Delulu Privacy Policy

Last updated: 12 October 2026

Delulu is published by Jeremy Dumesny. This policy describes the iOS app and its Firebase-hosted services.

Your conversations

The core import, parsing and analysis run on your device. Delulu does not upload conversations for local analysis. Saved analyses, their available conversation text and unfinished imports are kept in protected app storage excluded from device backups. Raw imports are removed after analysis. Imported files in the share inbox are temporarily stored in the protected app group until processed or deleted. Files you exported outside Delulu remain under your control.

You can delete individual analyses or all app data in Settings. Deletion also removes associated local AI receipts and results. It does not delete your original WhatsApp conversation or exports, recall previously shared information, cancel subscriptions, or erase records held by payment providers.

Optional AI perspective

AI analysis is optional. Before an upload, Delulu explains the data sent and requires your explicit confirmation. New reads send all available text messages from the export, with timestamps, relationship context and aggregate message counts. Long conversations are read in blocks and the block summaries are combined into a final report. Photos, videos and audio are excluded. Older saved reads may contain only excerpts; importing the original export again is required for full text coverage. These data pass through the Delulu service hosted on Google Firebase and are forwarded to OpenAI to generate an additional perspective. Speaker labels are replaced with You and Them, but free text may still identify people. Only share conversations and personal information that you are entitled to share.

The Delulu server does not save conversation text or AI responses in its database. It processes them to answer your request. Requests to OpenAI use store:false. OpenAI API data is not used for model training by default. OpenAI may retain abuse-monitoring logs for up to 30 days, or longer where legally required. Canceling a request cannot recall data already transmitted. Delulu stores a local attempt receipt and any returned result with your analysis.

Service security and referral codes

Firebase Authentication creates an anonymous installation identity, without asking you for an email or password. Firebase App Check verifies that requests come from the app. The service stores a hashed identity, daily usage counters and temporary request markers to enforce limits and prevent abuse. Firebase and its hosting infrastructure process technical request information, such as IP addresses and request logs, to operate and secure the service. Technical logs include model token counts and processing coverage, without conversation text or participant names. The Delulu backend runs in Google Cloud’s europe-west1 region. This does not guarantee that every provider processes data exclusively in Europe; OpenAI processing is governed by the applicable account configuration and provider terms. Delulu does not claim HDS certification.

If you enter a referral code, Firebase records that code and the attribution date against a hashed installation identity, and increments the code's total once for that identity. This helps us measure which codes bring users to Delulu. A referral count is not a purchase count. The same subscription products remain available with or without a code. We do not send chat content or individual user identities to creators.

Deleting local analyses does not delete the anonymous Firebase identity, usage counters or referral record. These service records remain separate from the local app data. We retain them for service operation, abuse prevention and referral attribution; they are not automatically deleted when the app is uninstalled. Contact support for a server-data deletion request. We may need information to verify which anonymous installation a request concerns. Aggregated referral counts do not identify individual users.

Purchases

Apple handles payments. RevenueCat receives purchase history, subscription status and an anonymous app user identifier to validate and manage Premium access. This identifier can link purchases made through the app; it is not a promise of complete anonymity. Delulu does not send conversation messages or analysis content to RevenueCat. Provider retention and Apple account records are governed by their respective policies.

Sharing and tracking

Story cards are shared only when you choose a destination in the system share sheet. They exclude participant names and private message quotations. The receiving app or person may retain the image. Delulu has no advertising or conversation analytics SDK and does not use data for cross-app advertising tracking.

Contact and choices

Use Settings to review what left your phone and delete local analyses. Manage subscriptions in your Apple Account settings. Our service providers may process data outside your country according to their applicable privacy terms and safeguards. You can contact us to ask about access, correction or deletion of personal data, or other privacy rights applicable where you live. Do not include private conversations in a support message.

Contact: jeremy.dumesny@gmail.com

Provider information: https://firebase.google.com/support/privacy/ , https://www.revenuecat.com/privacy/ and https://openai.com/policies/privacy-policy/ . OpenAI API data controls: https://developers.openai.com/api/docs/guides/your-data .