Privacy Policy

Effective September 19, 2026

Duck Party is operated by Modern Matter LTD (“we,” “us,” or “our”). This policy explains how we handle personal information through our website, desktop app, and hosted services. Modern Matter LTD is responsible for the personal information described here. Contact us at legal@duck.party.

Information we handle

Account and profile information: your email address, name, chosen avatar, preferences, invitations, memberships, and sign-in records. A member inviting you may provide your email address before you create an account.
Content and collaboration: project files you import or create in hosted projects, prompts, AI responses, tool activity, shared conversations, direct messages, reactions, and collaboration state such as presence and cursors.
Service and device information: session identifiers, IP addresses and user-agent information used for authentication and security, app version, request and usage records, and technical information needed to diagnose errors.
Communications: information you send when you contact us for support or make a privacy request.

How we use information

We use this information to provide accounts, deliver sign-in and invitation emails, run AI tasks, save projects, enable collaboration, respond to requests, enforce usage limits, prevent abuse, and maintain the service.

Where a legal basis is required, we process information to provide the service you request and perform our contract with you; for legitimate interests in securing, supporting, and maintaining the service; to comply with legal obligations; or with your consent where required. You can withdraw consent without affecting processing that took place before withdrawal.

Shared projects and AI providers

Project members can see shared files, conversations, AI activity, and presence. Direct messages are available to their participants and are stored by the service; they are not end-to-end encrypted. People you share with may retain their own copies.

When you run hosted AI, relevant project files, conversation context, prompts, and tool results are processed in our hosting infrastructure and sent through OpenRouter to the selected model provider, such as OpenAI or Anthropic. Choosing a different model or harness can change which provider processes that information. Provider retention and data-use practices depend on the provider and applicable service settings.

Our service providers include Railway for hosting and database infrastructure, Resend for transactional email, and OpenRouter and the selected AI providers for inference. We may also disclose information when legally required, to protect rights and security, or in connection with a business transfer subject to applicable protections.

Local projects and dictation

Project discovery and repository review happen on your computer. Importing a project uploads its supported files, Git history and saved Codex or Claude Code conversations into the hosted project. New and imported sessions run in hosted workspaces, and context used for an AI request is sent to the configured model provider. Import does not copy your source tool’s account credentials.

Optional Mac dictation uses on-device speech recognition. Duck Party does not upload or save the audio. Recognized text stays in your editable draft until you send it, after which it is handled like any other message.

Storage, retention, and security

We use cookies or similar storage where needed for authentication and app preferences. The download website does not use advertising or analytics cookies.

Account information and hosted content are retained while needed to provide your account and shared projects. Run records, security records, and backups may be retained to operate the service, investigate problems, meet legal requirements, and resolve disputes. We consider the purpose, sensitivity, legal requirements, and whether information remains necessary when deciding retention. The beta does not currently provide automatic account deletion; contact us to request deletion. Some records or shared content may need to be retained where permitted or required by law.

We use access controls and other technical safeguards, but no system is completely secure. Our providers may process information outside your country. Where applicable law requires protections for international transfers, those transfers must be supported by an appropriate legal mechanism.

Your choices and rights

You can update available profile settings, choose what to share, stop using optional features, and contact legal@duck.party about your information. Depending on your location, you may have rights to access, correct, delete, or obtain a copy of your data, restrict or object to processing, withdraw consent, and complain to your local data protection authority. We may need to verify your identity before fulfilling a request, and will respond within the time required by applicable law.

Children and policy changes

Duck Party is intended for adults aged 18 or older. If you believe a child has provided us with personal information, please contact us.

We may update this policy as the service changes. We will update the effective date and provide additional notice of material changes where required.