Privacy Policy

Delulu is operated by Nov Square ("we," "us"). Our registered jurisdiction is [Jurisdiction - to be finalized] - this policy will be updated once that's settled.

We only collect what the app actually uses:

• Phone number - used to sign you in via SMS verification (Firebase Authentication). We don't collect an email address.
• Profile information - username, display name, bio, avatar photo, and the interests you pick. Birth date and gender are optional and can be skipped.
• Content - the photos, captions, and comments you post.
• Activity - your reactions (Solulu/Delulu votes), follows, blocks, and any reports you file.
• Device & technical information - a per-device session identifier (so you can see and sign out individual "active logins" in Settings), and standard request/log data (like IP address) generated by using the service.

We don't use advertising or analytics services, and we don't buy, sell, or import your contacts.

• To create and operate your account and authenticate you.
• To run the feed, voting, comments, and follow graph.
• To personalize what you're shown, based on your interests and activity.
• To review reports, enforce our Community Guidelines, and prevent abuse.
• To respond to support requests you send us.

Profile photos and post images are uploaded directly to our cloud storage provider (Firebase Storage) and are served publicly by URL once posted - that's how the app displays them in the feed, on profiles, and in shared links. Comments and captions are stored the same way as any other post data.

Your username, display name, avatar, bio, posts, and your Solulu/Delulu vote tallies are visible to anyone - including people who aren't signed in, via a shared post or profile link. Your phone number is never made public. Comments are visible to anyone viewing the post they're on.

We use infrastructure providers to run the service - principally Firebase / Google Cloud for authentication, file storage, and hosting. These providers process data on our behalf and don't use it for their own purposes. We don't sell your information to anyone.

Requesting account deletion (Settings → Danger zone) signs you out everywhere immediately and starts a 30-day grace period. Signing back in during that window automatically cancels the deletion. After 30 days, your profile is anonymized - your name, phone number, bio, avatar, and interests are cleared and you appear as "Deleted user" - while your posts, comments, and votes remain attached to that anonymized profile so other people's threads and post history stay intact.

We use industry-standard practices (like per-device session tracking and server-side authorization checks) to protect your account, but no service can guarantee absolute security. If you think your account was compromised, use "This wasn't me - sign out everywhere" in Settings, which revokes every device's credentials at once.

Delulu requires users to be at least 13 years old. When a birth date is provided, our systems reject one that would make you younger than that. Birth date is currently optional and self-reported - we don't independently verify age.

Questions about this policy, or a request to access or delete your data? Reach us at team@indelulu.club or through the Help Center's contact form.