privacy

what we collect

• Your account. A username and a hashed password. We don’t ask for your email, phone number, or real name to create an account.
• Your work. Conversations, documents, notes, and anything else you create inside Duha is stored on our server under your account so it’s there when you come back.
• The waitlist. If you join the waitlist, we keep the email address you gave us and the time you joined, in a plain file on our own server. It is used for exactly one thing: telling you when sign-ups open.
• Operational logs. Standard server logs (requests, errors) that keep the service running and help us fix what breaks.

where it lives, and who touches it

• Hosting. Duha runs on a server we operate at Hetzner, in Germany. Nightly backups stay on that infrastructure.
• AI inference. When you ask a question, the model that answers is an open-weight model running inside confidential-computing enclaves (TEE, via Chutes). Prompts stay encrypted while in use — the compute provider cannot read your questions, and no prompt is ever used for training.
• Research queries. If you use web research, the text of your search query is forwarded through our self-hosted metasearch (SearXNG) to public search engines. Your identity and account are not attached to it.

That is the whole list. No advertising networks, no analytics providers, no data brokers. There is nobody else.

cookies

One cookie: the session cookie that keeps you signed in. It is HTTP-only and does no tracking. There are no third-party cookies anywhere on duha.chat.

retention and deletion

• Your data stays for as long as you keep your account, so your workspace keeps working.
• Ask us to delete your account and we remove your credentials and sign you out of every session immediately; your stored content is removed from the server and its backups within 30 days.
• Waitlist emails are deleted on request at any time, and the list itself is retired once sign-ups are open for everyone.

your choices

Ask us at any time to see what we hold about you, correct it, export it, or delete it. There is no process to survive — one message is enough.

contact

Questions, requests, or something in this policy that doesn’t sit right: hello@duha.chat.

changes

If this policy changes in any way that matters, the change is noted on this page with a new effective date. We will not quietly weaken it.

This page is written in good faith and plain language, because a policy you can’t read isn’t a promise. It reflects how Duha actually works today. If you ever find the software behaving differently from what’s written here, tell us and we will fix the software or the words, whichever is wrong.