WeDual Duo

Privacy Policy

This policy explains how Changsha Eedon Technology Co., Ltd. processes information for WeDual Duo, the Duo website, and related licensing services. It distinguishes local device data from server-side data.

Updated October 16, 2026

1. Scope and data controller

This policy covers these products, purchased and complimentary licenses, license recovery, device management, and the administrator dashboard. Changsha Eedon Technology Co., Ltd., located in Changsha, Hunan, China, is the data controller for these services.

This policy does not replace the privacy policies of third-party websites, apps, or payment services. Send privacy questions and personal-data requests to support@eedon.cn.

2. Data stored locally on your device

WeDual Duo primarily processes data locally. The following data stays on your Mac and is not uploaded to the website license service. WeDual Duo does not synchronize workspaces or website sign-in data through its services.

You can manage and delete local data in WeDual Duo or the operating system. Removing a workspace entry or a workspace does not delete clone profiles or their sign-in data. Deleting a website clone from the Clone Library clears its local website storage. Uninstalling the app may not erase all local data.

Duo stores its own workspaces, settings, and website sign-in data. Through the installed local component, Duo can discover and adopt existing native app clones by reusing their original files and data. This does not import old workspaces or website sessions, or upload them to the license service.

Your acceptance record for the App Cloning Agreement (agreement version, acceptance time, and reading language) is stored only in Duo’s local preferences on this Mac to remember your acceptance. It is not uploaded to a server.

  • Workspaces, entries, notes, appearance preferences, and WeDual Duo settings.
  • Authorized app references, clone profiles, and local clone data.
  • Website-clone cookies, sign-in sessions, cache, and website storage.
  • Selected apps, related-data selections, and local operation results.

3. Website and website-clone data

The website uses browser storage for language and theme preferences, without advertising or behavioral analytics cookies. The dashboard offers email-code login only to authorized administrators and uses a necessary secure cookie to maintain their session. Ordinary users do not need a WeDual Duo account. Hosting and security providers such as Vercel may process IP address, access time, requested page, browser or device type, and other necessary information to deliver pages, prevent attacks, and diagnose failures.

Each website clone uses separate local browser storage. When you visit a third-party website, information you submit goes directly to that website and remains subject to its policies. WeDual Duo does not control third-party website content or data practices.

Duo checks for software updates every 24 hours by default. You can turn off automatic checks in Settings or check manually at any time. Update checks do not upload your app inventory, workspaces, license code, or license entitlement. The update provider may process IP address, request time, requested file, browser or device information, and necessary access and security logs. Installation still requires your confirmation.

The website collects anonymous clicks on Duo download buttons to understand use of download entry points, not completed downloads or installations. Each event contains only a random event ID, button location, download version, and server time. It contains no email address, license code, full URL, device fingerprint, or persistent user identifier, and sets no analytics cookie. IP addresses are used only for short-term rate limiting and are not written to analytics tables. Deduplication events are retained for 7 days and removed by a daily cleanup job after expiry (up to 24 hours later); daily aggregates without personal identifiers are retained long-term. Direct installer links and automatic updates are not counted.

When you visit through a referral link, this browser locally remembers the first valid promo code, the time it was saved and its expiry for 30 days, so you can find the offer after your trial. This record contains no buyer identity or price. The licensing service validates the code when the offer is shown or used; valid terms at purchase determine the price. Select “Forget offer” in the offer notice or clear this website’s browser data to delete the record. Expired records are removed on your next visit. This memory does not sync across browsers or devices and cannot be restored after browser data is cleared.

4. Data processed by the website license service

When you purchase or receive, activate, refresh, release, or recover a Duo lifetime license, the license service processes information needed to issue and maintain it. Complimentary grants are managed separately from paid orders and do not create a payment transaction.

The website license service does not store card numbers, card security codes, WeChat accounts, complete payment credentials, hardware serial numbers, your app list, or third-party account passwords. Email is used for license delivery and recovery; administrator login is separate from ordinary user licensing.

Complimentary grant records include recipient email, license linkage, notes, issue time, the acting administrator, and any revocation reason. Email, notes, and revocation reasons are encrypted at rest. Order or transaction identifiers and purchase types previously supplied for purchase verification are retained in the corresponding historical records as needed for support and audit. Do not include passwords or complete payment credentials in notes or support materials.

The administrator service processes authorized email addresses, code-verification data, login sessions, and audit records. Login codes expire after 10 minutes and sessions after one hour; codes and session tokens are stored as verification values. Necessary audit records cover order queries, license-code access, grants, email delivery, and revocation.

Data categoryProcessingPrimary purpose
Purchase or gift-recipient emailStored in encrypted form.Delivery of purchased or complimentary licenses, recovery, support, and refund linkage.
Order linkageOrder identifier, currency, amount, status, and timestamps.Entitlement delivery, duplicate-event handling, refund revocation, and disputes.
License informationEncrypted license information, status, issue time, and revocation time.Activation, refresh, release, recovery, and Duo license verification.
Device informationDevice identifier, encrypted display name, and activation, refresh, and release times.The up-to-three-Macs limit and device management.
Secure link informationVerification values, state, and expiry for purchase, recovery, and device-management links; recovery links are single-use.Purchase connection, recovery, device management, and prevention of repeated use.
Necessary security dataNecessary request identifiers, event state, and access-frequency information.Service operation, diagnostics, fraud prevention, and security.
Support emailEmail address, message, and attachments or context you choose to send.Support, privacy, and refund requests.

5. Duo support involving historical purchases

Duo licenses and historical App Store purchases are not interchangeable. Separate complimentary Duo licenses are managed through their grant records and do not cancel existing subscriptions.

If you contact us about a historical purchase when moving to Duo or receiving a complimentary license, we process only the information you provide for support. We do not request complete Apple Account credentials or card details. Apple continues to process historical account, payment, and transaction information under its policies.

6. Purposes and grounds for processing

We process information as needed to perform the purchase and license contract, answer your requests, protect legitimate interests, and comply with applicable law.

License data is not used for personalized advertising or marketing unrelated to transactions and support. We do not sell or rent personal information.

WeDual Duo uses TelemetryDeck to collect product usage data and a pseudonymous device identifier to understand feature completion and improve the experience. The statistics are not linked to purchase email or license records or used for advertising tracking. Only for app-clone creation and launch events, WeDual Duo sends the source app display name and Bundle ID. It does not send custom clone names, app paths, website names, domains, URLs, licenses, orders, or user input. Additional app-clone creation and Helper diagnostics contain only fixed error codes, operation stages, allowlisted command categories and exit codes, system error domains and numeric codes, relevant software versions, and rollback outcomes. A fresh random operation ID links the start and result of each creation attempt; it is not a persistent user or clone identifier. Raw error text, command arguments, and command output are not sent.

  • Link orders and issue, verify, and maintain Duo license entitlements.
  • Send license, recovery, device-management, and other necessary transaction email.
  • Handle refunds, support, complaints, disputes, and personal-data requests.
  • Prevent fraud, abuse, and replay; protect the service; and meet legal duties.

7. Optional local component and local operations

Duo uses an optional local component, installed at your request, for native app clones and app uninstall. It performs creation, launch, editing, updates, and uninstall actions you initiate. During startup and status checks it also reads managed clone records and recovers unfinished transactions under existing rules so valid old clones can be adopted.

WeDual Duo does not read hardware serial numbers and does not upload your installed-app list to the license service. Permanent deletion cannot be undone; review selections and back up important data first.

8. Service providers and sharing

We provide information to service providers only as needed for payments, licensing and grant management, necessary email, hosting, product analytics, or legal duties, according to the provider descriptions below. Providers process data under their policies and arrangements with us.

We do not otherwise provide or publicly disclose personal information unless authorized, needed to perform a contract or protect legitimate interests, or required by law or a competent authority.

ServiceRole and purposeData that may be processed
Waffo PancakeMerchant of Record for hosted checkout, payment, tax, receipts, refunds, and payment disputes.Purchase email, order, transaction, and information required for payment.
CloudflareDuo licensing, complimentary grants and administrator services, software update delivery, domain security, and necessary logs.Encrypted license and grant records, administrator verification and audit information, update and license requests, IP, time, requested objects, and necessary security data.
ResendPurchased or complimentary license delivery, recovery, device-management, administrator login-code, and other necessary service email.Recipient email, message content, and delivery status.
VercelPublic WeDual Duo website hosting and necessary security and operational logs.IP address, request time, page, browser or device type, and error logs.
ApplemacOS system services; Apple handles billing, subscription management, and refunds for historical purchases.Necessary device information and account, payment, and transaction information relating to historical purchases, processed by Apple under its policies. Duo does not use Apple subscription entitlements to unlock features.
TelemetryDeckProduct usage analytics and experience improvement for Duo only.Pseudonymous device identifier, product-interaction categories, app version, distribution channel, and the source app display name and Bundle ID in app-clone creation and launch events.

9. Cross-border processing

Waffo, Cloudflare, Resend, Vercel, Apple, and TelemetryDeck may operate infrastructure outside mainland China. Email, orders, licenses and grant records, delivery status, analytics, or necessary technical information may therefore be processed abroad, depending on the service used.

We limit recipients and data to what is needed for the relevant purpose and use reasonable contractual, encryption, and access-control safeguards. Exact physical locations and further processing depend on provider architecture and published policies.

10. Retention

We retain information for the shortest period needed for its purpose, then delete, anonymize, or restrict it, except where law, tax, fraud prevention, or dispute handling requires continued retention.

After expiry, a secure link can no longer authorize access. Necessary state records may remain for a limited period to prevent abuse, support audits, and handle disputes.

Administrator codes and sessions become invalid at expiry; this does not mean all associated records are physically deleted at that moment. Grant, revocation, and administrator audit records are retained as needed for licensing, abuse investigation, support, and disputes, and are not automatically deleted on logout.

  • Local device data remains until you delete or clear it in WeDual Duo or the system.
  • An unfinished purchase connection expires after 10 minutes; a completed activation link remains available for up to 24 hours.
  • A recovery link expires after 30 minutes and is single-use; a device-management link expires after 7 days.
  • Order, license, and device records remain during the lifetime license. After refund, revocation, or release, they are retained or de-identified for the shortest period required by law and legitimate business purposes.
  • Ordinary support email is normally deleted or anonymized within 12 months after resolution. Contract, refund, complaint, or litigation records follow the relevant retention period.

11. Security

We use technical and organizational measures proportionate to the risk, but no system can guarantee absolute security.

If a security incident may affect your rights, we will assess and address it and notify affected users or authorities where required by law.

  • Encryption protects email, license information, and device display names during transfer and storage.
  • Signed license verification and access controls reduce forgery and unauthorized use.
  • Service credentials have strict access controls, and logs exclude license codes, full email, and payment credentials.
  • Important operations use source validation, rate limits, duplicate-request protection, and access controls.

12. Your personal-data rights

Subject to applicable law, you may request access, copy, correction, supplementation, restriction or objection, deletion, an explanation of processing rules, or withdrawal of consent where consent is the basis.

Contact support@eedon.cn with the purchase or gift-recipient email, if applicable, and your request type. We may require reasonable verification to prevent unauthorized access and will respond within the period required by law.

Order, tax, fraud-prevention, or dispute records required by law may not be immediately deleted; when applicable, we will explain the basis. You control local Mac data directly in the app or system.

  • Access, copy, correct, or supplement personal information.
  • Restrict, object to, or withdraw consent-based processing.
  • Request deletion when legal conditions are met and understand why immediate deletion may not be possible.
  • Request an explanation of processing rules or raise a complaint about processing.

13. Children and minors

Duo lifetime-license purchases are intended for users with the legal capacity required to enter the contract. Minors should use the products and purchase features with guardian involvement and any required consent.

WeDual Duo does not intentionally target children to collect license information or show targeted content. Contact support if you believe a minor provided information without appropriate consent.

14. Changes and contact

We may update this policy when WeDual Duo features, providers, or legal requirements change. The updated date will appear here, and material changes will receive additional reasonable notice.

Send privacy questions and rights requests to support@eedon.cn. Support will never ask for a license code, device-management link, card password, or WeChat payment password.