← Back

Privacy Policy

Last updated: April 9, 2026

Who We Are

Duyên is a QR code memory platform that connects physical gifts and products to lasting digital experiences. We operate two websites:

Duyên is owned and operated by Trinh Dao ("we," "us," or "our"). For questions about this policy, contact us at privacy@duyen.io

What Data We Collect

When you create an account:

When a business sets up a profile:

When a gift giver uses Duyên:

When a recipient scans a card:

Automatically collected:

What we do NOT collect: your location, your browsing history on other websites, or any advertising or tracking data.

How We Use Your Data

We use your data to create and maintain your account, display your business profile to people who scan your QR cards, deliver personal messages between gift givers and recipients, show scan statistics on your dashboard, send transactional emails (verification, password reset), provide customer support, and comply with legal obligations.

We do not sell your data to third parties or use it for advertising.

Who Can See Your Content

Your business profile is visible to anyone who scans one of your QR cards — that is the intended purpose of the platform.

Personal messages between gift givers and recipients are private. They are only visible to people who scan the specific physical QR card.

Duyên staff may access content stored in our database only when necessary to investigate a reported violation, respond to a valid legal request, or diagnose a technical issue at your request. We treat access to user content with the same care a doctor treats patient records.

Third Parties We Use

ServicePurpose
SupabaseDatabase, authentication, file storage
NetlifyWebsite hosting
Google / AppleOptional sign-in

We do not use Google Analytics, Facebook Pixel, or any advertising trackers.

Data Storage and Security

Your data is stored on Supabase servers using industry-standard encryption for data in transit (HTTPS/TLS) and at rest. Passwords are hashed and never stored in plain text. Photos and media files are stored in Supabase Storage with access controls that prevent unauthorized access.

How Long We Keep Your Data

We keep your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where required by law. QR code scan data may be retained in anonymized form for analytics purposes.

Your Rights

You have the right to access, correct, delete, or request portability of your data at any time. To exercise any of these rights, email us at privacy@duyen.io

Children's Privacy

Duyên is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at privacy@duyen.io

California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your personal information, and opt out of the sale of your personal information. We do not sell your personal information. To exercise your rights, contact privacy@duyen.io

Changes to This Policy

We may update this policy as Duyên grows. When we make significant changes, we will notify you by email. The "Last updated" date at the top of this page will always reflect the most recent version.

Contact

Duyên
privacy@duyen.io
duyen.io | dayduyen.tech