DurigoBeta
Privacy

Your data, in plain language.

Durigo exists to answer one question: where is good durian, right now? Answering it needs surprisingly little of your data: an account, the things you choose to share, and your location while the map is open. This page explains exactly what we collect, why, and what we will never do with it. No legalese, no surprises.

Last updated: August 2026 · Applies to the Durigo app and this website.

What we collect

Durigo collects only what the product needs to work. That comes down to a handful of things:

  • Your account. When you sign in with Google, Apple, or email, we store your email address, your display name, and (if you set one) a profile picture. Sign in with Apple lets you hide your real email address, and that works with Durigo.
  • What you share. The updates you post are the whole point of Durigo: stock, ratings, varieties and their prices, ripeness and taste, notes and photos, in whatever combination you choose. They are stored so the community can see them.
  • Your location, while you use the map. The app asks for foreground location to center the map near you and to show what is close by. Durigo does not track your location in the background, and it does not keep a history of where you have been.
  • Your camera and photo library, only at the moment you use them. The app asks for your library when you attach a picture to an update, and for the camera when you take that picture or scan a store's claim QR code. It never reads your library on its own.
  • Stores you claim. If you claim a store as its owner, we record the claim, whether it was verified, and which account it belongs to, so the right person can manage it.
  • Screenshots, while Durigo is in beta. The app notices that you took a screenshot so it can offer you the feedback form, because that is how testers naturally flag something odd. It sees that a screenshot happened, never what is in it, and the form is text only.
  • Your settings. Language, currency, units, and appearance preferences, so the app looks right every time you open it.

What your contributions look like to others

Durigo is a community map, so contributions are public by design. When you post an update or a photo, other users see it together with your username and profile picture. Store owners see the updates and reports on their store. Your email address is never shown to other users.

What we never do

Some things are off the table, permanently:

  • We do not sell your data. To anyone, for anything.
  • We do not show ads or share your data with advertisers.
  • We do not run behavioural analytics or tracking SDKs in the app.
  • We do not follow you around the web. This website counts page views through Vercel Analytics, which sets no cookies and builds no profile of you.
  • We do not track your location in the background or build movement profiles.

Emails we send

There are two ways your address ends up on a list: you ask to hear from us when the Android version is ready, or you write to us through the contact form. Either way the address is stored with Resend, our email provider, and used for that purpose only.

Our send log records whether a message was delivered, opened, or clicked, so we can tell a broken send from one nobody wanted. Every email carries an unsubscribe link, and using it takes you off the list for good.

Services we rely on

Durigo runs on a small set of infrastructure providers. Each one processes data only so the product can function:

  • Supabase hosts our database and handles authentication. Your account and contributions live there.
  • Google Maps renders the map. Loading map tiles shares standard technical data (like your IP address) with Google, as with any map service.
  • Google and Apple sign-in handle login if you choose them. We receive your basic profile (name, email, picture), never your password.
  • Sentry collects crash and error reports so we can fix bugs. These reports are diagnostics only: device model, OS version, and what the app was doing when it failed. They are not linked to your identity.
  • Expo delivers app updates. Checking for an update shares standard technical data, like your device type and app version.
  • Resend sends our email: replies to the contact form, and the announcement for anyone waiting on the Android release.
  • Vercel hosts this website and counts its page views. Those counts are aggregate and cookieless, and they cover the site only, not the app.

How long we keep things

Your account and contributions are kept while your account exists. Photos that are no longer attached to any update are cleaned up automatically. If you delete an update, it disappears from the map and feed.

You can delete your account yourself, at any time, from Settings inside the app. That removes your login and email address, your username and picture, your saved stores, your reactions, and any store ownership or claims. The updates you posted stay on the map with everything identifying you stripped off them, shown as coming from a deleted user, so a store's history does not end up full of holes.

If you can no longer sign in, email us and we will handle it by hand.

How account deletion works

Age

Durigo is rated 13+ on the app stores, and you need to be 13 or older to create an account. We do not knowingly collect data from anyone younger. If a child under 13 has signed up, contact us and we will remove the account and everything attached to it.

Changes to this policy

Durigo is in beta and evolving quickly. If our data practices change, this page changes with them, and the date at the top is updated. Anything that expands what we collect, or who we share it with, will also be announced in the app.

Questions about your data?

Ask us anything: access, correction, deletion, or just how something works. A person reads every message.

Get in touch