On Duncit
- Turn on two-factor authentication in Settings → Security.
- Review your visibility — choose who can see your profile and when.
- Don't put your last name, school, or workplace in your bio.
- Use the in-app camera; uploaded photos can carry GPS metadata.
Everywhere else
- Use a password manager. Long, unique passwords for every site.
- Enable 2FA wherever it's offered.
- Be suspicious of unsolicited links, even from people you know.
- Review app permissions on your phone monthly.
If you're being harassed
Document everything (screenshots), block the person, report to Duncit, and reach out to these resources. You're not alone.