Privacy policy

Last updated 21 October 2026

Duper copies the look of a photo you like onto your own photos, and it does that on your phone. This page says exactly what leaves your phone, what happens to it, and what never leaves at all.

Who we are

Duper is an independent app, published as com.lookduper.app on Google Play and the App Store. This policy covers the app on both. You can reach us at hello@getduper.com about anything on this page.

What we collect

A look's photo, when you ask for a preset. Duper matches looks on your phone, so the photos you dupe and the photos you edit are not uploaded. A photo leaves your phone only when you ask for a Lightroom preset or a Fujifilm recipe: the look's photo, resized to 1536 pixels wide, is then sent to our server and to OpenAI to write the settings. Duper asks before it sends the first one. We do not browse, scan, or upload your camera roll.

A device identifier. On first launch the app generates a random identifier and stores it on your device. It is sent when you ask for a Lightroom preset or a Fujifilm recipe, and it is your subscriber id for purchases, so we can check whether Super Duper is active. It is not your Android advertising ID, not your Google account, and not a hardware serial. It is not linked to your name or email, and deleting the app or clearing its data destroys it permanently.

Looks you share as a link. When you share a look as a link, its name, settings and cover image are uploaded so the link can show them to whoever opens it. It is not tied to your device identifier.

Links you paste. When you paste or share a link to a public post, our server looks up the post to find its image or video, which your phone then downloads and reads. The lookup is kept for a day so the next one is quick. It is not tied to your device identifier.

What we do not collect

• No account. Duper has no sign up, no password, and no email address on file unless you write to us.
• No tracking. There is no Firebase, no advertising SDK, and no third party tracker in the app. The one analytics tool, PostHog, records only how the Super Duper screen is used: which feature opened it, which plan was picked, and whether a purchase or restore went through, against your device identifier. It never sees your photos.
• No ads, and no sale or sharing of personal information for advertising.
• No location, no contacts, no microphone.

What stays on your phone

Your edit history, your saved presets, your shelf, and every photo or video you export stay in the app's own storage on your device. They are not uploaded and we cannot see them. The camera viewfinder renders your look live on the device, and those frames never leave your phone.

How long we keep things

• Your photo: not kept. When you ask for a preset or recipe, the photo is held in memory long enough to analyse and is not written to storage. What we cache is the resulting settings, stored against a fingerprint of the image for 30 days, so asking for the same look twice is instant.
• Free save counter: the times of your saves in the last week, kept on your device only, in its keychain. It survives reinstalling the app, so the weekly allowance cannot be reset that way, and it is never sent to us.
• Subscription state: a flag against your device identifier, expiring when the subscription does, or kept for as long as the app exists for a lifetime purchase.
• Shared links: the look's name, settings and cover image, kept for a year so the link keeps working.
• Link lookups: the public post's address and where its media lives, kept for a day.

Who else sees your data

We use a small number of processors, and only for the purpose named:

• OpenAI reads the look's photo when you ask for a Lightroom preset or a Fujifilm recipe, and returns the settings. The image is sent to their API for that request only. Under OpenAI's API terms, data sent through the API is not used to train their models.
• Cloudflare hosts our server and the caches described above.
• RevenueCat processes subscription and purchase receipts, and receives your device identifier as the subscriber id.
• PostHog receives the Super Duper screen events described above, against your device identifier.
• Apple App Store and Google Play distribute the app, handle every purchase, and power the in-app review prompt. We never see your payment details.

We do not sell your data, and we share it with nobody else except where the law requires it.

Permissions the app asks for

• Photos and videos. So the in-app picker can show your library and you can choose what to edit. You can grant access to selected items only, and Duper works normally that way.
• Camera. Only for the live viewfinder that previews a look while you shoot. It is requested the first time you open the camera tab, never before, and the app works without it.
• Notifications. Only if you start a free trial, and only to remind you two days before it ends. Say no and there is simply no reminder.
• Internet. To look up shared links, and to read a Lightroom preset or Fujifilm recipe when you ask for one.

Children

Duper is not directed at children under 13, and we do not knowingly collect information from them.

Your choices

Because there is no account, most of your data is under your direct control. Deleting the app (or, on Android, clearing its data) removes your device identifier, your history, and every saved edit. To ask about anything held on our side, including deletion of a device identifier, write to hello@getduper.com and we will action it within 30 days.

Changes

If this policy changes in a way that affects what we collect or who sees it, we will update the date at the top of this page and, where the change is significant, say so in the app.

Questions about this policy? hello@getduper.com