Duo Screenshots — Privacy Policy
Effective date: November 4, 2026 Last updated: November 4, 2026
This policy explains what personal information Duo Screenshots at duoscreenshots.com ("the service") handles, why, for how long, who helps us process it, and what rights you have. It is written to meet the EU General Data Protection Regulation (GDPR), the UK GDPR and US state privacy laws.
The short version
- We ask for your email address to sign you in, and for the order details and files needed to shoot your screenshots.
- Your simulator build, reference screenshots and test login are deleted no later than 7 days after your order is completed. Delivered screenshots are deleted 90 days after delivery.
- Your build runs on a dedicated Mac that holds none of our keys; its working copy and simulator are erased after every order.
- An AI agent navigates your app. Our AI providers receive images of your app's screens and your order details, but not your email address or payment details, and may not use them to train their models.
- No ads, no tracking, no analytics or advertising cookies. We do not sell or share personal information.
1. Who we are
The controller of your personal information is Weelco Inc., a Wyoming corporation, 1623 Central Ave Ste 201, Cheyenne, WY 82001, USA ("Weelco", "we", "us").
For any privacy question or request write to hello@weelco.app with "Privacy" in the subject line. We have no establishment in the EU or the UK.
2. Information we collect
| Information | Where it comes from |
|---|---|
| Email address and account identifier; time of sign-in | You, when you sign in with an email link |
| Order details: app name, bundle ID, App Store link, product, languages, how screens are chosen and your description of them, notes you write to us | You, in the order form |
| Simulator build of your app | You upload it |
| Reference iPhone screenshots of your app (optional) | You upload them |
| Test login for your app: user name, password and note (optional) | You, in the order form |
| Screenshots of your app, the layout report and a record of the navigation steps (taps and screens, without passwords) | Created by the service while shooting your order |
| Order status history, prices, Stripe payment identifiers, payment and refund status and dates | The service and Stripe |
| Emails you send to hello@weelco.app | You |
| Technical data: IP address, browser type, pages requested, time | Your browser, when you visit the site (kept by our hosting providers, see section 5) |
Payment details (card number, billing address) are entered on Stripe's checkout page and handled by Stripe; we never receive your full card number.
You do not have to give us this information, but without it we cannot provide the service. A test login is optional; without it we can only shoot screens available without signing in.
3. Why we use it, and our legal basis
Under the GDPR and UK GDPR (Article 6(1)) we rely on:
- Contract — to create your account, take your order, shoot and deliver screenshots, send you emails about your order, and handle refunds;
- Legitimate interests — to keep the service secure (for example, limits on free checks and orders, scanning builds for malware, short technical logs) and to check the quality of sets before delivery; our interest is a safe, working service, and we keep only what we need;
- Legal obligation — to keep accounting and tax records.
We send emails only about your account and orders: sign-in links and messages when we need information from you, when your set is ready and when an order is cancelled or refunded. We do not send marketing emails.
4. How your build and test login are protected
- Your build is uploaded directly to private storage through a link that is valid for a short time. Files are downloaded only through short-lived signed links.
- Your test login is encrypted (AES-256-GCM) before it is stored and is decrypted only for the shooting session. It is not written to our logs.
- Shooting happens on a dedicated, rented Mac that is used only for shooting. It holds none of our keys or customer data other than the files of the order being shot. Before and after every order its working folder and simulator are erased.
- The AI agent that navigates your app runs on our server, not on the Mac, and only receives the information it needs (section 5).
- The service, not the AI agent, decides prices, payments and refunds.
5. Service providers and international transfers
We use these providers. Those marked "processor" handle information only on our instructions, under data processing terms with us.
| Provider | Role | What they do | What they receive | Data processing terms |
|---|---|---|---|---|
| Supabase, Inc. (USA) | Processor | Database, sign-in by email link, file storage | Account, order details, encrypted test logins, builds, reference screenshots, delivered screenshots and reports | Supabase DPA (https://supabase.com/legal/dpa) |
| Vercel Inc. (USA) | Processor | Hosting of the website and API | All requests to duoscreenshots.com, including IP addresses; order data passing through the API | Vercel DPA (https://vercel.com/legal/dpa) |
| Cloudflare, Inc. (USA) | Processor | Domain name service; secure connection between the website and our shooting server | IP addresses and requests to our domains; order identifiers (not order contents) | Cloudflare DPA (https://www.cloudflare.com/cloudflare-customer-dpa/) |
| Hetzner Online GmbH (Germany) | Processor | Server that runs our shooting agent | Order details, test login during shooting, screenshots and records of shooting sessions | Hetzner DPA (https://www.hetzner.com/AV/DPA_en.pdf) |
| Mac hosting provider (a dedicated Mac rented for the order; we name it here before it processes any customer build) | Processor | Dedicated Mac on which your build runs in the simulator | Your build, reference screenshots, test login during shooting, captured screenshots — erased after every order | Provider's data processing terms, named here before first use |
| Anthropic, PBC (USA); Google LLC — Gemini API (USA) | Processor | AI models that navigate your app and check sets before delivery | Order details (app name, bundle ID, App Store link, languages, screen descriptions), images of your app's screens and reference screenshots. Not your email address, payment details or test password | Anthropic Commercial Terms with DPA (https://www.anthropic.com/legal/commercial-terms); Gemini API Additional Terms (https://ai.google.dev/gemini-api/terms); providers may not use your data to train models and delete it within 30 days, except as required for abuse prevention or by law |
| Slack Technologies, LLC (USA) | Processor | Internal notifications to our staff about orders that need attention | Order identifier, app name, status and, for orders checked by a person, preview images of screenshots | Slack DPA (https://slack.com/terms-of-service/data-processing) |
| Resend (Plus Five Five, Inc., USA) | Processor | Sending sign-in links and order emails | Your email address and the email content | Resend DPA (https://resend.com/legal/dpa) |
| Stripe, Inc. and its affiliates | Processor; independent controller for its own fraud prevention and legal obligations | Payments and refunds | Payment and billing details you enter on Stripe's page, order amount and number; we receive payment identifiers and status | Stripe DPA (https://stripe.com/legal/dpa); Stripe Privacy Policy (https://stripe.com/privacy) |
| Apple Inc. | — | Not a provider of ours. We do not upload anything to App Store Connect; you upload the screenshots yourself | — | — |
Transfers outside the EEA and the UK. We are based in the United States, and our providers process information in the United States and other countries where they operate. When you use the service from the EEA or the UK, your information is sent to us and our providers in the United States. Our processors protect such transfers with the safeguards in their data processing terms: the EU–U.S. Data Privacy Framework and its UK Extension, where the provider is certified, and the European Commission's Standard Contractual Clauses with the UK Addendum. You can ask us for details of these safeguards at hello@weelco.app.
6. How long we keep information
| Information | How long |
|---|---|
| Simulator build | Deleted 7 days after the order is delivered, cancelled or refunded. If you never pay for the order, 7 days after upload |
| Reference iPhone screenshots | The same as the build |
| Test login | Deleted together with the build at the latest |
| Copies on the shooting Mac | Erased after every order |
| Delivered screenshots and set archive | 90 days after delivery |
| Layout report, record of navigation steps, order details and status history | As long as your account exists, so you can see your orders and order a reshoot |
| Records of shooting sessions on our server (agent steps, screen images, messages; no passwords) | Up to 30 days |
| Copies kept by AI providers | Deleted by the provider within 30 days, except as required for abuse prevention or by law |
| Account (email address, account identifier) | Until you ask us to delete it |
| Payment and refund records | As long as tax and accounting law requires (generally up to 7 years after the end of the tax year of the payment), even after your account is deleted |
| Emails to hello@weelco.app | Up to 24 months after the conversation ends |
| Technical logs at our hosting providers | Up to 30 days |
| Database backups | Overwritten within 7 days. Files (builds and screenshots) are not kept in backups |
7. Cookies
We use only cookies that are strictly necessary: a sign-in cookie that keeps you logged in, and Stripe's cookies on its checkout page to process payments and prevent fraud. We do not use analytics, advertising or tracking cookies, so we do not ask for cookie consent.
8. Your rights
You can see your orders and download delivered sets in your account at any time.
Deleting your account. Write to hello@weelco.app from the email address of your account. We delete your account, order details, files and records of shooting sessions within one month, and ask our processors to delete their copies; database backups are overwritten within 7 days after that. We keep payment and refund records for as long as the law requires (section 6). If an order is in progress, we finish or refund it first.
EEA and UK. Under the GDPR and UK GDPR you have the right to:
- access your personal information and get a copy of it;
- have inaccurate information corrected;
- have your information erased;
- restrict our processing;
- receive information you gave us in a machine-readable format (portability);
- object at any time to processing based on our legitimate interests;
- lodge a complaint with a supervisory authority — in the EEA, the data protection authority of the country where you live or work (https://www.edpb.europa.eu/about-edpb/about-edpb/members_en); in the UK, the Information Commissioner's Office (https://ico.org.uk/make-a-complaint/).
How to make a request. Write to hello@weelco.app with "Privacy" in the subject line, from the email address of your account. We may ask you to confirm the request through a sign-in link. We answer within one month (we may extend this by two more months for complex requests and will tell you why). Requests are free.
California and other US states. The California Consumer Privacy Act (CCPA) applies to businesses that meet at least one threshold: annual gross revenue over US$26,625,000 (as adjusted from January 1, 2025), buying, selling or sharing personal information of 100,000 or more California consumers or households a year, or earning half or more of annual revenue from selling or sharing personal information. Weelco does not currently meet these thresholds. We still describe everything we collect in section 2, we do not sell or share personal information (including for cross-context behavioral advertising), and we do not use sensitive personal information to infer characteristics about you. If you live in a US state with a privacy law, you can make the requests above at hello@weelco.app, and we will not treat you differently for doing so.
9. Information in your app
Screenshots show whatever your app displays with the test account you gave us. Please use demo data. If your app shows personal information of other people, you are responsible for having the right to share it with us, and we use it only to provide the service and keep it only for the periods in section 6.
10. Automated decisions
Our automated systems check whether a set meets Apple's image requirements and whether screens were captured correctly, and may shoot a set again. They make decisions about screenshots, not about you, and they do not produce legal or similarly significant effects for you. Refunds for failed orders are made automatically; decisions to refuse a refund are made by a person.
11. Security
All connections use HTTPS. Storage is private, and files are available only through short-lived signed links. Test logins are encrypted. Access to production systems is limited to Weelco Inc. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you and the authorities as required by law.
12. Children
The service is for adults (18 and over) and businesses. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, write to hello@weelco.app and we will erase it.
13. Changes
If we change this policy, we will update the "Last updated" date and, for material changes, email account holders before they take effect.
14. Contact
Weelco Inc. — 1623 Central Ave Ste 201, Cheyenne, WY 82001, USA Privacy and support: hello@weelco.app (subject "Privacy")