Privacy Policy

This Privacy Policy describes how DucDA ("the App", "we", "us", or "our") collects, uses, stores, and shares information when you use our web application at https://ducda.dev and related services.

DucDA helps creators view performance metrics for their own social videos (for example views, likes, comments, and shares) and optionally receive content improvement insights generated with artificial intelligence (Google Gemini or DeepSeek).

By using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App or connect your social accounts.

Depending on features you enable, the App may connect to:

• TikTok via TikTok Login Kit / TikTok API (Display API), with scopes such as profile info, account statistics, and public video list metrics;
• Facebook / Meta (optional, if enabled) via Facebook Login and Graph API for Page or authorized account insights;
• Google Gemini or DeepSeek AI APIs to analyze aggregated performance data you choose to send for feedback.

Your use of TikTok, Facebook/Meta, Google, and DeepSeek is also governed by those providers' own terms and privacy policies. We only request permissions needed for the features described in this policy.

3.1 Information you provide

• Contact messages you send us (for example by email);
• In-app preferences related to analytics or connected accounts.

3.2 Information from TikTok (when you authorize Login)

With your explicit consent through TikTok OAuth, we may receive:

• Basic profile data (for example open_id, display name, avatar) via user.info.basic;
• Account-level statistics (for example follower count, following count, likes count, video count) via user.info.stats;
• Public video metadata and engagement metrics (for example video id, caption / description, cover, create time, view count, like count, comment count, share count) via video.list.

We do not use TikTok permissions to post, edit, or delete content on your behalf unless a future feature clearly requests additional scopes and you approve them.

3.3 Information from Facebook / Meta (optional)

If you connect a Facebook Page or authorized account, we may receive Page identity information and insights/metrics for posts or videos you manage, limited to the permissions Meta grants and you approve.

3.4 AI analysis inputs

When you request an AI analysis, we may send aggregated or selected metrics (and optionally captions or other content fields already available through the authorized APIs) to Google Gemini or DeepSeek to generate strengths, weaknesses, and suggestions. Do not submit sensitive personal data that is not required for analysis.

3.5 Technical data

• Browser and request information needed for normal operation (for example browser type);
• OAuth tokens / refresh tokens required to call authorized APIs on your behalf, stored in secure httpOnly browser cookies;
• Basic diagnostics or error logs if needed to fix bugs (without selling this data).

We use the information above to:

• Authenticate you with TikTok and/or Facebook and keep your session working;
• Display your own video and account performance statistics inside the App;
• Generate optional AI insights about content performance when you ask for them;
• Improve reliability, security, and user experience of the App;
• Respond to support requests and comply with applicable law.

We do not sell your personal data. We do not use TikTok or Facebook data to build advertising profiles for third parties.

We may share information only in these cases:

• Service providers: Google (Gemini) and DeepSeek process prompts you initiate; hosting or backend providers (if used) may process tokens and cached metrics solely to run the App;
• Platform providers: TikTok and Meta process authentication and API requests under their policies;
• Legal requirements: if required by law, regulation, or valid legal process;
• Business transfer: if the App or related assets are transferred, with continued protection consistent with this policy.

Access tokens are stored in httpOnly cookies in your browser for as long as needed to keep you signed in and refresh authorization (up to the refresh token lifetime set by the platform, typically about one year). You can disconnect social accounts at any time with the Disconnect button in the App or revoke access in TikTok / Meta account settings.

We apply reasonable technical and organizational measures to protect tokens and personal data. No method of transmission or storage is 100% secure; please protect your device and accounts.

• You may decline connecting TikTok or Facebook; analytics features will be limited;
• You may revoke TikTok or Meta authorization at any time in those platforms' settings;
• You may request deletion of data we store about you by contacting us (see below);
• Depending on your location, you may have rights to access, correct, or delete personal data under applicable privacy laws.

The App is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided data to us, contact us and we will take appropriate steps to delete it.

Our operators, TikTok, Meta, Google, and DeepSeek may process data in countries other than yours. By using the App, you understand that your information may be transferred to and processed in those locations subject to applicable safeguards and provider terms.

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the App after an update means you accept the revised policy, unless applicable law requires additional consent.

For privacy questions, data requests, or concerns about DucDA:

• Email: duc161097@gmail.com
• Website: https://ducda.dev
• This policy: https://ducda.dev/privacy-policy