Privacy policy

Effective Date: October 25, 2026 Last Updated: October 25, 2026

This Privacy Policy ("Policy") is issued by Ezymind Nexus, Inc., a corporation incorporated under the laws of the State of Delaware, which operates primarily under the brand name Dusq and may operate under such other brand or trade names as it may adopt from time to time ("Company," "we," "our," or "us"). The Company is a wholly-owned subsidiary of Ezymind Healthcare Private Limited, incorporated under the Companies Act, 2013, India.

This Policy describes how we collect, use, store, disclose, and protect personal information when you use our mobile application, hardware device, and related services (collectively, the "Services"). Please read this Policy carefully. By creating an account or using the Services, you agree to the practices described herein. If you do not agree, please discontinue use immediately.

1. Definitions

"Biometric Information" means any personal information based on an individual's biometric identifier used to identify that individual, as defined under applicable state biometric privacy statutes including BIPA, CUBI, and analogous laws.

"Personal Information" means any information that identifies, relates to, describes, or is reasonably capable of being associated with a particular consumer or household, interpreted consistently with applicable law.

"Sensitive Personal Information" means a subset of Personal Information including, without limitation, biometric data, health and medical information, precise geolocation data, and account access credentials.

"Services" means the DUSQ mobile app for iOS and Android, available on the Apple App Store and Google Play; the DUSQ wearable; the DUSQ charging case; their firmware and software; our website at www.dusq.com; and all related features offered by the Company.

"You" or "User" means any individual who accesses, downloads, registers for, or otherwise uses the Services.

2. Information We Collect

2.1 Information You Provide Directly

Registration and Account Data: your name; your mobile phone number and the one-time codes we text you to sign in, or your Google or Apple sign-in, which may give us your email address. We do not use passwords.
Profile and Sleep Schedule: your date of birth, sex assigned at birth, height, weight and occupation, the days you do not work, and the times you usually wind down, go to bed and wake up on work days and other days. We ask for these when you set up the app.
Things you tell us in the app: daily check-in answers, sleep coach intake answers and messages, support chats, and photos you attach. Placement photos of the side of your head, if you choose the photo check (Section 5).
Communications and Support Data: information provided when contacting our support team, submitting feedback, or otherwise communicating with us.
Transaction and Billing Data: billing details and payment method information processed through our PCI-DSS-compliant third-party payment processor. We do not store full payment card numbers on our own systems.
User-Generated Content: any content, preferences, or inputs you voluntarily submit through the Services.

2.2 Information Collected Automatically

Device and Technical Data: details of your phone (model, operating system and version, app version, and an ID created when you install the app); your push notification token; details of your DUSQ and charging case (serial numbers, Bluetooth identifiers, model, firmware version, battery level, and connection, sync and firmware update events); crash reports and diagnostic information; and device logs you choose to send us from the app.
Usage and Interaction Data: features accessed, navigation patterns, session duration, timestamps, and other interaction data generated through your use of the Services.
Network and Connectivity Data: IP address, network type, connection quality, and general geographic region (country or state level only, not precise location).
Device Sensor and Measurement Data: data generated by or derived from the operation of Dusq hardware devices, including physiological and environmental measurements recorded during use.
Charging Case Readings: your DUSQ charging case measures the light level (in lux), the temperature and how loud the room is (in decibels), about once a minute. The case measures loudness only. It never records, stores or sends sound.
Permissions: the app asks for Bluetooth (to connect to your DUSQ and charging case), the camera (for placement photos and photos you send in chats), your photos (to choose a profile photo or attach photos in chats) and notifications. On Android 11 and older, Android requires location permission to scan for Bluetooth devices. DUSQ uses it only for that and does not collect your location.

2.3 Biometric and Health-Related Information

In providing the Services, we may collect, process, or derive information that constitutes biometric identifiers, biometric information, or health-related data as defined under applicable law. Such information is processed solely for the purposes described in this Policy and is subject to the additional protections set out in Section 5.

Health and sleep data from your DUSQ. While you wear it, your DUSQ records optical heart signals (PPG) and movement. From these we work out your heart rate, heart rate variability, breathing rate and movement during sleep, and estimates of how you slept: sleep stages (light, deep and REM), how long you took to fall asleep, time awake during the night, how continuous your sleep was, and surges (short rises in your body's arousal during sleep). We also keep a record of each session your DUSQ runs, including its type, length and stimulation intensity. These are wellness estimates, not medical measurements.

2.4 Information from Third Parties

Mobile Platform Providers: limited transactional data from Apple App Store or Google Play in connection with your download or purchase of the application.
Analytics Partners: aggregated or pseudonymized usage metrics from third-party analytics services engaged by the Company.
Advertising and Attribution Partners: limited interaction signals used to measure marketing effectiveness, subject to your consent where required by applicable law.
Health Platforms: the DUSQ app does not read from or write to Apple Health, Health Connect or Google Fit. If we add this, we will update this Policy and ask for your permission in the app first.

2.5 Information We Derive

We work out scores and insights from the information above, such as your Sleep Score, Sleep Readiness, Surges and your trends over time, and suggestions such as which session to try. These are part of your Personal Information. We protect them in the same way as the data they come from, and your rights in Section 11 apply to them.

3. How We Use Personal Information

3.1 Provision and Operation of the Services

To create, authenticate, maintain, and administer your account.
To deliver the features of the Services, including personalized insights, reports, scores, and recommendations derived from your usage and device data.
To process and fulfill orders, subscriptions, and other transactions.
To facilitate customer support, respond to inquiries, and resolve disputes.
To pair and connect your DUSQ and charging case, sync their data to your account, run your sessions at the settings you choose, and send firmware updates to your DUSQ.

3.2 Research, Development, and Improvement

To conduct internal analytics, quality assurance, and product testing.
To develop, refine, and validate our proprietary algorithms, computational models, and Service features.
To identify usage trends and improve the overall performance and reliability of the Services.

3.3 Communications

To deliver transactional messages including verification codes, authentication tokens, order confirmations, and service notices required to operate the Services.
To send product updates, feature announcements, and marketing communications where you have not opted out of such communications.

If you allow notifications, the app sends push notifications about your sessions and bedtime, your nights, your DUSQ (for example, its battery) and replies from your sleep coach. Google Firebase Cloud Messaging and the Apple Push Notification service deliver them. Some notifications can show sleep information on your lock screen. You can hide previews in your phone's settings. You can turn off all DUSQ notifications in the app (Profile & Settings, then Notifications, then Mute) or in your phone's settings.

3.4 Safety, Fraud Prevention, and Legal Compliance

To verify identity and prevent unauthorized account access.
To detect, investigate, and prevent fraudulent transactions, abuse, and violations of our Terms of Service or applicable law.
To comply with applicable laws, regulations, court orders, and valid governmental requests.
To enforce our contractual rights and protect the rights, property, or safety of the Company, our users, and the public.

3.5 Aggregated and De-Identified Data

We may aggregate or de-identify Personal Information such that it can no longer reasonably be associated with an identifiable individual. This includes data collected through the Device and Services, such as sleep patterns, sensor readings, and wellness metrics. De-identified or aggregated data derived from your use of the Device and Services may be used internally to improve our proprietary algorithms, train machine learning models, develop new features, and conduct internal research. Before being used for these purposes, data is de-identified such that it cannot reasonably be used to identify you individually. This de-identified data is not shared with or sold to third parties.

3.6 Charging Case Readings

We use charging case readings only to provide and improve the parts of the Services that relate your room to your sleep. We do not use them for advertising or marketing, and we do not use them for any purpose unrelated to the Services.

4. Legal Bases for Processing

Where required by applicable law, our processing of Personal Information is grounded in one or more of the following bases:

Performance of a Contract: processing necessary to provide the Services you have requested or to perform our obligations under our Terms of Service.
Legitimate Interests: processing necessary for our legitimate business interests, including improving and securing the Services and preventing fraud, where such interests are not overridden by your rights and freedoms.
Consent: where we rely on your consent to process Sensitive Personal Information or biometric data, or to send you marketing communications. You may withdraw consent at any time by emailing info@dusq.com with the subject "Withdraw consent"; withdrawal does not affect the lawfulness of prior processing.
Legal Obligation: processing necessary to comply with a legal obligation applicable to the Company.

5. Biometric and Sensitive Health Information

5.1 Statutory Notice and Consent

The Services involve the collection of information that may constitute biometric identifiers or biometric information within the meaning of the Illinois Biometric Information Privacy Act (740 ILCS 14/10), the Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code sec. 503.001), the Washington My Health MY Data Act, and analogous statutes in other jurisdictions. This notice is provided in satisfaction of applicable statutory disclosure obligations.

By accepting this Policy and using the Dusq hardware device or associated application features, and where separately required by applicable biometric privacy law, you expressly consent to the collection, storage, processing, and use of biometric and health-related information as described in this Policy.

5.2 Prohibited Uses and Non-Disclosure

We will not sell, lease, trade, or otherwise profit from your Biometric Information. We will not disclose it to any third party except: (a) as required by applicable law or valid legal process; (b) to service providers acting on our behalf under contractual restrictions no less protective than those in this Policy; or (c) with your prior written consent.

5.3 Retention and Destruction

Biometric and health-related information is retained only for as long as necessary to fulfill the purpose for which it was collected, or as required by law. Upon the earlier of: (a) satisfaction of the initial purpose of collection; (b) three (3) years from your last interaction with the Services; or (c) a valid deletion request, we will permanently destroy or irreversibly anonymize such information, unless continued retention is required by applicable law or regulation.

5.4 Security Standard

We store, transmit, and protect Biometric Information using a standard of care equal to or greater than the standard we apply to other confidential and commercially sensitive information we hold.

6. SMS Communications

When you provide your mobile phone number to Dusq during account signup, login, or other authentication flows on the Dusq mobile application or website, you consent to receive SMS messages from us for account authentication purposes. These messages contain one-time passcodes (OTPs) used to verify your identity.

6.1 What We Collect

Your mobile phone number, the timestamps of SMS messages sent to you, and the delivery status returned by our SMS service providers.

6.2 How We Use It

Phone numbers are used solely for account authentication and operational notifications related to your Dusq account. We do not use your phone number to send marketing or promotional content.

6.3 Sharing

We do not sell or share your phone number with third parties for marketing purposes. Your phone number is shared with our SMS service providers, namely Twilio, Inc. (United States) and SMSCountry Networks Pvt. Ltd. (India), strictly for the purpose of delivering authentication messages, and only to the extent necessary for that delivery.

6.4 Message Frequency

SMS messages are sent only in response to authentication events you initiate (such as logging in or requesting a one-time passcode). We do not send unsolicited SMS messages.

6.5 Opt Out

You may opt out of receiving SMS messages at any time by replying STOP to any message. Opting out will prevent you from completing SMS-based authentication and may affect your ability to log in.

6.6 Help

Reply HELP to any SMS message for assistance, or contact us at info@dusq.com.

6.7 Message and Data Rates

Standard message and data rates may apply per your wireless carrier. Dusq is not responsible for charges levied by your carrier for receiving SMS messages.

6.8 Marketing and Promotional Communications

Where you have consented, we may send promotional communications by email or other electronic means. You may opt out at any time by following the unsubscribe instructions in any such message or by contacting us at info@dusq.com.

7. Disclosure of Personal Information

We do not sell your Personal Information. We do not share Personal Information for cross-context behavioral advertising. We may disclose Personal Information in the following limited circumstances:

7.1 Service Providers

We engage third-party vendors and contractors to perform functions on our behalf, including cloud hosting, analytics, payment processing, customer support, and SMS delivery. Such parties access Personal Information only to the extent necessary for their designated functions and are bound by contractual data protection obligations.

7.2 Corporate Affiliates

We may share Personal Information with our parent entity, Ezymind Healthcare Private Limited, and with other entities under common control, for legitimate operational, administrative, or product development purposes, subject to data protection obligations consistent with this Policy.

7.3 Business Transfers

In connection with a merger, acquisition, restructuring, or sale of assets, Personal Information may be transferred to the relevant successor entity. We will require any successor to protect the Personal Information it receives at least as well as this Policy does. Where practicable, we will tell you before your Personal Information is transferred. We will provide advance notice before Personal Information becomes subject to a materially different privacy policy.

7.4 Legal Process and Protection of Rights

We may disclose Personal Information where we believe in good faith that disclosure is required or permitted in order to: (a) comply with applicable law, regulation, or enforceable governmental request; (b) respond to lawful legal process; (c) enforce this Policy or our Terms of Service; or (d) protect the rights, property, or safety of the Company, our users, or the public.

7.5 With Your Consent

We may share Personal Information with third parties with your prior, express, and informed consent.

8. Data Retention

We retain Personal Information for no longer than is necessary to fulfill the purposes for which it was collected, to provide the Services, or as required by applicable legal, regulatory, or contractual obligations. Factors considered in determining retention periods include the nature and sensitivity of the data, applicable statutory requirements, the existence of pending legal proceedings, and the need to maintain records for dispute resolution and fraud prevention.

You can delete your account in the app (Profile & Settings, then Delete Account), on the web at https://dusq.com/pages/delete-account, or by emailing info@dusq.com with the subject "Delete my account". When you do, we delete your account, profile, questionnaire answers, check-ins and the files you uploaded right away, and we erase the rest of your data (your session history, insights, chats, coach notes and processed data) within 30 days. You don't need to ask separately. Copies held in our backups are deleted as those backups expire. We keep only what the law requires, such as purchase records and reports of a safety problem with the device.

9. Security

We protect your data with safeguards suited to health data, including encryption in transit between the app and our servers, role-based access for staff, two-factor sign-in for our admin tools, and logging of staff access to customer records. No system is completely secure. If a breach affects your data, we will notify you and the authorities as the law requires, including under the FTC Health Breach Notification Rule.

In the event of a breach that triggers notification obligations under applicable law, we will notify affected individuals and relevant regulatory authorities within the required timeframes. Users are responsible for maintaining the confidentiality of their account credentials and should notify us promptly of any suspected unauthorized access.

10. Children's Privacy

The Services are not directed to individuals under the age of eighteen (18). We do not knowingly collect Personal Information from minors. If we learn that we have inadvertently collected information from a minor, we will take prompt steps to delete it. Parents or guardians who believe a minor has submitted information to us should contact info@dusq.com immediately.

11. Your Privacy Rights

Subject to applicable law and certain exceptions, you may have the following rights with respect to your Personal Information. To exercise any right, submit a request using the contact information in Section 22.

Right to Know and Access: request disclosure of the categories and specific pieces of Personal Information we hold, the sources from which it was collected, the purposes for which it is used, and the categories of third parties with whom it has been shared.
Right to Correction: request correction of inaccurate Personal Information we maintain about you.
Right to Deletion: request deletion of Personal Information we have collected, subject to the exceptions in Section 8. You can delete your account and data in the app (Profile & Settings, then Delete Account), on the web without the app at https://dusq.com/pages/delete-account, or by emailing info@dusq.com with the subject "Delete my account".
Right to Portability: receive a copy of certain Personal Information in a structured, machine-readable format.
Right to Opt-Out of Sale or Sharing: we do not sell Personal Information or share it for cross-context behavioral advertising.
Right to Restrict Processing: request restriction of processing in circumstances permitted by applicable law.
Right to Non-Discrimination: we will not discriminate against you for exercising any legally protected privacy right.

You do not need a DUSQ account to make a request. Email info@dusq.com with the subject "Privacy request" (or "Delete my account" for deletion). We will confirm that we received your request within 10 business days and explain how we will verify your identity. We will respond within 45 calendar days. If we need more time, we will tell you within those 45 days, and we may take up to 45 more days. You may designate an authorized agent to make a request for you, subject to verification of the agent's authority. If we decline a request, we will explain why in writing and tell you how to appeal (email info@dusq.com with the subject "Appeal").

12. Additional Disclosures for California Residents (CCPA/CPRA)

This Section supplements the Policy and applies solely to California residents pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (Cal. Civ. Code sec. 1798.100 et seq.).

12.1 Categories of Personal Information Collected

In the preceding twelve (12) months, we have collected Personal Information falling within the following CCPA categories: Identifiers; Personal information under Cal. Civ. Code sec. 1798.80(e); Biometric information; Health and medical information; Internet or other electronic network activity information; General geolocation data; and Inferences drawn from the foregoing.

12.2 Sensitive Personal Information

We collect sensitive personal information under the CPRA, including biometric and health-related data, solely to perform the Services and for internal development, security, and fraud prevention. We do not use or disclose sensitive personal information for purposes that would require a right to limit use under Cal. Civ. Code sec. 1798.121.

12.3 No Sale or Sharing for Advertising

We do not sell Personal Information. We do not share Personal Information for cross-context behavioral advertising as defined under Cal. Civ. Code sec. 1798.140(ah).

12.4 Shine the Light (Cal. Civ. Code sec. 1798.83)

We do not share Personal Information with third parties for their own direct marketing purposes.

12.5 Authorized Agents

California residents may designate an authorized agent to submit CCPA/CPRA requests on their behalf. We require written authorization signed by the consumer and may require independent identity verification, unless the agent holds power of attorney under California Probate Code sections 4000 to 4465.

12.6 Biometric Data Requests

For CCPA/CPRA requests relating to biometric data, please include the subject line "Privacy request" in your communication to info@dusq.com.

13. Additional Disclosures for Other State Residents

Residents of states with comprehensive privacy legislation, including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas, Oregon, Montana, Iowa, Indiana, Tennessee, and New Hampshire, may have rights under applicable law including the right to access, correct, delete, and obtain a copy of their Personal Information; opt out of profiling for decisions producing legal or similarly significant effects; and appeal our response to a rights request.

To exercise available rights, contact us as described in Section 22. We will respond in accordance with applicable state law. Where we decline a request, we will provide a written explanation and, where required, information on how to appeal to the relevant state Attorney General or supervisory authority.

14. Cross-Border Data Transfers

The Company is incorporated and operated in the United States, and Personal Information collected through the Services is stored and processed in the United States. As a wholly-owned subsidiary of Ezymind Healthcare Private Limited (India), Personal Information may be accessed by or transferred to personnel or systems in India in connection with operational, research and development, and technical functions. Such transfers are conducted subject to contractual data protection obligations designed to ensure Personal Information receives protection consistent with applicable US privacy law.

By using the Services, you acknowledge that your Personal Information may be transferred to and processed in the United States and other countries, and you consent to such transfer in accordance with this Policy.

15. Third-Party Links and Services

The Services may contain links to third-party websites, applications, or services not owned or controlled by the Company. This Policy does not apply to such services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access through the Services.

16. Do Not Track Signals

We honor the Global Privacy Control (GPC) opt-out preference signal. If you visit our website with GPC enabled, we will treat this as a request to opt out of the sale or sharing of your personal information for the device and browser you use to visit the site. Where we are able to associate the device with a user account, we will apply the opt-out to that account as well. To learn more about GPC, visit https://globalprivacycontrol.org. Our Services do not otherwise respond to Do Not Track (DNT) signals, as no uniform technical standard for doing so has been adopted across the industry.

17. Cookies and Tracking Technologies

Our website and Services use cookies and similar tracking technologies, including pixels, web beacons, and local storage, to operate and improve the Services, remember your preferences, and support analytics and advertising functions. Cookies are small data files placed on your device when you visit our website.

17.1 Types of Cookies We Use

Strictly necessary cookies: required for the website and store to function, including session management, authentication, and shopping cart functionality. These cannot be disabled. Analytics cookies: help us understand how visitors interact with our website, including which pages are visited and how long users stay. Advertising and targeting cookies: used to deliver advertisements relevant to your interests and to measure the effectiveness of our marketing campaigns, including through third-party platforms such as Meta and Google.

17.2 Your Cookie Choices

You may adjust your browser settings to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the Services. You may also opt out of interest-based advertising through the Digital Advertising Alliance at www.aboutads.info or the Network Advertising Initiative at www.networkadvertising.org.

18. Shopify and Our Online Store

Our online store at www.dusq.com is hosted by Shopify Inc. Shopify collects and processes personal information about your access to and use of the store in order to provide and improve the Services. Information you submit through the store will be transmitted to and processed by Shopify, as well as third parties that may be located in countries other than where you reside.

In addition, Shopify may use data from your interactions with our store, combined with data from other Shopify merchants, to provide Shopify-enhanced features. In these circumstances, Shopify acts as an independent data controller and is responsible for responding to requests you make regarding Shopify’s processing of your data. To learn more about how Shopify uses your personal information and to exercise rights in relation to Shopify’s processing, visit the Shopify Consumer Privacy Policy at www.shopify.com/legal/privacy and the Shopify Privacy Portal at privacy.shopify.com.

19. Marketing and Targeted Advertising

We use your personal information for marketing and promotional purposes, including to send marketing communications by email and to show you online advertisements on third-party platforms such as Meta (Facebook and Instagram) and Google, including based on items you have previously viewed or purchased and other activity on our Services. This may involve sharing certain information, such as email addresses or device identifiers, with those platforms in hashed or pseudonymized form to facilitate audience matching.

Depending on where you reside, you may have the right to opt out of the sharing of your personal information for targeted advertising purposes. To exercise this right, contact us at info@dusq.com or use the opt-out mechanism on our website where available. You may also opt out through your browser’s Global Privacy Control signal, as described in Section 16.

We may send promotional communications by email where you have consented or where permitted by applicable law. You may opt out of promotional emails at any time by using the unsubscribe link in any such message or by contacting us at info@dusq.com. Opting out of promotional emails will not affect transactional or account-related communications.

20. Complaints

If you have concerns about how we handle your personal information, please contact us in the first instance using the details in Section 22. We will investigate and respond to your complaint in a timely manner. If you are not satisfied with our response, depending on where you live, you may have the right to lodge a complaint with your applicable state Attorney General’s office or other relevant supervisory authority.

21. Changes to This Policy

We may update this Policy. When we make a material change, we will update the date at the top and tell you at least 30 days before the change takes effect, by email if we have your address or by text message otherwise, and we will ask for your consent again where the law requires. Past versions are listed in the version history at the end of this Policy. If you don't agree to a change, you can delete your account as described in Section 8.

22. Contact Information

For questions, concerns, or requests regarding this Policy or the exercise of any rights described herein, please contact us at:

Ezymind Nexus, Inc., operating as DUSQ
Attn: Privacy
131 Continental Dr, Suite 305, Newark, DE 19713, USA
Email: info@dusq.com

Website: www.dusq.com

To help us act quickly, please use one of these subject lines: "Delete my account", "Withdraw consent", "Privacy request" (to see, copy or correct your data), "Appeal" (if we refused a request), "Safety" (a problem with your DUSQ), or "Grievance" (users in India). If you believe we have not adequately addressed your privacy concern, you may have the right to lodge a complaint with the applicable state Attorney General's office or relevant supervisory authority in your jurisdiction.

Version history

October 25, 2026: Added the consents we ask for in the app, a fuller list of the data we collect and how long we keep it, and clearer sections on research, security, deletion and policy changes.
April 1, 2026: First version.

This Policy is issued by Ezymind Nexus, Inc. (operating as Dusq), a Delaware corporation (registered address: 131 Continental Dr, Suite 305, Newark, DE 19713), wholly-owned subsidiary of Ezymind Healthcare Private Limited (India). Effective Date: October 25, 2026.