Privacy Policy

Controller and contact

Delulu is the controller for personal data processed through the app. For privacy questions, data requests, or account deletion help, email support@deelulu.app.

Data we collect

We may process account details, profile details, settings, posts, comments, reactions, aura or credit activity, feedback, support messages, saved reads, AI conversations, analyses, replies, device or install identifiers, app version, platform, and basic usage data.

If you sign in, your app data can sync through Supabase so it stays available across devices. If you make purchases, billing events are handled by Google Play, Stripe, RevenueCat, or similar payment providers.

AI and screenshots

Text you send for analyses, replies, follow-ups, chat, or screenshot extraction may be sent to OpenAI or another AI provider to generate results. AI output may be inaccurate, incomplete, or inappropriate.

Chat screenshots are processed to extract message text for app features. They are not stored as image files by the app backend unless a feature clearly says otherwise.

Why we use data

We use data to provide the app, authenticate users, sync accounts, generate AI responses, process purchases, show social features, prevent abuse, moderate content, provide support, debug issues, improve safety, and improve AI response quality.

The platform operator may review stored posts, comments, feedback, and AI conversations for safety, moderation, support, abuse prevention, and service quality.

Legal bases

Where GDPR applies, we process data to perform the service you request, based on your consent where required, to comply with legal obligations, and for legitimate interests such as security, moderation, fraud prevention, support, analytics, and improving the app.

Sharing and processors

We share data only with service providers needed to run the app, such as Supabase, OpenAI, hosting providers, analytics providers, Firebase, Stripe, RevenueCat, and Google Play. These providers process data for infrastructure, AI generation, authentication, storage, notifications, analytics, payments, support, and security.

Retention and deletion

We keep personal data while your account is active or as long as needed for the feature, support, safety, fraud prevention, legal compliance, accounting, or dispute resolution. You can delete your account from inside the app or through the account deletion page.

Some limited records may be retained when required for legal, security, billing, fraud-prevention, backup, or compliance reasons.

Your rights

Where GDPR applies, you may request access, correction, deletion, restriction, portability, or objection to processing of your personal data. Where processing is based on consent, you may withdraw consent.

You also have the right to lodge a complaint with your local data protection authority.