Privacy
DELULU is a location-aware app, so this document matters more than most. It says exactly what is collected, why, how long it is kept and who else sees it.
Last updated .
DELULU is still being built
DELULU is in development and has not been released, so this policy describes a product that is still being made. Everything below is true of the app as it stands and we are held to it, and it will be updated as the rest is built rather than left to go stale. The terms say the same of themselves.
Two things are worth saying plainly rather than leaving you to notice:
- There is no ICO registration number here yet. Registration has not been confirmed. It will be added when it is.
- There is no production database yet. The processors named below are the ones DELULU is built on and will launch with. Until there is a live service, that is a description of the intended arrangement rather than of one already running.
Who is responsible
Vii Dohtem Ltd (company number 15452820), registered at 110 Milford Hill, Salisbury, Wiltshire SP1 2QL, United Kingdom, is the data controller for DELULU.
Questions, requests and complaints go to social@delulu.energy.
What is collected, and for how long
Nothing here is optional flannel: each row is something the app genuinely stores. If something is not listed, it is not collected.
| What | Why | How long |
|---|---|---|
| Email address and password | To create your account and let you sign back in. The password is stored only as a hash and cannot be read, by us or anyone else. | Until you delete your account |
| Display name, bio and photograph | Your profile. All three are optional except a display name, and none of them is shown to another user until you both agree to share profiles. | Until you delete your account |
| Date of birth | To check you are over 18. DELULU is not available to under-18s. | Until you delete your account |
| Your location | To work out whether somebody else is near enough to be an opportunity. Collected only while you are Findable, and never while you are not. | 24 hours |
| Proximity events | A record that two people were near each other, so the same pair is not offered to each other repeatedly. | 30 days |
| Waves, Matches and messages | To run the conversations you have chosen to have. | Until you delete your account |
| Blocks and reports | To keep blocks working and to let moderators act on reports. A report you filed is kept after you delete your account, with your name removed, because people report something and then leave. | Kept, without your name, after deletion |
| Notification token | So your phone can receive a notification. It identifies a device, not you. | Until you sign out or delete your account |
Your location, specifically
This is the part worth reading twice, because it is where a location app usually disappoints.
No other user ever receives your coordinates. Not your latitude and longitude, not your exact distance, not your direction. Whether two people are close enough is calculated on the server, and what the app displays is a phrase such as “a short walk away”.
Your location is only collected while you are Findable, which is a session you start deliberately and which expires on its own. When it lapses, collection stops.
Location is deleted after 24 hours. DELULU keeps no history of where you have been and cannot reconstruct your movements.
Why we are allowed to hold it
Most of it is because you asked for the service and it cannot work otherwise: your location, your profile and your messages are all necessary to perform the contract you entered into by creating an account.
Blocks, reports and moderation records rest on legitimate interests instead, specifically keeping people safe from each other. Age checks are there to meet legal and platform obligations about who may use a service like this.
Your phone will also ask your permission before sharing location or sending notifications. You can withdraw either at any time in your device settings, and DELULU will keep working without them, less usefully.
Who else sees it
DELULU does not sell personal data, does not share it with advertisers, and runs no advertising or analytics trackers.
Data is handled on our behalf by:
- Supabase, which hosts the database and handles sign-in.
- Expo, and through it Apple or Google, to deliver notifications to your phone. A notification carries a name and a short line such as “sent you a message”. It never carries the contents of a message or anybody’s location.
We may also disclose information where the law requires it, or where it is necessary to protect somebody from harm.
What you can ask for
You can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, object to how it is used, or ask us to restrict what we do with it. Write to social@delulu.energy and we will respond within one month.
You can delete your account from the app, under Profile. It is immediate and permanent: your profile, photograph, location, Matches and age record go straight away, and you are off radar at once.
Two things stay, deliberately. Anyone you were talking to keeps that conversation, closed, with your name removed from it, because they wrote half of it and it is not yours to take away. And anything you reported stays with the moderators, because people report something and then leave, which is exactly when the report matters most.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first, so we can put it right.
Under-18s
DELULU is for adults. You must be 18 or over to create an account, and we check a declared date of birth before anyone can become Findable. If we learn that an account belongs to somebody under 18 we close it and delete the data.
Changes
If this policy changes in a way that affects you, we will tell you in the app before the change takes effect. The date at the top is the date this version was published, and it is generated from the change itself rather than typed in.