Last updated June 4, 2026
Subprocessors
duun uses these service providers to operate, secure, and improve the product. Some providers may act as independent controllers for parts of their own services.
Active Providers
Fly.io
Application hosting, networking, logs, and self-hosted Postgres.
Data may include account data, encrypted task content, sessions, support records, audit records, app logs, and database backups. The current Fly app region is Johannesburg, South Africa.
Required infrastructure provider.
Sentry
Error monitoring and production diagnostics.
Data may include error details, request metadata, IP addresses, user identifiers, device/browser details, stack traces, and log context needed to diagnose incidents.
Required operational provider. duun should avoid sending task content, tokens, or secrets to error monitoring.
Authentication and optional Google Calendar sync.
Data may include account email, name, avatar, provider account identifier, OAuth tokens for calendar sync, calendar IDs, calendar list names and access roles, calendar event sync identifiers, task titles or user-provided event labels for synced events, and freebusy availability windows. Calendar processing only applies when the user connects Google Calendar and enables related features directly or through scoped MCP/agent access.
Authentication provider and optional integration provider.
Polar
Checkout, subscriptions, and customer portal.
Data may include account email, external user ID, customer identifiers, subscription status, checkout session details, and billing events. duun does not store full payment card numbers.
Required billing provider for paid plans.
OpenAI / ChatGPT
Optional user-directed AI client and managed app integration.
Data may include task titles, notes, note edit timestamps, schedules, task relationships, completion state, sharing links, and tool results returned through the permissions a user grants. OpenAI may act as an independent provider for ChatGPT and related services.
Optional integration provider. Processing applies only when a user connects duun to ChatGPT or another OpenAI-powered client.
Planned Providers
Apple
Planned authentication provider. Data may include Apple account identifiers and email address when Apple sign-in is enabled.
Microsoft Outlook
Planned calendar sync provider. Data may include Microsoft account identifiers, email address, OAuth tokens, calendar IDs, calendar event sync identifiers, and availability windows when enabled.
Not Currently Used
Email delivery
duun does not currently use a production email provider.
External support tooling
Support is currently built into duun rather than handled by an external help desk provider.
Updates
This list may change as duun adds or replaces vendors. Material changes that affect personal information will be reflected here and in the Privacy Policy when appropriate.