Privacy policy
Duct is built so that your documents never reach us. This policy explains the small amount of personal data we do process: for your account, paid plans, optional usage counts, support and this website.
Last updated: 8 October 2026
1. Who we are
Duct is made by Tensflare Ltd, a company registered in Nigeria, of Abuja, Federal Capital Territory, Nigeria (“Tensflare”, “we”). Tensflare is the controller of the personal data described in this policy. Our Data Protection Officer can be reached at privacy@tensflare.com.
When an organisation runs Duct on its own computers or servers (including “Duct in your cloud”), that organisation controls the data it puts into Duct. We only process it if they ask us to, under a data processing agreement.
2. Your documents
The Duct app reads, indexes and searches your documents on your own computer or server. Their contents, file names, folder names, search queries and questions are not sent to Tensflare. This is true whether or not you have an account.
Two things can send document text off your machine, and only when you set them up:
- AI features you configure. If you turn on Ask or search by meaning with your own provider (for example OpenAI, Google, Cohere, Voyage, Mistral or Jina), Duct sends the passages needed for that answer or index directly from your device to that provider, under your agreement with them. A local model (Ollama) sends nothing anywhere.
- Hosted AI on paid plans, when it launches, will send the passages needed for an answer to an AI provider acting for us under a data processing agreement that forbids using your data to train models. We will update this policy and tell you before it is switched on.
3. What we process and why
| Activity | Personal data | Purpose |
|---|---|---|
| Tensflare account (optional) | Email address; an account id; the name of each signed-in device (its computer name); plan and organisation membership; sign-in and sign-out events with times | To sign you in, provide the paid features you are entitled to, manage signed-in devices and keep accounts secure |
| Sign-in codes | Your email address and a one-time code (stored only as a keyed hash, for 10 minutes) | To prove you control the email address. We use no passwords |
| Paid plans | Name, email, billing country and address, plan, amounts, invoices and payment status. Card or mobile-money details are handled by our payment partners and never reach us | To take payment, issue invoices, meet tax and accounting duties and handle refunds |
| Anonymous usage counts (optional) | A random install id; app version, operating system and language; and counts in ranges (see What Duct sends). No names, files, paths, searches or account ids | To understand which versions, features and file types are used, so we know what to improve |
| Support and enquiries | What you write to us and your contact details | To answer you and fix problems |
| This website | Your IP address, briefly, as part of delivering pages; the country it indicates for showing prices in your currency | To deliver the site securely and show local prices. We do not store your IP address, and the site has no analytics, advertising or tracking cookies |
Signing in, paying and usage counts are all optional: everything Duct does on your own computer works without them.
4. Legal bases
- Contract: to provide your account and any plan you buy.
- Legitimate interests: to keep the service secure (sign-in records, abuse prevention) and, outside the EU and EEA, to receive anonymous usage counts. You can turn usage counts off at any time, and switching them off stops all requests.
- Consent: for usage counts from installs in the EU and EEA, which stay off until you turn them on, and for any marketing emails, which we only send if you ask for them. You can withdraw consent at any time.
- Legal obligation: to keep billing, tax and accounting records.
We do not make decisions about you based solely on automated processing, and we do not sell personal data.
5. Who we share it with
We use service providers who process personal data for us under written agreements, only for the purposes above:
- Hosting for accounts and usage counts, in the European Union.
- Email delivery, to send sign-in codes and receipts.
- Payments: Dodo Payments, which acts as merchant of record (the reseller of your purchase, responsible for collecting payment and sales tax), and Paystack and Kora for local payment methods. They process payment details as independent controllers under their own privacy policies.
- Website delivery: our hosting and content-delivery provider, which processes IP addresses to serve pages.
We may also disclose personal data where the law requires it, to protect people’s safety or our rights, or to a buyer if Tensflare’s business is sold, in which case this policy continues to apply. A list of our current service providers is available from privacy@tensflare.com.
6. Where it is stored
Account data and usage counts are stored on servers in the European Union. If you are outside the EU, for example in Nigeria, Kenya, Ghana or South Africa, your data is transferred there. We rely on the safeguards each law requires, mainly contractual clauses with our providers. Where our staff outside the EU access EU users’ data, the European Commission’s standard contractual clauses apply. You can ask us for a copy of the relevant safeguards.
7. How long we keep it
- Account data: while your account exists. When you delete your account, we delete it within 30 days, except records we must keep by law.
- Sign-in and security records: 13 months.
- Sign-in codes: 10 minutes. Unused sign-in requests: 30 minutes.
- Billing records: as long as tax and accounting law requires (generally six years).
- Usage counts: individual reports for 90 days; daily totals, which contain no install ids, for 13 months.
- Support emails: up to two years after your enquiry is resolved.
8. Your rights
Depending on where you live, you can ask us to:
- tell you whether we hold personal data about you, and give you a copy;
- correct it, or complete it;
- delete it;
- restrict or object to how we use it, including use based on legitimate interests;
- give it to you, or to another organisation, in a machine-readable format;
- withdraw consent you gave, without affecting earlier processing.
Write to privacy@tensflare.com. We answer within one month, or sooner where your local law requires. We may need to confirm your identity first. Exercising your rights is free.
You can also complain to a data protection authority (see section 11). We would appreciate the chance to resolve your concern first.
Some things you can do yourself at any time: sign out from Duct’s Settings › Account (to sign out other devices, write to us); turn usage counts off in Settings › General or with duct telemetry off; and see exactly what usage counts would send with duct telemetry show.
9. Security
We protect personal data with appropriate technical and organisational measures. For example, refresh tokens and API keys are stored only as hashes, sign-in uses one-time codes instead of passwords, entitlements are cryptographically signed, and the desktop app keeps tokens in your system’s keychain. See Security for details. If a breach is likely to put your rights at risk, we will notify you and the relevant authorities as the law requires.
10. Children
Tensflare accounts and paid plans are for people aged 18 or over. The free Duct app does not ask for any personal data. If you believe a child has given us personal data, contact privacy@tensflare.com and we will delete it.
11. Country-specific information
Nigeria
We process personal data in line with the Nigeria Data Protection Act 2023 and the General Application and Implementation Directive. You can complain to the Nigeria Data Protection Commission.
European Union, EEA and United Kingdom
The EU General Data Protection Regulation (GDPR) and UK GDPR apply to your personal data. You can complain to the data protection authority where you live or work, or, in the UK, to the Information Commissioner’s Office. Usage counts from the EU and EEA are off unless you turn them on.
Kenya
We process personal data in line with the Data Protection Act 2019. You can complain to the Office of the Data Protection Commissioner.
South Africa
We process personal information in line with the Protection of Personal Information Act 2013 (POPIA). Our Information Officer can be reached at privacy@tensflare.com. You can complain to the Information Regulator.
Ghana
We process personal data in line with the Data Protection Act 2012 (Act 843). You can complain to the Data Protection Commission.
Other countries
If you live elsewhere, you have the rights your local law gives you, and you can exercise them by writing to privacy@tensflare.com.
12. Changes and contact
We will post any change here and update the date above. If a change is significant, we will tell account holders by email before it takes effect.
Questions or requests: privacy@tensflare.com. Post: Tensflare Ltd, Abuja, Federal Capital Territory, Nigeria.