Privacy Policy

Our Commitment to Privacy

At Eellu, we believe social media should bring joy, not anxiety about your data. We've built Eellu with privacy as a core principle. Simply put: we don't collect your personal data, we don't sell it, and we don't share it with anyone.

What We Don't Do

• No tracking or profiling: We don't track your behavior to build advertising profiles.
• No ads: We don't show advertisements, so we have no reason to collect data for ad targeting.
• No data selling: We never sell your information to third parties.
• No personalization algorithms: Your feed is chronological, not manipulated by algorithms designed to maximize engagement.

Information You Provide

When you use Eellu, you may choose to provide:

• Account information: Email address and username to create your account.
• Profile information: Optional profile picture and display name.
• Content: Posts about media you're enjoying (movies, TV, books, etc.).

This information is used solely to provide the Eellu service and is never shared with third parties for marketing or advertising purposes.

Device Permissions

The Eellu app may request the following permissions, all of which are optional:

• Camera & Photos: Only used if you choose to set a profile picture. We don't access your photos otherwise.
• Contacts: Only used if you choose to find friends. Contact data stays on your device and is not uploaded to our servers.

Data Security

We use industry-standard security measures to protect your account information. All data transmission is encrypted using HTTPS. We don't store sensitive information like passwords in plain text.

Your Rights

You have full control over your data:

• Access: You can view all the data associated with your account at any time.
• Deletion: You can delete your account and all associated data at any time.
• Export: You can request a copy of your data.

Categories of Personal Information We Collect

• Identifiers: email address, username, display name, and (if provided) phone number.
• Account & profile data: profile picture, and — for age assurance only — your birth month and year (never the exact day).
• User content: posts, ratings, collections, comments within watch parties, uploaded photos/videos, and feedback you submit.
• Social graph & activity: who you follow, your likes, quiz/challenge scores, and watch-party participation.
• Technical data: device/push tokens, IP address and user-agent associated with sessions, used for security and to deliver notifications.

How We Use Your Information

We use personal information only to operate the service: creating and securing your account, showing you content from people you follow, delivering notifications you opt into, enforcing our minor-safety and age requirements, responding to feedback and reports, and meeting legal obligations. We do not use your data for advertising, profiling, or sale.

Service Providers We Share Data With

We do not sell or share your personal information for cross-context behavioral advertising. We rely on a small set of processors to run the service, each handling only what they need to:

• Sign-in providers: Google and Apple (only if you choose to sign in with them).
• Infrastructure: our self-hosted servers and database (Hetzner / Dokploy), Upstash (caching and job queue), and Cloudflare Stream (video hosting).
• Media catalog lookups: TMDB, Google Books, The New York Times Books, Deezer, and Podcast Index — used to fetch movie/TV/book/music/podcast details. These are outbound lookups and do not receive your personal data.
• Feature configuration: Statsig (mobile app only). We send only a random device identifier and derived true/false flags (e.g. adult vs. minor) — never your name, email, or date of birth.

Data Retention

We keep your personal information for as long as your account is active. When you delete your account (or request deletion), we suspend the account and queue your data for removal from our systems. Some records may be retained where required for legal, security, or audit purposes, for the minimum period necessary.

Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know, access, delete, and correct the personal information we hold about you, and to opt out of the sale or sharing of your personal information. We do not discriminate against you for exercising these rights.

• In the app: open Profile → Privacy & Data to request a copy of your data, deletion, or a correction, and to set your “Do Not Sell or Share” preference.
• By email: contact privacy@eellu.com. We verify requests using your account login.
• Do Not Sell or Share: see our Do Not Sell or Share My Personal Information page. We also honor Global Privacy Control (GPC) browser signals as an opt-out.

Children's Privacy

Eellu is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Policy

If we make changes to this privacy policy, we will notify you by updating the date at the top of this page. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy or our practices, please contact us at privacy@eellu.com