Privacy
DELULU is a location-aware app, so this document matters more than most. It says exactly what is collected, why, how long it is kept and who else sees it.
Last updated .
Who is responsible
Vii Dohtem Ltd (company number 15452820), registered at 110 Milford Hill, Salisbury, Wiltshire SP1 2QL, United Kingdom, is the data controller for DELULU.
Questions, requests and complaints go to social@delulu.energy.
What is collected, and for how long
Nothing here is optional flannel: each row is something the app genuinely stores. If something is not listed, it is not collected.
| What | Why | How long |
|---|---|---|
| Email address and password | To create your account and let you sign back in. The password is stored only as a hash and cannot be read, by us or anyone else. | Until you delete your account |
| Display name, bio and photograph | Your profile. All three are optional except a display name, and none of them is shown to another user until you both agree to share profiles. | Until you delete your account |
| Date of birth | To check you are over 18. DELULU is not available to under-18s. | Until you delete your account |
| Your location | To work out whether somebody else is near enough to be an opportunity. Collected only while you are Findable, and never while you are not. | 24 hours |
| Proximity events | A record that two people were near each other, so the same pair is not offered to each other repeatedly. | 30 days |
| Waves, Matches and messages | To run the conversations you have chosen to have. | Until you delete your account |
| Blocks and reports | To keep blocks working and to let moderators act on reports. Kept after account deletion where needed to protect other people. | Up to 2 years |
| Notification token | So your phone can receive a notification. It identifies a device, not you. | Until you sign out or delete your account |
Your location, specifically
This is the part worth reading twice, because it is where a location app usually disappoints.
No other user ever receives your coordinates. Not your latitude and longitude, not your exact distance, not your direction. Whether two people are close enough is calculated on the server, and what the app displays is a phrase such as “a short walk away”.
Your location is only collected while you are Findable, which is a session you start deliberately and which expires on its own. When it lapses, collection stops.
Location is deleted after 24 hours. DELULU keeps no history of where you have been and cannot reconstruct your movements.
Why we are allowed to hold it
Most of it is because you asked for the service and it cannot work otherwise: your location, your profile and your messages are all necessary to perform the contract you entered into by creating an account.
Blocks, reports and moderation records rest on legitimate interests instead, specifically keeping people safe from each other. Age checks are there to meet legal and platform obligations about who may use a service like this.
Your phone will also ask your permission before sharing location or sending notifications. You can withdraw either at any time in your device settings, and DELULU will keep working without them, less usefully.
Who else sees it
DELULU does not sell personal data, does not share it with advertisers, and runs no advertising or analytics trackers.
Data is handled on our behalf by:
- Supabase, which hosts the database and handles sign-in.
- Expo, and through it Apple or Google, to deliver notifications to your phone. A notification carries a name and a short line such as “sent you a message”. It never carries the contents of a message or anybody’s location.
We may also disclose information where the law requires it, or where it is necessary to protect somebody from harm.
What you can ask for
You can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, object to how it is used, or ask us to restrict what we do with it. Write to social@delulu.energy and we will respond within one month.
Deleting your account removes your profile, your location data and your messages. Messages you sent may remain visible to the person you sent them to, and records connected to blocks or reports may be kept where removing them would put somebody else at risk.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first, so we can put it right.
Under-18s
DELULU is for adults. You must be 18 or over to create an account, and we check a declared date of birth before anyone can become Findable. If we learn that an account belongs to somebody under 18 we close it and delete the data.
Changes
If this policy changes in a way that affects you, we will tell you in the app before the change takes effect. The date at the top is the date this version was published, and it is generated from the change itself rather than typed in.
Questions about this document? Write to social@delulu.energy.