Privacy Policy

1. Who We Are

Quluko ("Quluko", "we", "us", or "our") is a mobile application and associated web services that enable content creators to edit, convert, and distribute media content across social media platforms. Quluko is operated by Quluko LLC, a limited liability company registered in the United States.

For questions about this Privacy Policy or your personal data, contact us at: privacy@quluko.com

2. Information We Collect

2.1 Information You Provide Directly

• Account information: Email address, name, and password (or OAuth provider token) when you register.
• Profile information: Optional display name, avatar, and preferences you configure in the app.
• Social media account connections: OAuth access tokens for platforms you choose to link (Facebook, Instagram, YouTube, TikTok, LinkedIn, Pinterest, Snapchat, X). We store only the access tokens and basic profile identifiers (name, profile picture URL) returned by each platform. We never store your passwords for those platforms.
• Media content: Videos, audio, and images you upload or import into the app for editing and posting. Content is processed and then transmitted to your chosen platforms; we do not retain your media permanently unless you specifically save projects.
• Waitlist registration: If you sign up on our website before the app launches, we collect your email address and optionally your name.
• Support communications: Information you provide when contacting us for support.

2.2 Information Collected Automatically

• Device information: Device type, operating system and version, app version, device identifiers.
• Usage data: Features used, actions taken within the app, session duration, crash reports and error logs.
• Log data: IP address, browser type (for web), access timestamps, referring URLs.
• Analytics: We use Firebase Analytics (Google) to understand how users interact with the app. This data is aggregated and anonymised where possible.

2.3 Information from Third Parties

• Google Sign-In / OAuth providers: When you authenticate via a social login, we receive your name, email address, and profile picture from that provider, subject to your permissions.
• Social media platforms: When you import media or post content, we interact with those platforms' APIs and may receive metadata about your content or account (e.g., video titles, post IDs, follower counts).

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and authenticate you.
• To provide the core features of the app — editing tools, format conversion, content import, and direct posting.
• To sync your linked accounts and subscription plan across your devices.
• To send you transactional emails (account creation, password reset, subscription confirmations).
• To send you marketing and product update emails, where you have consented. You can opt out at any time.
• To diagnose and fix technical issues, crashes, and bugs.
• To improve the product based on usage patterns and feedback.
• To enforce our Terms of Service and prevent fraud or abuse.
• To comply with legal obligations.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, our legal basis for processing your personal data is:

• Contract: Processing necessary to provide you with the services you've signed up for.
• Legitimate interests: Analytics, security, fraud prevention, and product improvement — balanced against your privacy rights.
• Consent: Marketing communications and any optional data collection where we ask for your permission.
• Legal obligation: Where required to comply with applicable laws.

5. How We Share Your Information

We do not sell your personal data. We share information only in the following limited circumstances:

• Social media platforms you choose to connect: When you post content, your media and associated metadata are sent to the selected platforms via their APIs. This is subject to their respective privacy policies.
• Service providers: We use trusted third-party providers who process data on our behalf, including: Supabase (database hosting), Google Firebase (authentication and analytics), Resend (transactional email), and cloud infrastructure providers. These parties are contractually bound to use your data only for services we have requested and to keep it secure.
• Business transfers: If Quluko is acquired, merged, or undergoes a significant asset sale, your data may be transferred to the successor entity. We will notify you in advance.
• Legal requirements: We may disclose your information if required by law, regulation, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Quluko, our users, or others.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Media files you upload for one-time posting are deleted from our servers within 72 hours of the posting operation completing or failing. Saved projects are retained until you delete them or delete your account.

Waitlist email addresses are retained until you unsubscribe or until 12 months after the app launches, whichever comes first.

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and encourage you to use a strong, unique password for your Quluko account.

If we become aware of a data breach that affects your personal data, we will notify you as required by applicable law.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain types of processing, including direct marketing.
• Restriction: Request that we restrict the processing of your data in certain circumstances.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at privacy@quluko.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

California residents (CCPA): You have the right to know what personal information we collect and how we use it, to opt out of the sale of personal information (we do not sell your data), and to request deletion. Contact us at the address above to exercise these rights.

9. Children's Privacy

Quluko is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@quluko.com and we will delete it promptly.

10. Third-Party Links and Social Platform Policies

Quluko integrates with third-party social media platforms. When you connect your accounts, you are also subject to those platforms' privacy policies. We encourage you to review the privacy policies of each platform you choose to link. We are not responsible for the data practices of any third-party platforms.

11. International Data Transfers

Quluko is operated from the United States. If you access our services from outside the United States, your personal data may be transferred to and processed in the US. For users in the EEA/UK, we ensure appropriate safeguards are in place in accordance with applicable data protection law (such as Standard Contractual Clauses where required).

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email (if you have an account) or by posting a prominent notice on our website. The "Last Updated" date at the top of this page reflects when the most recent changes were made. Your continued use of Quluko after the effective date of any change constitutes your acceptance of the updated policy.

13. Contact Us

For privacy-related questions, requests, or concerns, please contact us at:

Email: privacy@quluko.com
General: hello@quluko.com
Website: quluko.com