Privacy Policy

Last updated: January 24, 2026

This Privacy Policy describes how information is collected, used, and disclosed when you use the DukDuk mobile application distributed via Google Play and Apple App Store.

By using the application, you agree to data processing in accordance with this Policy.

Definitions

Application means the DukDuk software.

Company means DD SOFT, Almaty, Republic of Kazakhstan.

Personal Data means any information related to an identified or identifiable natural person.

Service means the DukDuk mobile application.

User means a person using the service.

Data Categories and Processing Purposes

We process only data required to provide the service, ensure security, and improve product quality.

Account data: when signing in with Google or Apple, we store:

  • email;
  • nickname (display name);
  • profile photo URL.

Technical data: IP address, device type, operating system, app/device identifiers, and usage events.

Support data: name, email, and message text sent via contact form or email.

Processing purposes: authentication, app functionality, abuse prevention, user support, analytics, and product improvement.

Third-Party Services

To provide app functionality and analytics, the following third-party services may be used:

  • Firebase Firestore;
  • Firebase Analytics;
  • Google Sign-In;
  • Sign in with Apple.

Third-party privacy policies:

Data Sharing

We share data only with infrastructure providers required to run DukDuk (including Google/Firebase and Apple).

We do not sell personal data and do not share personal data with data brokers.

Data Retention

  • account data: until user deletion; inactive accounts are deleted within 12 months of inactivity;
  • support requests: until the related request is resolved;
  • technical logs: no more than 1 month;
  • analytics data: no more than 12 months.

Account and Data Deletion

Users can delete their account and related data directly in the DukDuk app.

If app access is unavailable, a deletion request can be sent to support@dukduk.kz.

The request must be sent from the same email address used for DukDuk registration.

Deletion requests are completed within up to 14 calendar days after account ownership confirmation.

All related user data is deleted as part of account deletion.

User Rights

Users may request deletion of their personal data as described in this Policy.

International Data Transfer

When using Google/Firebase and Apple infrastructure, data may be processed on servers outside the Republic of Kazakhstan according to the policies of those providers.

Security

We take reasonable technical and organizational measures to protect personal data; however, no method of transmission or storage is completely secure.

Children

The application is not intended for individuals under 16 years of age. We do not knowingly collect children's personal data.

Changes

We may update this policy from time to time. The current version is always available on this page.

Contact Information

User support: support@dukduk.kz

Privacy/legal/business: info@ddsoft.kz

Response time for privacy requests: up to 30 calendar days.

Company website: https://ddsoft.kz

Product website: https://dukduk.kz

This policy applies to applications developed by DD SOFT, Republic of Kazakhstan.