: Your photos and videos are never uploaded to our servers. All capture, processing, compositing, filters, mosaic, and watermark operations run on your device.

Services we use

• Firebase Cloud Functions and Firestore (US region, us-central1): stores only your feedback, anonymized installation ID, and VIP entitlement ledger. The client has no direct read/write access.
• Firebase App Check (via Google Play Integrity): protects our endpoints from unauthorized clients.
• Firebase Analytics: collects basic app interaction and advertising-event analytics. Google processes this data under its privacy policy.

Third-party SDKs & services

• Google Play Billing: handles in-app purchases and subscription management under Google’s privacy policy.
• Google AdMob: serves rewarded video ads. AdMob may collect advertising identifiers and related data for ad delivery and attribution per its policy; see Google’s Privacy Policy and Ads settings.
• These third parties process only service-related data as necessary, under their own privacy policies.

• We never sell, rent, or trade your personal information, except where required by law or with your explicit consent.

4. Retention & Deletion

• Subscription records and anonymized device IDs are retained for up to 24 months after cancellation for audit and dispute resolution.
• Feedback content is removed within 12 months after the issue is resolved.
• You may request access, correction, or deletion at any time via tsimeon@qq.com; we respond within 15 business days.

5. Your Rights

• Access, correct, or delete personal data we hold about you.
• Withdraw consent and restrict processing where applicable.
• Lodge complaints with your local data protection authority if you believe your rights have been infringed.

6. Children’s Privacy

Duetake targets adults. We do not knowingly collect data from children under 13. If you believe a child provided information without consent, contact us to remove it promptly.

7. Changes

We may update this policy to reflect product changes or legal requirements. Significant changes will be announced via in-app notifications and this page, along with an updated “Last updated” date.