Privacy Policy

Belulu is a small app built around daily affirmations and Lulu characters. This page explains what we collect when you use the iOS or Android app, why we need it, and who else is involved. We tried to keep it plain — no marketing fluff.

If anything here feels unclear, email support@belulu.app. We’re happy to walk through it. Using Belulu means you’re okay with this policy and our Terms of Use.

What Belulu is

Belulu (package com.belulu.app) lets you sign in, take a short onboarding quiz, unlock Lulus, read affirmations, optionally subscribe for more characters, and get reminders if you turn those on. Some screens may show ads.

What we collect

Account basics. You can sign in with Google, Sign in with Apple, or start as a guest. Depending on the method, we may get an email, name, profile photo URL, and a Firebase user ID so your data stays tied to you. Apple sometimes gives a private relay email instead of your real one — that’s fine with us.

Stuff you create in the app. Onboarding answers, which Lulu you matched with, unlocked characters, favorites, streak info, and notification preferences live in our Firestore database under your account.

Subscriptions. If you buy a plan, Apple or Google handles the money. We use RevenueCat to know whether your subscription is active, which product you bought, and when it renews or ends. We never see your full card number.

Device & delivery bits. Push tokens (so we can send notifications), app version, timezone (for reminders), and basic connectivity checks. If you allow camera or photo access for a feature that needs it, that stays on-device unless the feature clearly uploads something.

Ads. When ads run, Google Mobile Ads (AdMob) may use advertising identifiers and related signals under Google’s rules. You can limit tracking in your phone settings.

Why we use it

• Keep you signed in and sync your Lulus / affirmations across sessions
• Match you to a Lulu from onboarding and unlock the right characters for free or paid plans
• Restore purchases and show the correct subscription status via RevenueCat
• Send the reminders you asked for
• Turn features on or off with Firebase Remote Config (including ad settings)
• Fix bugs, keep the app secure, and answer support emails

Plans, in plain terms

Free users get a starter Lulu after onboarding (Harlem). Paid plans unlock more Lulus. What’s included is always shown on the paywall before you buy. Today’s plan families look like this (names and SKUs can change in the stores):

• Soft Launch — com.belulu.soft.monthly / com.belulu.soft.annual
• Lulu-Locked — com.belulu.lock.monthly / com.belulu.lock.annual
• Full Luluverse — com.belulu.full.monthly / com.belulu.full.yearly

When a paid sub ends, paid unlocks may go away. Free content stays. Canceling Belulu billing happens in your Apple ID or Google Play settings — deleting the app or your Belulu account doesn’t cancel the store subscription by itself.

Who else sees data

We don’t sell your personal info. We do use tools that make the app work:

• Firebase Auth, Firestore, Cloud Messaging, Remote Config (Google) — accounts, data, pushes, remote settings
• Google Sign-In / Sign in with Apple — login
• RevenueCat — subscription status and restores
• Apple App Store / Google Play — payments and receipts
• Google Mobile Ads — ads, when we show them
• YouTube — if a Lulu video plays in-app, YouTube’s own rules apply to that playback

Their privacy pages live on their sites (Google, Apple, RevenueCat, AdMob). Worth a skim if you like reading the fine print.

How long we keep things

We keep your account data while you use Belulu. If you delete your account in the app, we remove or anonymize the personal bits from our main systems within a reasonable time. Backups may lag a bit. Apple, Google, and RevenueCat may keep their own purchase records under their rules.

Your choices

• Change notification settings in Belulu and on your phone
• Manage or cancel subscriptions in Apple / Google account settings
• Limit personalized ads in system or Google settings
• Delete your account from Belulu settings
• Ask us for a copy of your data, a fix, or a deletion — support@belulu.app

Depending where you live, you may have extra rights under local privacy law. We’ll do our best to honor valid requests.

Kids

Belulu isn’t aimed at children under 13 (or the higher age your country requires). If you think a child signed up, tell us and we’ll clean it up.

Security & where data sits

Traffic is encrypted (HTTPS). Access to our Firebase project is locked down with rules and limited credentials. Still — no app is perfect. Protect your phone and account.

Our providers (Google, RevenueCat, and others) may process data in the US and elsewhere. That’s how those clouds work; they provide their own transfer safeguards.

Updates

If we change this policy, we’ll update the date at the top and post the new version here. Bigger changes may also get a note in the app when we can.