Privacy Policy

Most apps study you.
We refuse.
We help you study yourself.

Most apps extract facts from your messages, build a permanent record of who you are, and remember everything across every session forever. We don't read your messages back to figure out who you are. We don't infer your moods, beliefs, health, or relationships from your conversations. We don't analyze you.

Yes, you have a profile in the app where you fill in a name (any), birth date, pronouns, and a few preferences. That's information you've explicitly given us, used to generate your charts and personalize the experience. By "we don't build profiles" we mean the inferential, behavioral kind apps quietly run on you. The kind that follows you across the internet. We don't do that. Ever.

The Oracle answers your question and then it's gone within ~8 hours of your last message. (We're working to delete it as soon as you're done with us.) The next time you open Oracle there's no record of you. Just you.

We're not different because we promise to be careful with your data. We're different because we built the app not to have it in the first place.

Oracle, frankly, does not know her.

The boring legal version follows below.

What We Don't Do

We don't:

• Extract or infer attributes from your messages — not your mood, not your relationships, not your beliefs, not your health, not your sexuality, nothing.
• Keep your conversations after the session ends.
• Feed your conversations into AI training. Not OpenAI's. Not ours. Not anyone else's.
• Sell, rent, or share your data with advertisers, data brokers, insurers, or employers.
• Track you across other websites or apps.
• Use cookies, ad SDKs, or third-party tracking pixels.
• Have humans at delulu read your conversations — except in the narrow case where one is reported for safety review. (Automated content-safety screening checks your messages for crisis content; no human reviews these unless flagged.)
• Use your sensitive personal information for any purpose other than providing the service you asked for.
• Build behavioral or advertising profiles of you.

Who We Are (Data Controller)

delulu drip is operated by delulu global LLC.

• 📧 Email: [email protected]
• 📍 Registered Agent Address: 522 W Riverside Ave, Ste N, Spokane, WA 99201
• 🌐 Website: deluludrip.com

For privacy-related inquiries or data rights requests, use the contact information above.

Notice at Collection (California Residents)

What we collect:

• Identifiers: Email address, name, unique user ID
• Sensitive Personal Information: Precise birth location (latitude/longitude), chat conversations
• Personal Information: Birth date and time, generated charts, usage data

Why we collect it: To provide entertainment services (personalized astrology, natal charts, horoscopes, mystical Oracle).

How long we keep it:

• Account data: Until you delete your account
• Chat content: Deleted within ~8 hours of the last message in a session
• Reported content: Up to 90 days after the report was filed
• Analytics: 90 days (anonymized)
• Pseudonymized billing identity / anti-abuse counter: Indefinite (fraud/abuse prevention only)

Sale or sharing: We do not sell or share any category of personal information for advertising or cross-context behavioral advertising purposes.

Your California Privacy Rights:

• Do Not Sell or Share My Personal Information
• Limit the Use of My Sensitive Personal Information
• Access, Correct, or Delete My Data

Information We Collect

Birth Information

To generate natal charts and astrological content, we collect:

• Birth date and time
• Birth location (latitude/longitude/timezone)
• Optional: Name for personalization

Account Information

When you create an account using OAuth (Google or Apple Sign-In), we collect:

• Email address
• Name (as provided by OAuth provider)
• Profile photo URL (optional)
• Unique user identifier

Usage Data

We automatically collect certain information when you use delulu drip:

• Chat conversations with the Oracle (deleted within ~8 hours of last message — see retention below)
• Generated natal charts and interpretations
• Synastry (relationship) charts
• Astrocartography readings
• Basic app analytics (which features you use, not who you are)
• Device information for compatibility (OS version, app version only)
• Crash reports (automatically deleted after 90 days)

What we DON'T collect: No cross-app tracking, no web browsing history, no advertising IDs, no contact lists, no location tracking outside of birth chart generation.

Sensitive Information

Astrology requires precise birth data — date, time, location. That's sensitive information by any framework's definition (CPRA, GDPR, MHMDA). We use it for exactly one thing: calculating your charts. We don't use it to profile you. We don't use it for advertising. We don't share it with anyone except the geocoding provider that turns your birth city into coordinates and the text-generation service that helps generate your readings.

Other categories of sensitive information (health, sexuality, religion, immigration status, biometrics, financial details) — we don't request, store, or infer any of these. If you mention any of them in conversation with the Oracle, that mention disappears with the rest of the conversation in ~8 hours. We don't extract it. We don't remember it. We don't build a record of you on it.

Right to Limit Use of Sensitive Personal Information: Because we use sensitive personal information only to provide the App's services to you, no opt-out is required under CPRA §1798.121. If you want to confirm this directly, email [email protected] with subject line "Limit Use of Sensitive Personal Information." We will respond confirming that no secondary use is occurring.

Legal Basis for Processing Your Data

We process your information based on the following legal grounds:

Performance of Contract

To provide the astrology services you requested, we process:

• Birth date and time (for astrological calculations)
• Email address and account credentials (for authentication)
• Generated natal charts and interpretations (to deliver our service)

Consent (Sensitive Personal Information)

With your explicit consent, we collect and process personal information you provide including:

• Precise birth geolocation: Your birth location (latitude/longitude) to calculate accurate house cusps and astrocartography
• Chat conversations: Messages you send to the mystical Oracle about relationships, life questions, and cosmic perspectives

You provide consent by creating an account and entering this information. You can withdraw consent and delete all your data at any time.

Legitimate Interest

To improve our service and prevent abuse, we process:

• Anonymized usage analytics (which features are popular)
• Crash reports for debugging (automatically deleted after 90 days)
• Security logs to detect fraud and prevent abuse

What we DON'T do: We don't sell your data. We don't build advertising profiles. We don't track you across other websites or apps. Your astrology data stays in our astrology app.

Third-Party Services We Use

We use carefully selected third-party service providers to power delulu drip's features. Under California privacy law, we must explicitly name these providers and explain what data they process:

Data Retention

Other apps remember everything forever. We don't.

Conversations end. We delete them.

Most apps keep your conversations for 30 days, indefinitely, or in some cases use them to train future models. We don't.

Within ~8 hours of your last message in a session, we permanently delete the conversation from our active databases. The Oracle has no memory of you between sessions. The next session starts cold. If you discussed something with the Oracle yesterday, it's gone — there's nothing on our servers to subpoena, leak, or repurpose later.

Two narrow exceptions: messages reported for safety review are kept up to 90 days for investigation, then deleted. Encrypted backups maintained by our infrastructure provider for disaster recovery follow their normal point-in-time recovery window.

¹ Chat content is processed by OpenAI to generate responses. Under their standard API terms, OpenAI does not use this data to train models, but may retain content for up to 30 days for abuse monitoring. See "Third-Party Services."

Legal Exceptions: We may retain data longer if required by law (valid subpoena, court order), to prevent fraud, or for child safety investigations. This basically never happens for an astrology app.

What survives account deletion (and why)

When you delete your account, we permanently and immediately drop your data from our active databases. Two narrow categories survive deletion in pseudonymized form, and only for fraud and abuse prevention:

1. A pseudonymized billing identity (one-way HMAC hashes of your email and OAuth identifiers — irreversible, can't be used to contact you or reconstruct your account). This stops people from cycling through the free tier by deleting and re-creating accounts.
2. A count of automated content-safety flags on messages you have submitted, associated with that pseudonymized billing identity. (When our automated content-safety screen flags a message you submitted, the counter increments. User reports about Oracle's output don't count toward this — only automated flags on content you yourself submitted, so the counter can't be weaponized by other users.) This stops users banned for abuse from rejoining under a fresh account.

Neither record contains your conversations, your astrology data, your name, or anything we could use to profile you, contact you, or recreate your experience. They exist only to enforce our terms against abusive users — and we'd rather be transparent about keeping them than pretend they don't exist.

Encrypted backups maintained by our infrastructure provider for disaster recovery follow their normal point-in-time recovery window; deleted account data ages out of those backups along with everything else.

Your California Privacy Rights (CPRA)

If you're a California resident, you have the following rights under the California Privacy Rights Act (CPRA):

Right to Know (Access)

You can request a copy of the personal information we've collected about you in the past 12 months, including:

• Categories of data collected
• Sources of that data
• Business purpose for collection
• Third parties we shared it with
• Specific pieces of data we hold about you

Right to Delete

You can request deletion of your personal data at any time. We'll delete your account and all associated data within 30 days. You can delete your account:

• In the mobile app: Settings → Account → Delete My Account
• Via web form: deluludrip.com/delete-account
• Email request: [email protected]

Right to Correct

You can update inaccurate personal information. Most data (name, birth info) can be edited directly in the app. For other corrections, email [email protected].

Right to Opt-Out of Sale or Sharing

Good news: We do NOT sell your personal information. We do NOT share your data for cross-context behavioral advertising. You don't need to opt out of something we don't do.

Right to Limit Use of Sensitive Personal Information

We collect sensitive personal information (precise birth location, chat conversations about relationships and life questions). However, we only use this data for the services you explicitly requested (natal charts, mystical Oracle). We do NOT use sensitive data for secondary purposes like advertising or profiling, so there's nothing to limit.

If you want to stop collection of sensitive data, you can delete your account or withdraw consent by emailing [email protected].

Right to Non-Discrimination

We will NOT discriminate against you for exercising your California privacy rights. You won't be denied service, charged different prices, or provided a lower quality experience for exercising your rights.

How to Exercise Your Rights

To submit a request:

• Email: [email protected] with subject line "California Privacy Request"
• Account Deletion: Use the web form or in-app settings

Verification & Response Timeline

Verification: We verify your identity using methods appropriate to the request channel:

• In-app deletion: OAuth authentication (you're already logged in via Google/Apple)
• Web form deletion: Email address + confirmation token link (two-step verification)
• Email requests: We verify identity with at least two data points (e.g., email + birth month/year or account creation date) before processing

Response time: We'll respond within 45 days. If we need more time, we'll notify you and respond within 90 days total.

Authorized Agent

You can designate an authorized agent to submit requests on your behalf. The agent must provide:

• Written authorization signed by you
• Proof of their own identity
• We may still contact you directly to verify the request

Appeal Process

If we deny your request, you can appeal by replying to our denial email with "APPEAL" in the subject line. We'll review your appeal and respond within 45 days. You also have the right to contact the California Attorney General to file a complaint.

Consumer Health Data (Washington Residents)

delulu drip is an entertainment service. We do not request, solicit, or collect consumer health data as defined by Washington's My Health My Data Act (RCW 19.373). The Oracle is general-purpose chat — please do not share medical, mental-health, reproductive, or other sensitive health information with it. We do not extract, infer, or derive health-data attributes from anything you type, and we do not build a record of you across conversations. Conversations are deleted within approximately 8 hours of the last message.

If you are concerned about content you previously shared and want it expedited for deletion, email [email protected] with subject line "WA Health Data Deletion" and we will permanently remove the conversation immediately.

We do not sell consumer health data as "sale" is defined under RCW 19.373.010(24), and we do not share it with third parties except as necessary to provide the App (specifically: chat messages are processed by OpenAI under contract to assist in generating Oracle responses and for content safety screening).

Washington residents have all rights described in the "Your Rights" section below.

Your Rights (All Users)

Regardless of where you live, you have the following rights:

• Access: Request a copy of your data
• Correction: Update inaccurate information (directly in the app or via email)
• Deletion: Delete your account and all associated data via the app or web form
• Portability: Export your data in a machine-readable format (email us to request)
• Withdraw Consent: Revoke previously given consent for sensitive data processing

To exercise these rights, contact us at [email protected] or use the account deletion page.

Note: California and Washington residents have additional rights — see sections above. EU/EEA residents also have the right to lodge a complaint with your local data protection supervisory authority.

Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS/TLS 1.3)
• Encryption at rest (AES-256)
• Secure authentication (OAuth 2.0 + JWT)
• Regular security audits and vulnerability assessments
• Limited employee access to production data
• Automated monitoring and intrusion detection

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

No accounts for users under 13

delulu drip blocks accounts where the entered birth date resolves to an age under 13. We don't knowingly serve children under 13 — and the App's astrological calculations literally depend on a real birth date, so a fake one defeats the purpose. If you believe a child has created an account using false information, contact us at [email protected] and we will delete it.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. Where required, we use Standard Contractual Clauses (SCCs) and other appropriate safeguards to protect your data during international transfers.

Cookies and Tracking

The delulu drip app does not use cookies, ad SDKs, or third-party tracking pixels. We do use device storage (DataStore on Android, UserDefaults on iOS) for sign-in state, subscription cache, and image cache, and a first-party analytics service to count feature usage. Our website (deluludrip.com) uses minimal tracking for analytics purposes only. We do not use third-party advertising trackers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date at the top of this page and showing an in-app banner on your next session.

Your continued use of delulu drip after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• 📧 Email: [email protected]
• 🌐 Website: deluludrip.com
• 🗑️ Delete Account: deluludrip.com/delete-account

GDPR & EU/EEA inquiries: [email protected]