Privacy Policy

Last Updated: November 14, 2025

We're Not Like Other Apps

Most apps treat your data like a product to sell. They track everything, build profiles, and monetize your existence. delulu drip is different. We're here for the cosmic vibes, not surveillance capitalism panopticon.

We collect only what's needed to generate your charts and readings. We don't track you across the internet, we don't sell your data, and we definitely don't build creepy advertising profiles. Your birth chart is yours, not ours to exploit.

The boring legal version follows below, but here's the vibe: We keep your astrology data safe, we delete it when you ask, and we only share it when legally required (which is basically never for an astrology app). Cool? Cool.

Who We Are (Data Controller)

delulu drip is operated by delulu LLC.

For privacy-related inquiries or data rights requests, use the contact information above.

Notice at Collection (California Residents)

What we collect:

Why we collect it: To provide entertainment services (personalized astrology, natal charts, horoscopes, mystical Oracle).

How long we keep it:

Sale or sharing: We do not sell or share any category of personal information for advertising or cross-context behavioral advertising purposes.

Your California Privacy Rights:

Information We Collect

Birth Information

To generate accurate natal charts and astrological readings, we collect:

Account Information

When you create an account using OAuth (Google or Apple Sign-In), we collect:

Usage Data

We automatically collect certain information when you use delulu drip:

What we DON'T collect: No cross-app tracking, no web browsing history, no advertising IDs, no contact lists, no location tracking outside of birth chart generation.

Legal Basis for Processing Your Data

Under California privacy law, we process your information based on the following legal grounds:

Performance of Contract

To provide the astrology services you requested, we process:

Consent (Sensitive Personal Information)

With your explicit consent, we collect and process personal information you provide including:

You provide consent by creating an account and entering this information. You can withdraw consent and delete all your data at any time.

Legitimate Interest

To improve our service and prevent abuse, we process:

What we DON'T do: We don't sell your data. We don't build advertising profiles. We don't track you across other websites or apps. Your astrology data stays in our astrology app.

Third-Party Services We Use

We use carefully selected third-party service providers to power delulu drip's features. Under California privacy law, we must explicitly name these providers and explain what data they process:

OpenAI (AI Language Model)

What they process: Content you provide to generate personalized astrological insights (birth details, messages, preferences).

Purpose: AI-powered content generation and safety moderation.

How they use it:

Data location: United States

See OpenAI Enterprise Privacy for details.

Supabase (Database & Authentication)

What they process: All user data including profiles, birth information, natal charts, chat history, and account credentials.

Purpose: Secure data storage, OAuth authentication (Google/Apple sign-in), and database management.

Data location: United States (US-East region)

Security: Encryption at rest (AES-256) and in transit (TLS 1.3)

Supabase is bound by a Data Processing Agreement (DPA) that contractually prohibits them from using your data for any purpose other than providing our service. See Supabase Privacy Policy.

Google Cloud Platform (Infrastructure)

What they process: Technical infrastructure data including server logs, IP addresses, and API request metadata.

Purpose: Backend API hosting and infrastructure management.

Data location: United States (us-central1 region)

Google Cloud is bound by the Cloud Data Processing Addendum, which ensures CPRA compliance for California residents. See Google Cloud Privacy Notice.

Cloudflare (Website CDN & Security)

What they process: Website visitor data for deluludrip.com only (not the mobile app).

Purpose: Content delivery network (CDN) and DDoS protection for our website.

Data location: Global edge network

Cloudflare only processes website visitor data (not app user data). See Cloudflare Privacy Policy.

OAuth Providers (Google & Apple)

When you sign in with Google or Apple, authentication is handled securely by these providers according to their privacy policies. We only receive your email address and basic profile information (name, profile photo).

See Google Privacy Policy and Apple Privacy Policy.

Data Retention

Unlike apps that hoard your data forever, we actually delete things. Here's exactly what we keep, for how long, and why:

Category What We Keep How Long Why Legal Basis
Account Data Profile, birth info, natal charts, generated images Until account deletion Service delivery Contract
Chat History Mystical Oracle conversations 30 days maximum Conversation context and personalization Consent
Analytics Usage statistics (anonymized) 90 days Service improvement and feature development Legitimate Interest
Crash Reports Error logs (anonymized) 30 days Bug fixes and stability improvements Legitimate Interest
Security Logs Authentication attempts, IP addresses (for fraud detection) 1 year Fraud prevention and account security Legitimate Interest
Deleted Data None (permanent deletion) Deleted within 30 days of request CPRA compliance Legal Obligation

The vibe: Other apps remember everything forever. We seriously aren't interested in that. Your data is for your astrology readings, not our data warehouse. When you delete your account, we delete everything - no "soft deletes", no backups, no archives.

Legal Exceptions: We may retain data longer if required by law (valid subpoena, court order), to prevent fraud, or for child safety investigations. This basically never happens for an astrology app.

Your California Privacy Rights (CPRA)

If you're a California resident, you have the following rights under the California Privacy Rights Act (CPRA):

Right to Know (Access)

You can request a copy of the personal information we've collected about you in the past 12 months, including:

Right to Delete

You can request deletion of your personal data at any time. We'll delete your account and all associated data within 30 days. You can delete your account:

Right to Correct

You can update inaccurate personal information. Most data (name, birth info) can be edited directly in the app. For other corrections, email [email protected].

Right to Opt-Out of Sale or Sharing

Good news: We do NOT sell your personal information. We do NOT share your data for cross-context behavioral advertising. You don't need to opt out of something we don't do.

Right to Limit Use of Sensitive Personal Information

We collect sensitive personal information (precise birth location, chat conversations about relationships and life questions). However, we only use this data for the services you explicitly requested (natal charts, mystical Oracle). We do NOT use sensitive data for secondary purposes like advertising or profiling, so there's nothing to limit.

If you want to stop collection of sensitive data, you can delete your account or withdraw consent by emailing [email protected].

Right to Non-Discrimination

We will NOT discriminate against you for exercising your California privacy rights. You won't be denied service, charged different prices, or provided a lower quality experience for exercising your rights.

How to Exercise Your Rights

To submit a request:

Verification & Response Timeline

Verification: We verify your identity using methods appropriate to the request channel:

Response time: We'll respond within 45 days. If we need more time, we'll notify you and respond within 90 days total.

Authorized Agent

You can designate an authorized agent to submit requests on your behalf. The agent must provide:

Appeal Process

If we deny your request, you can appeal by replying to our denial email with "APPEAL" in the subject line. We'll review your appeal and respond within 45 days. You also have the right to contact the California Attorney General to file a complaint.

Your Rights (All Users)

Regardless of where you live, you have the following rights:

To exercise these rights, contact us at [email protected] or use the account deletion page.

Note: California and Washington residents have additional rights - see sections above.

Data Security

We implement industry-standard security measures to protect your data:

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Children's Privacy

delulu drip is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will delete it.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. By using delulu drip, you consent to the transfer of your information to these countries.

Cookies and Tracking

The delulu drip mobile app does not use cookies. Our website (deluludrip.com) uses minimal tracking for analytics purposes only. We do not use third-party advertising trackers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

Your continued use of delulu drip after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Data Protection Officer: For GDPR-related inquiries, contact [email protected] with subject line "GDPR Request".