Your information, explained.
Private pilot · Updated 15 September 2026
DUERIQO helps you organise bills and repayment plans. It does not move money or access accounts using a phone number or postcode alone.
What the web pilot stores
Your sign-in identifier links to your agreements, recorded payments, reminder preferences and documents you choose to upload. Records use Cloudflare D1; uploaded files use Cloudflare R2. Access is checked against your signed-in account. This is not end-to-end encrypted storage.
Documents and AI
Letter scanning can run on your device. If you choose server-assisted AI capture, the submitted text is sent for processing through the configured AI provider. Review the permission prompt before sending it. Suggested amounts and dates must be checked before saving.
Optional connections
Bank and email discovery require a supported provider, explicit permission and completed provider setup. A connection being listed does not mean it is active. Your address may suggest likely services; it cannot establish that a debt belongs to you.
Gmail and Microsoft connections use read-only mailbox permission. Yahoo will not be activated until an approved HTTPS mail gateway is in place; DUERIQO will not request a Yahoo app password. Open Banking access is read-only and does not give DUERIQO authority to make a payment.
Consent records
DUERIQO records when you ask to connect, search or disconnect a source and which version of the permission notice applied. OAuth tokens are encrypted and are never included in your data export.
On your device
Browser storage remembers alert preferences and checks whether an alert has already been shown. Calendar exports leave the app and are managed by your calendar provider. Hide creditor names when exporting if you prefer.
Export and deletion
You can export your agreements, discovery results, Payment Profile and consent history from your Profile. You can also erase your DUERIQO profile, connected-source records, bills, payment history, reminders and uploaded files from the same screen. The app asks for confirmation before deletion. Do not use the pilot for records you are not authorised to share.
Before a public launch
A complete controller notice, verified support contact, retention periods and international transfer information must be published before general registration opens. The deletion journey must also pass final physical-device testing. This page explains the current private pilot; it is not a claim that those release requirements have been completed.