Privacy Policy
Effective 30 June 2026 · Last updated 30 June 2026
Delulu makes a manifestation and journaling app. This policy explains what we collect, why, and your choices. Delulu is for entertainment and self-reflection, it is not therapy, medical, or financial advice.
What we collect
You give us / the app creates
- Account identifier. If you sign in with Apple, we receive a stable, anonymous Apple user identifier (and, only if you choose to share it, your name/email). If you continue as a guest, we generate a random anonymous ID. We use this to remember your subscription status and daily usage count.
- Your prompts. The text you submit to create a manifestation, scripting, or pep talk is sent to our backend and our text-generation provider to produce your result. We do not use your prompts to train models.
- Usage counts. We count how many manifestations you create per day to enforce the free-tier limit. The counter expires automatically.
- Subscription status. Whether you have an active Premium subscription, via our payments processor.
Stored on your device (not collected by us)
- Your journal entries, saved scripts, goal, name, and streak are stored locally on your device by default. They are not uploaded to our servers unless a future sync feature is added (and you'd be told first).
We do not collect: precise location, contacts, photos, health records, or advertising identifiers. We do not track you across other apps or websites, and we do not sell your data.
How we use it
- Provide the app's features (generate your affirmations, scripting, pep talks).
- Enforce the free tier and your Premium entitlement.
- Keep the service secure and working (rate limiting, abuse prevention).
- Respond to your support requests.
Who we share it with (service providers only)
- Anthropic, our text-generation provider; processes your prompts to produce your manifestation/affirmation text.
- RevenueCat, manages subscription status and receipts.
- Apple / Google, process payments and (for Apple sign-in) authentication.
- Hosting / infrastructure, runs our backend and website.
We share only what each provider needs to do its job. We do not share your data with advertisers or data brokers.
Data retention
- Account ID, subscription status: kept while your account is active.
- Daily usage counters: expire automatically (within ~48 hours).
- Your prompts: processed to return your result; not retained longer than needed to operate and secure the service.
- On-device data: stays on your device until you delete it or uninstall the app.
Your choices & rights
- Delete your data in the app: Settings → Delete my data. You can also email us.
- Cancel your subscription anytime in your App Store or Google Play account.
- Depending on where you live (e.g. EEA/UK GDPR, California CCPA), you may have rights to access, correct, delete, or port your data, and to object to certain processing. Email us to exercise them.
Children
Delulu is not directed to children under 13 (or the minimum age in your country) and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we'll delete it.
Security & transfers
Data in transit is encrypted with TLS. Secrets are held server-side and never in the app. Our providers may process data in countries other than yours; where required we rely on appropriate safeguards.
Changes
We may update this policy; we'll change the "Last updated" date and, for material changes, notify you in-app or by email.
Contact
Questions or requests: hello@usedelulu.xyz