Privacy Policy

Most apps study you.
We refuse.
We help you study yourself.

Most apps extract facts from your messages, build a permanent record of who you are, and remember everything across every session forever. We don't read your messages back to figure out who you are. We don't infer your moods, beliefs, health, or relationships from your conversations. We don't analyze you.

Yes, you have a profile in the app where you fill in a name (any), birth date, pronouns, and a few preferences. That's information you've explicitly given us, used to generate your charts and personalize the experience. By "we don't build profiles" we mean the inferential, behavioral kind apps quietly run on you. The kind that follows you across the internet. We don't do that. Ever.

The Oracle answers your question and then it's gone within ~4 hours of your last message. (We're working to delete it as soon as you're done with us.) The next time you open Oracle there's no record of you. Just you.

We're not different because we promise to be careful with your data. We're different because we built the app not to have it in the first place.

Oracle, frankly, does not know her.

The boring legal version follows below.

What We Don't Do

We don't:

• Extract or infer attributes from your messages — not your mood, not your relationships, not your beliefs, not your health, not your sexuality, nothing.
• Keep your conversations after the session ends.
• Feed your conversations into AI training. Not OpenAI's. Not ours. Not anyone else's.
• Sell, rent, or share your data with advertisers, data brokers, insurers, or employers.
• Track you across other websites or apps.
• Use ad SDKs, third-party tracking pixels, or any cookie beyond the one that keeps you signed in.
• Have humans at delulu read your conversations — except in the narrow case where one is reported for safety review. (Automated content-safety screening checks your messages for crisis content; no human reviews these unless flagged.)
• Use your sensitive personal information for any purpose other than providing the service you asked for.
• Build behavioral or advertising profiles of you.
• Send you marketing email, drip campaigns, or "we miss you" nudges. You get one horoscope a day and a link to stop it.

Who We Are (Data Controller)

delulu drip is operated by delulu global LLC.

• 📧 Email: support@deluludrip.com
• 📍 Registered Agent Address: 522 W Riverside Ave, Ste N, Spokane, WA 99201
• 🌐 Website: deluludrip.com
• ✨ App: app.deluludrip.com, plus iOS and Android

Wherever you use delulu drip, this policy applies. "The App" below means all of it: the iOS app, the Android app, and delulu drip in your browser at app.deluludrip.com. Your account and your data are the same across every one of them.

For privacy-related inquiries or data rights requests, use the contact information above.

Notice at Collection (California Residents)

What we collect:

• Identifiers: Email address, name, unique user ID
• Sensitive Personal Information: Precise birth location (latitude/longitude), chat conversations
• Personal Information: Birth date and time, generated charts, usage data
• Commercial Information: Subscription status and purchase history
• Electronic Network Activity: Which platforms you use us on (web, iOS, Android), whether you've allowed notifications on each, your timezone, and whether an email we sent you arrived

Why we collect it: To provide entertainment services (personalized astrology, natal charts, horoscopes, mystical Oracle), to deliver your daily horoscope once a day through a channel that works for you, and to process subscriptions.

How long we keep it:

• Account data: Until you delete your account
• Chat content: Deleted within ~4 hours of the last message in a session
• Reported content: Up to 90 days after the report was filed
• Analytics: 90 days (anonymized)
• Notification settings, platforms, timezone: Until you delete your account
• Record of which days we notified you: 90 days
• Pseudonymized billing identity / anti-abuse counter: Indefinite (fraud/abuse prevention only)

Sale or sharing: We do not sell or share any category of personal information for advertising or cross-context behavioral advertising purposes.

Your California Privacy Rights:

• Do Not Sell or Share My Personal Information
• Limit the Use of My Sensitive Personal Information
• Access, Correct, or Delete My Data

Information We Collect

Birth Information

To generate natal charts and astrological content, we collect:

• Birth date and time
• Birth location (latitude/longitude/timezone)
• Optional: Name for personalization

Account Information

When you create an account using OAuth (Google or Apple Sign-In), we collect:

• Email address
• Name (as provided by OAuth provider)
• Profile photo URL (optional)
• Unique user identifier

Notification Settings

The App reports three things at launch, so your daily horoscope arrives once, in the morning, somewhere you'll actually see it:

• Which platform you're on (web, iOS, or Android)
• Whether you've allowed notifications there
• Your timezone

See "One notification a day" below for what we do with this and how to switch it off.

Usage Data

We automatically collect certain information when you use delulu drip:

• Chat conversations with the Oracle (deleted within ~4 hours of last message — see retention below)
• Generated natal charts and interpretations
• Synastry (relationship) charts
• Astrocartography readings
• Basic app analytics (which features you use, not who you are)
• Device information for compatibility (OS version, app version only)
• Crash reports (automatically deleted after 90 days)

What we DON'T collect: No cross-app tracking, no web browsing history, no advertising IDs, no contact lists, no location tracking outside of birth chart generation.

One notification a day. That's the whole relationship.

You get one horoscope a day. If you've allowed push notifications, it arrives as a push. If you haven't, or your browser can't send them (Safari on iPhone only allows push once you've added delulu drip to your home screen), it arrives as an email instead. One or the other. Never both, never more than one.

The email goes to the address on your account and holds that day's horoscope and a link back to the App. That's the only recurring email we send. No campaigns, no sequences, no "we miss you" nudges. The only other mail you'll get from us is the confirmation link when you ask us to delete your account, and a reply when you write to support.

Turning it off

Every email carries an unsubscribe link in the footer and supports one-click unsubscribe straight from your inbox. Either one works immediately, and we keep a record that you opted out so it sticks. You won't start getting email again because something on your account changed. Push notifications are separate, controlled in your device or browser settings.

Unsubscribing stops the daily horoscope. It doesn't block the account-deletion confirmation link, because that one only exists when you've asked for it.

What we keep to make this work

• Your notification settings and platforms. Which of web, iOS, and Android you use, whether notifications are allowed on each, and your timezone. Kept while your account exists.
• Which days we sent you something. Kept 90 days, so you don't get today's horoscope twice.
• Whether the mail landed. Bounces and spam complaints. If your address bounces or you mark us as spam, we stop sending to it and that's the entire use.

Your email address is never copied into our own tables. It stays in Supabase Auth, gets read at the moment an email is sent, and is not written down anywhere else. Delete your account and every record above goes with it.

Mail comes from Delulu <noreply@deluludrip.com>, replies go to support@deluludrip.com, and our postal address sits in every footer as the law requires. There are no open-tracking pixels and no click tracking in what we send you. We know the mail bounced or it didn't. What you do with it after that is yours.

Sensitive Information

Astrology requires precise birth data — date, time, location. That's sensitive information by any framework's definition (CPRA, GDPR, MHMDA). We use it for exactly one thing: calculating your charts. We don't use it to profile you. We don't use it for advertising. We don't share it with anyone except the geocoding provider that turns your birth city into coordinates and the text-generation service that helps generate your readings.

Other categories of sensitive information (health, sexuality, religion, immigration status, biometrics, financial details) — we don't request, store, or infer any of these. If you mention any of them in conversation with the Oracle, that mention disappears with the rest of the conversation in ~4 hours. We don't extract it. We don't remember it. We don't build a record of you on it.

Right to Limit Use of Sensitive Personal Information: Because we use sensitive personal information only to provide the App's services to you, no opt-out is required under CPRA §1798.121. If you want to confirm this directly, email support@deluludrip.com with subject line "Limit Use of Sensitive Personal Information." We will respond confirming that no secondary use is occurring.

Legal Basis for Processing Your Data

We process your information based on the following legal grounds:

Performance of Contract

To provide the astrology services you requested, we process:

• Birth date and time (for astrological calculations)
• Email address and account credentials (for authentication, and to send your daily horoscope when push isn't available)
• Generated natal charts and interpretations (to deliver our service)
• Notification settings, platform, and timezone (to deliver that horoscope once, at a sensible hour, on a channel that reaches you)
• Subscription and purchase records (to give you what you paid for)

Consent (Sensitive Personal Information)

With your explicit consent, we collect and process personal information you provide including:

• Precise birth geolocation: Your birth location (latitude/longitude) to calculate accurate house cusps and astrocartography
• Chat conversations: Messages you send to the mystical Oracle about relationships, life questions, and cosmic perspectives

You provide consent by creating an account and entering this information. You can withdraw consent and delete all your data at any time.

Legitimate Interest

To improve our service and prevent abuse, we process:

• Anonymized usage analytics (which features are popular)
• Crash reports for debugging (automatically deleted after 90 days)
• Security logs to detect fraud and prevent abuse

Legal Obligation

To honor your choices and comply with email law (the CAN-SPAM Act in the US, and the GDPR and ePrivacy rules on electronic messages in the EU/EEA and UK), we keep:

• A record that you unsubscribed, so we don't email you again
• A record of addresses that bounced or filed a spam complaint, so we stop sending to them

What we DON'T do: We don't sell your data. We don't build advertising profiles. We don't track you across other websites or apps. Your astrology data stays in our astrology app.

Third-Party Services We Use

We use carefully selected third-party service providers to power delulu drip's features. Under California privacy law, we must explicitly name these providers and explain what data they process:

Data Retention

Other apps remember everything forever. We don't.

Conversations end. We delete them.

Most apps keep your conversations for 30 days, indefinitely, or in some cases use them to train future models. We don't.

Within ~4 hours of your last message in a session, we permanently delete the conversation from our active databases. The Oracle has no memory of you between sessions. The next session starts cold. If you discussed something with the Oracle yesterday, it's gone — there's nothing on our servers to subpoena, leak, or repurpose later.

Two narrow exceptions: messages reported for safety review are kept up to 90 days for investigation, then deleted. Encrypted backups maintained by our infrastructure provider for disaster recovery follow their normal point-in-time recovery window.

¹ Chat content is processed by OpenAI to generate responses. Under their standard API terms, OpenAI does not use this data to train models, but may retain content for up to 30 days for abuse monitoring. See "Third-Party Services."

Legal Exceptions: We may retain data longer if required by law (valid subpoena, court order), to prevent fraud, or for child safety investigations. This basically never happens for an astrology app.

What survives account deletion (and why)

When you delete your account, we permanently and immediately drop your data from our active databases. Two narrow categories survive deletion in pseudonymized form, and only for fraud and abuse prevention:

1. A pseudonymized billing identity (one-way HMAC hashes of your email and OAuth identifiers — irreversible, can't be used to contact you or reconstruct your account). This stops people from cycling through the free tier by deleting and re-creating accounts.
2. A count of automated content-safety flags on messages you have submitted, associated with that pseudonymized billing identity. (When our automated content-safety screen flags a message you submitted, the counter increments. User reports about Oracle's output don't count toward this — only automated flags on content you yourself submitted, so the counter can't be weaponized by other users.) This stops users banned for abuse from rejoining under a fresh account.

Neither record contains your conversations, your astrology data, your name, or anything we could use to profile you, contact you, or recreate your experience. They exist only to enforce our terms against abusive users — and we'd rather be transparent about keeping them than pretend they don't exist.

Encrypted backups maintained by our infrastructure provider for disaster recovery follow their normal point-in-time recovery window; deleted account data ages out of those backups along with everything else.

Your California Privacy Rights (CPRA)

If you're a California resident, you have the following rights under the California Privacy Rights Act (CPRA):

Right to Know (Access)

You can request a copy of the personal information we've collected about you in the past 12 months, including:

• Categories of data collected
• Sources of that data
• Business purpose for collection
• Third parties we shared it with
• Specific pieces of data we hold about you

Right to Delete

You can request deletion of your personal data at any time. We'll delete your account and all associated data within 30 days. You can delete your account:

• In the mobile app: Settings → Account → Delete My Account
• Via web form: deluludrip.com/delete-account
• Email request: support@deluludrip.com

Right to Correct

You can update inaccurate personal information. Most data (name, birth info) can be edited directly in the app. For other corrections, email support@deluludrip.com.

Right to Opt-Out of Sale or Sharing

Good news: We do NOT sell your personal information. We do NOT share your data for cross-context behavioral advertising. You don't need to opt out of something we don't do.

Right to Limit Use of Sensitive Personal Information

We collect sensitive personal information (precise birth location, chat conversations about relationships and life questions). However, we only use this data for the services you explicitly requested (natal charts, mystical Oracle). We do NOT use sensitive data for secondary purposes like advertising or profiling, so there's nothing to limit.

If you want to stop collection of sensitive data, you can delete your account or withdraw consent by emailing support@deluludrip.com.

Right to Non-Discrimination

We will NOT discriminate against you for exercising your California privacy rights. You won't be denied service, charged different prices, or provided a lower quality experience for exercising your rights.

How to Exercise Your Rights

To submit a request:

• Email: support@deluludrip.com with subject line "California Privacy Request"
• Account Deletion: Use the web form or in-app settings

Verification & Response Timeline

Verification: We verify your identity using methods appropriate to the request channel:

• In-app deletion: OAuth authentication (you're already logged in via Google/Apple)
• Web form deletion: Email address + confirmation token link (two-step verification)
• Email requests: We verify identity with at least two data points (e.g., email + birth month/year or account creation date) before processing

Response time: We'll respond within 45 days. If we need more time, we'll notify you and respond within 90 days total.

Authorized Agent

You can designate an authorized agent to submit requests on your behalf. The agent must provide:

• Written authorization signed by you
• Proof of their own identity
• We may still contact you directly to verify the request

Appeal Process

If we deny your request, you can appeal by replying to our denial email with "APPEAL" in the subject line. We'll review your appeal and respond within 45 days. You also have the right to contact the California Attorney General to file a complaint.

Consumer Health Data (Washington Residents)

delulu drip is an entertainment service. We do not request, solicit, or collect consumer health data as defined by Washington's My Health My Data Act (RCW 19.373). The Oracle is general-purpose chat — please do not share medical, mental-health, reproductive, or other sensitive health information with it. We do not extract, infer, or derive health-data attributes from anything you type, and we do not build a record of you across conversations. Conversations are deleted within approximately 4 hours of the last message.

If you are concerned about content you previously shared and want it expedited for deletion, email support@deluludrip.com with subject line "WA Health Data Deletion" and we will permanently remove the conversation immediately.

We do not sell consumer health data as "sale" is defined under RCW 19.373.010(24), and we do not share it with third parties except as necessary to provide the App (specifically: chat messages are processed by OpenAI under contract to assist in generating Oracle responses and for content safety screening).

Washington residents have all rights described in the "Your Rights" section below.

Your Rights (All Users)

Regardless of where you live, you have the following rights:

• Access: Request a copy of your data
• Correction: Update inaccurate information (directly in the app or via email)
• Deletion: Delete your account and all associated data via the app or web form
• Portability: Export your data in a machine-readable format (email us to request)
• Withdraw Consent: Revoke previously given consent for sensitive data processing
• Unsubscribe: Stop the daily horoscope email from the link in any email footer, or from your inbox with one-click unsubscribe

To exercise these rights, contact us at support@deluludrip.com or use the account deletion page.

Note: California and Washington residents have additional rights — see sections above. EU/EEA residents also have the right to lodge a complaint with your local data protection supervisory authority.

Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS/TLS 1.3)
• Encryption at rest (AES-256)
• Secure authentication (OAuth 2.0 + JWT)
• Regular security audits and vulnerability assessments
• Limited employee access to production data
• Automated monitoring and intrusion detection

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

No accounts for users under 13

delulu drip blocks accounts where the entered birth date resolves to an age under 13. We don't knowingly serve children under 13 — and the App's astrological calculations literally depend on a real birth date, so a fake one defeats the purpose. If you believe a child has created an account using false information, contact us at support@deluludrip.com and we will delete it.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. Where required, we use Standard Contractual Clauses (SCCs) and other appropriate safeguards to protect your data during international transfers.

Cookies and Tracking

No ad SDKs, no third-party advertising trackers, no cross-site tracking pixels. Anywhere.

The mobile apps use device storage (DataStore on Android, UserDefaults on iOS) to hold your sign-in state, subscription status, and cached images. delulu drip in your browser does the same job with browser storage: a strictly necessary, first-party entry that keeps you signed in. Clear it and you're signed out. That's the extent of it.

We run a first-party analytics service that counts feature usage, and this marketing site (deluludrip.com) uses minimal analytics only. Our email carries no open-tracking pixels and no click tracking.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date at the top of this page and showing an in-app banner on your next session.

Your continued use of delulu drip after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• 📧 Email: support@deluludrip.com
• 🌐 Website: deluludrip.com
• 🗑️ Delete Account: deluludrip.com/delete-account

GDPR & EU/EEA inquiries: support@deluludrip.com