DUO Health ("we," "our," or "the App") is a corporate wellness platform provided by your employer. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the DUO Health mobile application and web platform.
When you register, we collect your name, email address, username, department, and location as provided by your organization's invitation system.
With your explicit permission, we collect health and fitness data including:
This data may come from manual entries within the app, or from connected third-party services (Apple Health, Google Health Connect, Fitbit, Strava, Garmin, Withings) that you explicitly authorize.
Posts, comments, chat messages, recipes, blog entries, shout-outs, and profile information you choose to share within the app.
We collect basic device information (device type, operating system version) and app usage data to improve performance and troubleshoot issues.
We use your information solely to:
We do not sell, rent, or share your personal health data with third parties.
Your data is shared only in the following limited ways:
You have full control over your data:
What the AI does: DUO Health includes an on-premise AI wellness coach ("DUO Coach") that you can chat with, a food-photo analyzer, a recipe parser, and a natural-language workout logger. The AI is powered by Gemma 4 running on DUO Health's own GPU server inside the dutil.com network.
No third-party AI providers. Your data is never sent to OpenAI, Anthropic, Google Gemini, Microsoft, or any other external AI provider. Every AI response is generated on hardware owned and operated by DUO Health. Your messages and wellness data never leave DUO Health infrastructure.
What data is sent to the AI when you use these features:
What the AI does NOT see: your medical records from health plan integrations (e.g. Cigna), direct-message conversations with other users in the chat feature, or posts you make in the feed.
Opt-in required. You must explicitly accept a consent disclosure before any AI feature processes your data for the first time. You can revoke this consent at any time from Settings → AI features. When revoked, every AI endpoint returns an error and your data is not processed. Revoking consent does not delete previously-generated coach replies or memories; use the controls below for that.
Long-term memory. The coach extracts durable facts from your conversations (goals, preferences, limitations, medical conditions) and stores them to give continuity across sessions. Priority memories (allergies, injuries, medications, chronic conditions) are flagged so they're always considered.
Strict user scoping. Every database query that touches coach messages or memories is filtered by your user ID at the data layer. No teammates, HR admins, or DUO Health staff can read your coach conversations, memories, or notes.
Full user control. In the app you can:
Safety intercept. If your message contains self-harm, eating-disorder, substance-abuse, or crisis language, the coach is bypassed entirely and you receive a hand-authored response with crisis-line resources (988, NEDA, SAMHSA). Only a non-identifying event marker is logged so moderators know an intercept fired — never the underlying message.
No medical advice. The coach is instructed not to diagnose, rank severity, or recommend treatment. Any medical-adjacent topic surfaces a "talk to your doctor" disclaimer. AI-generated content is for general wellness guidance only and is not a substitute for professional medical advice.
DUO Health integrates with the following optional third-party services. Each has its own privacy policy:
Connecting these services is entirely optional. The app functions without any third-party connections.
We retain your data for as long as your account is active. If you delete your account, all personal data is permanently removed. Anonymized aggregate data may be retained for program reporting purposes.
DUO Health is intended for use by employees of participating organizations. We do not knowingly collect data from anyone under the age of 18.
We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the app after changes constitutes acceptance of the updated policy.
If you have questions about this privacy policy or your data, please contact: