Privacy Policy

Effective 19 October 2026 · Applies to the DuePing app on iOS and Android, and this website

DuePing ("the app") is a reminder and invoicing app made by an independent developer, tallpinetree ("we", "us", "our"). This policy explains what data the app collects, why, who receives it, how long it is kept, and the choices and rights you have. We collect as little as we can.

If you have a question or a request about your data, email dueping@tallpinetree.app.

1. Summary

Reminders stay on your device. They are never sent to us, and you don't need an account to use them.
Invoices need an account. The app asks you to sign in (email and password, Google, or Apple) only when you open the Invoices tab. Your invoices, companies and clients are then stored on our server.
The app has no ads, no advertising identifiers and no third-party analytics or crash-reporting SDKs.
We do not sell your personal information.
You can delete your account and all its data at any time from Settings → Delete account.

2. What we collect

Category	What exactly	Source
On your device only	Your reminders, settings (theme, accent colour, snooze time, 24-hour clock) and the last tab you used. These are stored in the app's local storage and are not sent to us.	You
Account	Your email address, name (if you give one or your Google or Apple account shares it), a hashed password (if you sign up with email; we never store the password itself), the Google or Apple account identifier (if you use that sign-in), your time zone, and your plan status.	You, or Google / Apple sign-in
Invoice data	The companies you invoice from (name, email, phone, address, tax ID, payment instructions, currency), your clients (name, email, phone, address), invoices (number, dates, line items, amounts, notes, status), and the line items you have billed before, for suggestions.	You
Email log	For each invoice email we send for you: the recipient, the type (invoice or automatic reminder) and the time it was sent, so the app can show you what went out and never send an automatic reminder twice.	Our server
Sessions and security	A hashed session token for each device you are signed in on, when it was last used, and your IP address in short-lived server memory for rate limiting.	The app and our server
Subscription	Whether you have DuePing Pro and until when. Your app account ID is shared with RevenueCat so it can tell us about your purchase. We never receive your card or payment details; the App Store or Google Play handles payment.	RevenueCat, App Store, Google Play
Messages you send us	If you email us: your email address and whatever you write, used only to answer you.	You

The app does not collect precise location, contacts, photos, microphone or camera input, health data or browsing history. It does not use advertising identifiers and does not track you across other companies' apps or websites.

3. How we use it, and our legal bases

Run the service: sign you in, store your invoices, email them to your clients, send the automatic reminders you have turned on, create PDFs, and apply the free-plan limit and Pro status. Basis: performing our agreement with you (the Terms of Use).
Keep it secure and working: prevent abuse and fix errors, using server logs and rate limiting. Basis: our legitimate interest in a safe, working service.
Remind you, on your device, only if you allow notifications. Basis: your consent (the system permission).
Answer you and comply with law. Basis: our legal obligations and your request.

We do not use your data for advertising, profiling, or to make decisions that have legal or similarly significant effects on you.

Your clients. When you send or remind an invoice, the client you chose receives an email with the invoice (a PDF attachment) and your sender details, and replies go to your company's email address.
ZeptoMail (Zoho), our email delivery provider, processes the invoice and reminder emails on our behalf.
RevenueCat processes subscription status on our behalf, and the App Store or Google Play processes your payment.
Google and Apple receive a sign-in request if you choose "Continue with Google" or "Sign in with Apple", under their own privacy policies.
Our hosting provider runs the server and database that store your account and invoice data.
Authorities, only where the law requires it.

These providers act as our service providers and may use the data only to provide their service to us. We do not sell your personal information or share it for advertising.

5. If you received an invoice from a DuePing user

A DuePing user entered your email address (and possibly name and address) to send you an invoice. We use it only to deliver that invoice and the reminders that user asked for, and we keep it as long as the user keeps it in their account. You are not a DuePing user and we do not contact you for any other purpose. To ask us to stop emailing you or to remove your details, write to dueping@tallpinetree.app; you can also ask the user who sent the invoice.

6. Device permissions

Notifications: to show your reminders at the right time, with Done and Snooze buttons. Reminders are scheduled on your device.
Exact alarms (Android): so reminders fire at the minute you chose, even when the phone is idle.
Run at startup (Android): so scheduled reminders come back after a restart.

You can turn each off in your device's settings; reminders then may not alert you on time.

7. How long we keep data

Reminders and settings: on your device until you delete them or uninstall the app.
Account, invoice data, email log and sessions: until you delete your account. Sessions end when you sign out or delete your account.
When you delete your account everything above is removed from our database immediately. Copies in server backups, if any, may remain until those backups are overwritten.
Emails already delivered to your clients stay in their mailboxes, and our email provider may keep delivery records for a short time under its own policy.

8. Your choices and rights

Depending on where you live (for example the EU/UK under the GDPR, or California under the CCPA), you may have the right to access, correct, delete, export or restrict the use of your personal data, to object to processing, and to withdraw consent. You can edit your companies, clients and invoices in the app, and delete them there. For anything else, email dueping@tallpinetree.app from the address on your account; we reply within 30 days. You may also complain to your local data protection authority.

9. Deleting your account

Open the app, tap the settings button, and choose Delete account. After you confirm, your account, companies, clients, invoices, email log and sessions are permanently deleted, and automatic reminders for your unpaid invoices stop. A subscription is managed by the store, so cancel it in the App Store or Google Play subscription settings too, since deleting the account does not cancel billing. If you can't use the app, email us from your account address and we will delete it for you.

10. Children

DuePing is a business tool for adults. It is not directed at children under 13 (or 16 where the law sets a higher age) and we do not knowingly collect their data. If you think a child gave us data, write to us and we will delete it.

11. International transfers and security

Our server and our providers may process data in countries other than yours, including the United States. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses. Data is encrypted in transit (HTTPS), passwords are stored only as salted argon2id hashes, session tokens are stored only as hashes, and access to the server is limited to the developer. No system is perfectly secure, so please use a strong, unique password.

12. Changes and contact

If we change this policy in a way that matters, we will update the date above and, for significant changes, tell you in the app. The latest version is always at dueping.tallpinetree.app/privacy.

Contact: tallpinetree, Nepal · dueping@tallpinetree.app