1. Who we are and scope
1.1. This Policy explains how personal data is handled when you use the LogAgent desktop application and the website https://logagent.duohuman.ai (the "Application" and the "Services").
1.2. The data controller for the Application and website is DuoHuman Inc ("we", "us"). Privacy questions: support@duohuman.ai.
1.3. Where paid licenses are offered, payments are processed by YooKassa (NBCO YooMoney LLC). Card details are entered at YooKassa and never reach us. Licensing data — email, device identifier and purchase details — is stored on our server.
Your activity data, analytics and camera analysis stay on your device; we have no access to them. The camera works as a scanner — no recording and no snapshots.
2. What data is collected
Below is the full list of data LogAgent works with and where it lives.
| Data type | Purpose | Where it is stored | Shared with |
|---|---|---|---|
| License delivery, receipts, license recovery | Our server | YooKassa (receipt), email provider | |
| Hardware ID (device identifier) | Binding the license to your device | Our server | YooKassa (payment description) |
| Purchase details: plan, amount, status, license key | Performing the contract, accounting | Our server | No one |
| Card details | Payment | Held by YooKassa, not by us | YooKassa |
| IP address / country code | Choosing the site language and payment method, abuse prevention | Not stored; country cookie in your browser for 30 days | No one |
| Time tracking and AI-session data | Window and app names, projects, sessions, commits | Locally on your device | No one |
| Camera scanner | Real-time video stream (posture, blink, lighting) | Nowhere — RAM only, deleted instantly | No one |
| Site cookies | Language, country, theme | Your browser | No one |
2.1. Network requests made by the Application
- License updates: your email and Hardware ID are sent to https://logagent.duohuman.ai to pick up a renewed key.
- Clock check: a plain HTTP request to public servers (Google, Yahoo, Yandex, Cloudflare), carrying no personal data.
- Mobile sync — only if you turn it on; data is encrypted on your device and we cannot read it.
2.2. The camera scanner in detail
- Does NOT record video
- Does NOT take snapshots
- Does NOT save images to disk or memory
- Analysis happens in RAM only, in real time, and is deleted instantly
3. What data is NOT collected
LogAgent never collects:
- IP-based profiling or precise geolocation
- Biometric templates, photos, or video
- Keystrokes (keylogging) and screen screenshots
- File and folder contents
- Special-category data under Art. 9 GDPR
No cloud
No cloud storage of your activity data. No servers holding your tracking history.
4. Legal bases for processing (EU/UK GDPR)
Where the EU or UK GDPR applies, we rely on the following legal bases:
- Performance of a contract (Art. 6(1)(b)) — issuing and managing your license and delivering the Services.
- Legitimate interests (Art. 6(1)(f)) — securing the website, preventing abuse, and improving the product.
- Consent (Art. 6(1)(a)) — optional features such as the camera scanner; you can withdraw consent at any time.
- Legal obligation (Art. 6(1)(c)) — receipts, tax and accounting duties.
5. Purposes of processing
5.1. Local data (on your device)
- Providing the Services: tracking, analytics, fatigue notifications
- Generating reports and statistics for you
- Improving classification algorithms locally
5.2. Account & billing data
- Issuing and validating your license
- Processing payments and receipts via YooKassa
- Sending transactional emails (receipt, license key)
6. Storage and security
6.1. Activity data is stored only on your device in a local SQLite database. We have no technical ability to access it.
6.2. Card data is handled by YooKassa under the PCI DSS standard; we do not receive or store card numbers. Licensing data is kept in a database on our server, accessible only to us, over TLS.
6.3. At any time you can
- Export your local data to CSV or JSON
- Delete the local database entirely
- Disable the camera at any time
8. Your rights (EU/UK GDPR)
If the GDPR applies to you, you have the right to:
- Access, rectify, or erase your personal data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time (e.g. disable the camera)
- Lodge a complaint with your supervisory authority
Most activity data is on your device, so you can exercise access, portability, and erasure directly in the app. For account/billing data contact support@duohuman.ai.
9. Your rights (CCPA/CPRA)
If you are a California resident, you have the right to know, access, delete, and correct your personal information, and to opt out of its sale or sharing.
We do not sell or share
We do not sell or share your personal information as defined by the CCPA/CPRA. We will not discriminate against you for exercising your rights.
To make a request, contact support@duohuman.ai. You may use an authorized agent.
11. Data retention
11.1. Local data remains until you delete it or uninstall the Application. Purchase records (email, Hardware ID, payment details and license key) are kept for the license term plus 5 years for accounting and claims, then deleted. Error logs are kept for up to 90 days and contain no email.
12. Children's privacy
12.1. The Services are not directed to children under 16 (or the age required by your jurisdiction), and we do not knowingly collect their data.
13. Changes to this policy
13.1. Material changes are announced at https://logagent.duohuman.ai/privacy-policy with an updated effective date.
14. Controller details
- Data controller: DuoHuman Inc
- Registered address: DuoHuman Inc
- Privacy contact: support@duohuman.ai
- EU/UK representative (Art. 27 GDPR): not appointed