Your privacy: consent, AI controls, Terms and Privacy

Your money records say a lot about you, and Zimbabwe's data law treats them as sensitive information. This release makes Dura ask for your written agreement before it stores them, gives you your own switch for AI, tightens how Dura handles your data behind the scenes, and publishes the Terms of Use and the Privacy Notice for anyone to read.

What's new

• The agreement screen. The next time you open Dura you see "Your money records are sensitive", with what you are agreeing to in plain words. Nothing is ticked for you, and "Agree and continue" stays off until you tick the first box. We email you a copy.
• AI is your choice. The coach and receipt reading are a separate, optional part of the same screen. AI stays off until you say yes.
• Settings, then "Your agreement". See the version you agreed to and download a copy, turn your AI on or off, see who turned AI on in each of your households, or withdraw your agreement.
• Clear AI rules. The coach, and reading a receipt you upload, need your own yes. The weekly check-in and emailed receipts run for the whole household when any one current member has said yes, and everyone can see who did. Your private pocket uses AI only on your own yes.
• AI that doesn't train on your data. Dura sends AI requests through OpenRouter with the setting that only uses model providers that don't use your requests to train their models. Your email address is never sent.
• Notes and amounts out of our logs. The notes and amounts you enter, and your questions to the coach, no longer appear in Dura's server logs.
• Deleting a household deletes its files. Receipt photos and scans go with the household's envelopes and entries.
• Safer retries for apps and agents. The saved answers that stop an agent recording a spend twice are now encrypted, and are deleted after they expire or when the household is deleted.
• Terms of Use and Privacy Notice. Version 1.0 of each is public at /terms and /privacy, linked from the site footer, the sign-up form, Settings and every email.

How to use it

1. Open Dura. Read "Your money records are sensitive" and tick the box to agree.
2. If you want the coach and receipt reading, also tick the box under "Optional: the AI coach and receipt reading". Leave it empty to keep AI off.
3. Tap "Agree and continue". "Not now (sign out)" signs you out instead.
4. To change your mind later, open Settings and tap "Your agreement". Use "Turn AI on" or "Turn AI off".
5. To leave Dura, take your records first with the CSV or JSON buttons, then tick the box and tap "Withdraw my agreement".

Good to know

• With your AI off, the coach shows "Switched off: AI isn't turned on for you." You can still add receipt lines by hand.
• When AI is on, Dura sends your household's first names, envelopes, balances and recent entries to the AI model, which may process them outside Zimbabwe and South Africa, including in the United States. Some providers may keep a request for a limited time to detect abuse or meet legal duties, and then delete it. The Privacy Notice has the details.
• Don't write passwords, PINs, card or account numbers or ID numbers in notes or coach questions. Dura does not need them.
• Joining with a code into a household where AI is on shows a confirm step first, and an invitation shows the household's AI status.
• The weekly email marks the check-in with "AI wrote this" and says who turned AI on.
• Apps and agents using your token stop working until you have agreed in the browser.
• Withdrawing signs you out, and your account is closed within 30 days. Records you made in shared households stay with those households under your first name until they are deleted.
• Your records are stored on servers in Finland. We don't sell them or use them for ads.

Go deeper

• Terms of Use
• Privacy Notice
• Receipts, IOUs and counting cash: getting good answers from the coach once AI is on.
• Connect your AI agent to Dura: tokens and revoking them.

Frequently asked questions

Do I have to turn on AI to use Dura?

No. AI is optional and stays off until you say yes. Without it you can still cash in, spend, move cash, settle IOUs, count cash and attach receipt photos to spends. The coach and receipt reading need your own yes.

Why does the weekly check-in run when I said no to AI?

The weekly check-in and emailed receipts run for the whole household when any one current member has said yes. Settings shows who turned it on. Your own coach chats and receipts you upload still need your own yes.