Lulu Privacy Policy
Last updated: 10 November 2026
1. Scope and information
This policy describes information involved when you use Lulu. Depending on the features you use, this can include your profile name, image and biography; photos, videos, captions and comments; follows, blocks and reports; private messages and read status; AI guide questions and answers; account and session identifiers; email addresses and sign-in identifiers provided by Apple or Google when you choose those sign-in methods; purchase and wallet records; and technical information needed to operate and secure the service.
2. How information is used
Information is used to provide accounts and features, display content, maintain connections and conversations, answer guide questions, carry out requested actions, review reports, protect users and the service, handle purchases, and support deletion. Private messages are intended for their participants and authorized safety or service operations.
3. Device permissions and media
The app may request access to your photo library when you select media, the camera when you capture a photo or video or join a video call, and the microphone when you record video with sound or join a voice or video call. The app may also request permission to show notifications; the device can provide a push token when notification delivery is configured. You can manage these permissions in device settings. Photos and videos may contain embedded location or other metadata; remove details you do not want to share before selecting them.
Sign-in information
When you choose email sign-in, your email address is used to create, verify and recover your account. When you choose Sign in with Apple, Apple provides an account identifier and, according to your Apple settings, an email address that may use Apple private relay. When you choose Sign in with Google, Google and Supabase process information needed to authenticate you, which may include your Google account identifier, email address and basic profile information. Google provides this information according to your Google account settings and its policies. Supabase processes sign-in information to authenticate your account. Brevo processes your email address to send account verification and password recovery messages on Lulu’s behalf. Existing guest accounts may remain available on the device where they were created.
4. Storage and providers
Drafts and some account-related information may be stored on your device. Once configured, Supabase provides account services and stores profile, content, connection, safety information and media on Lulu's behalf. Apple processes App Store purchases. LiveKit provides the audio and video connection when you choose to make or accept a call.
AI guide
When you choose to use the dumpling guide and give permission, Lulu sends your question and up to four recent guide questions and answers through Supabase to DeepSeek to generate a response. Lulu stores questions and answers with your account so you can view your guide history and continue the conversation. You may decline or withdraw permission to stop future AI requests. A request already sent may still be processed. Avoid including sensitive personal information in your questions.
You can request access to or deletion of information through the contact below, or request account deletion in the app. Deleting information held by Lulu does not necessarily remove information already processed or retained by a service provider. For questions about provider processing, retention or use of guide data, contact us.
DeepSeek publishes its Open Platform Terms of Service and Privacy Policy. Its policy explains that it does not cover personal information collected from end users of downstream applications.
5. Sharing and visibility
Published content and profile information may be visible to other members. Reports can include information needed to review the reported content or account. Information may be disclosed when legally required or necessary for safety, security or fraud prevention, subject to applicable law.
6. Retention and deletion
Information is retained for the purposes described above and applicable obligations. You can request account deletion through the available controls. Some information may need to be retained for payment, security, legal compliance or disputes. Local copies can remain on a device until removed using the applicable app or device controls; deleting the app alone does not necessarily delete server records.
7. Your choices
You can edit available profile information, manage device permissions, block or report members, and request account deletion through the available controls. Depending on applicable law, you may have additional rights to access, correct, delete or obtain a copy of your information. Requests require sufficient information to identify the account safely.
8. Children and changes
Lulu is intended for adults. This policy may be updated when services or practices change, with notice where required by law.
9. Contact
For privacy questions or support, contact lulu_service2026@hotmail.com.