1. Who we are
This policy explains how Mayuniverse ("we", "us") handles personal data when you use Duck Do — the apps for macOS, iOS and Android, this website and the related online services (the "Service"). The legal entity behind Mayuniverse, and therefore the controller of that data, is Beijing Weijing Technology Co., Ltd (see our Terms). Contact details are in section 14.
2. What we collect
| Data | Details | Why |
|---|---|---|
| Account data | Email address, display name and avatar; if you sign in with Google, the identifier and profile details Google shares with us. | Create your account and sign you in. |
| Content you send to AI models | Messages, files and images you include in a conversation, and the replies generated for you. | Generate replies (section 5). |
| Cloud chats, memory and tags | Cloud conversations, the memory items Duck Do keeps about your preferences, tags and reminders. | Sync them between your devices. |
| Remote access traffic | When you turn on remote access, session updates and your replies are relayed between your own devices through our relay. | Let you control your Mac's sessions from another device. |
| Usage and billing records | Which model or tool was used, token counts, credits charged, time; top-ups, order numbers, amounts and payment status. | Charge credits accurately, show your history, accounting and fraud prevention. |
| Device and sign-in data | Signed-in devices and app sessions, IP address and basic request logs on our servers. | Security, letting you sign out devices, troubleshooting. |
| Feedback and diagnostics you send | Your message plus app version, OS version and device model; a redacted diagnostics bundle only if you choose to send one. | Answer you and fix problems. |
We do not receive your full card or bank details: payments are processed by Paddle, Apple or Google, which share only what we need to credit your account (such as order number, amount, currency, country and status).
3. What stays on your device
- Mac agent sessions. Conversation history of sessions on your Mac and the changes they make to your files are stored on your Mac. Only the parts of a conversation needed to get a reply are sent to an AI model (section 5).
- Sign-in credentials are kept in your device's secure storage (the Keychain on Apple devices) and cleared when you sign out.
- Diagnostic logs are kept on your device. They leave it only if you export or send them yourself.
- Claude Code sessions on macOS talk to Anthropic directly with your own Claude account. Duck Do does not see or store your Claude credentials.
Our apps contain no advertising, no third-party analytics and no automatic crash reporting.
4. How we use data
- To provide the Service: sign-in, generating replies, syncing, remote access, reminders.
- To bill usage and process purchases and refunds.
- To keep the Service secure, prevent fraud and abuse, and enforce our Terms.
- To provide support and improve reliability, using operational logs and the feedback you send.
- To meet legal obligations, such as tax and accounting record-keeping.
Depending on where you live, our legal bases are performing our contract with you, our legitimate interests (security, fraud prevention, improving the Service), legal obligations and, where required, your consent. We do not sell personal data or share it for cross-context behavioural advertising.
5. AI model providers
To answer you, the conversation (including any files or images you attach) is sent through our model service to the provider of the model you selected — for example DeepSeek or Zhipu AI (GLM) — or to a model we host ourselves. The model and provider for each request are shown on our pricing page. Providers in use: 【待用户确认：生产环境模型供应商最终名单】.
Providers process this content to generate the reply. We do not use your content to train models, and we choose providers whose terms for API use do not allow them to train on it.
6. Who we share data with
We share personal data only with service providers that help us run Duck Do, under contracts that limit their use of it, and when the law requires:
- AI model providers — to generate replies (section 5).
- Paddle (Merchant of Record for web and desktop purchases), Apple and Google — payments, tax, refunds and in-app purchases.
- Google — if you choose to sign in with Google.
- Cloudflare — network delivery and protection of our websites and services.
- Resend — sending account emails such as verification and password-reset messages.
- Hosting providers — servers that run our services.
- Authorities or other parties — when required by law, to protect rights and safety, or as part of a merger or acquisition (with notice to you).
7. Where data is stored
Our servers are located in 【待用户确认：生产服务器所在国家 / 地区】. Model providers and service providers may process data in other countries. Where we transfer personal data internationally, we use safeguards required by applicable law, such as standard contractual clauses.
8. How long we keep data
- Cloud chats, memory and tags: until you delete them or your Duck Do data.
- Account data: while your account is open.
- Usage, purchase and billing records: 【待用户确认：服务器日志与用量 / 账单记录保存期限】, and as long as required for tax and accounting.
- Server request logs: 【待用户确认：服务器日志与用量 / 账单记录保存期限】.
- Data on your devices: until you delete it.
9. Your choices and rights
- Delete conversations. Deleting a cloud session also deletes it from our servers.
- Edit or delete memory from the app at any time.
- Delete your Duck Do data. On iPhone, use Settings → Delete account. This deletes your Duck Do data from our servers. Your account on our shared account platform, which holds your credit balance and purchase records, is kept so that your balance and legally required records aren't lost; to close it as well, email us.
- Local data on your Mac can be cleaned up in Settings → Privacy, or removed by deleting the app's data folder.
- Remote access is off until you turn it on, and you can turn it off at any time.
Depending on where you live (for example under the GDPR, UK GDPR, the California CCPA or China's PIPL), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. Email feedback@mayuniverse.com and we will respond within the time required by law. You may also complain to your local data protection authority.
10. Security
We use encryption in transit (HTTPS/TLS), short-lived sign-in tokens with refresh-token rotation, per-device sign-in that you can revoke, and access controls on our servers. No system is perfectly secure; if a breach affects your data, we will notify you as required by law.
11. Children
Duck Do is not intended for anyone under 【待用户确认：最低使用年龄（建议 18）】. We don't knowingly collect personal data from children; if you believe a child has given us data, contact us and we will delete it.
12. This website
This website is a static site. It sets no cookies, includes no analytics or advertising scripts and loads no third-party resources. Our hosting provider may keep standard server logs (such as IP address and pages requested) for security.
13. Changes
We may update this policy. We'll change the effective date above and, for material changes, notify you in the app or by email.
14. Contact
Mayuniverse
【待用户确认：注册地址】
Privacy requests: feedback@mayuniverse.com
General support: feedback@mayuniverse.com