Privacy Policy

Kululu (“we”, “us”, or “our”) is operated by Crunchy Granola LLC. We value your privacy and are committed to protecting your personal information. This Privacy Policy (“Policy”) explains how we collect, use, store, and share your data when you use our services via our website.

Please take a moment to read our Policy, as well as our Terms of Service. If you have any questions or concerns, feel free to email us at hello@kululu.me. If you do not agree with this Policy do not access or use our Services.

If we make any major changes in this Policy, we will send you an e-mail with the new version, but we insist, come visit us from time to time to keep yourself updated about it.

Key points of this term:
‍- We do our best to keep your data safe and secure.
- We’ll not sell/share any of your photos without your permission, except when required to by law, police or official governmental entity.
- We're not responsible by any means of any photo/video/media uploaded to your account. It's your responsibility to make sure every media uploaded to your digital wall/shared album is safe, appropriate and aligned with any law and commercial trademarks.

‍

1. Definitions

• “Services” means our platform features, including wedding event tools such as RSVP websites, speech and vow generators, albums, and planning resources.
• “Website” refers to https://www.kululu.com.
• “Personal Data” means data that identifies you as a person (e.g. name, email, uploaded content).
• “Data” refers to any information collected from users, including usage and device data.
• “Processing” means any operation performed on personal data (e.g. collecting, storing).
• “Controller” means Crunchy Granola LLC, which decides how and why your data is processed.
• “Processor” means a third party that processes data on our behalf.
• “GDPR” refers to the General Data Protection Regulation (EU).
• “CCPA” refers to the California Consumer Privacy Act.
• “Australian Privacy Act” means the Privacy Act 1988 (AU).
  ‍

2. What Data We Collect

All the information required and processed by us, as the controllers, are adequate, limited and necessary for our Services. We collect Data in different ways and use different technical means. To explain in a more transparent/easy way we divided the aspect of Data in two ways such as appointed on definitions topic above:

Personal Data (provided by you):

• Name
• Email address
• Uploaded content (e.g. images, videos)
• Other information you choose to provide when using our services, such as messages, preferences, or form inputs, which may be necessary to deliver features, personalize your experience, or provide support.

Device and Usage Data (collected automatically):

• IP address
• Browser and device info
• Language and location data
• Pages visited and actions taken

We use cookies and similar technologies to enable essential functionality and enhance user experience. You may disable cookies via your browser settings, though this may affect service performance.

‍

3. Subprocessors We Use
To operate Kululu effectively, we use the following subprocessors who may process some of your data. All third parties are GDPR/CCPA-compliant. We only share your data with these subprocessors for the specific services they provide to us, and under data protection agreements.

• Firebase (Google Cloud Platform) – Used for backend services including hosting, real-time database, authentication, and storage of  content, e.g., uploaded photos and videos. (US)
• Simple Analytics – Used to understand anonymous user behavior on our marketing website (EU - NL).
• Mixpanel – Used for analytics to monitor feature usage,  flows, and to optimize onboarding and engagement (US).
• Mailgun – Used for sending transactional emails such as welcome emails, account verification, and event updates (US).
• Intercom – Used for customer support, in-app chat, knowledge base (US).
• Cloudflare – Used for content delivery (CDN), load balancing, and protecting Kululu from malicious traffic and DDoS attacks (EU - SE).
• Paddle – Used for managing subscriptions, payment processing, invoicing, and acting as our merchant of record (EU - UK).
• Google Ads – Used for running and tracking our own marketing and advertising campaigns. Not for retargeting users without consent (US).
• Rewardful – Used for managing affiliate tracking, referrals, and calculating commission payments to our partners (CA).

4. Children’s Privacy

Kululu is intended for individuals who have reached the age of majority in their jurisdiction. We do not market to, or knowingly collect data from, children under 13.

5. How We Protect and Store Your Data

Your data is securely stored on Google Cloud (Firebase) servers located in the United States. We use industry-standard encryption and access controls to protect your data. All storage and processing are done with appropriate safeguards as required by GDPR, CCPA, and the Australian Privacy Act. Please refer to our Security page for more information.

7. Your rights and our procedures

As highlighted above, you have rights related to Personal Data, as described:

• Access to your Personal Data at any time;
• Edit your account details, making sure your Personal Data is updated;
• Access updated information about your Personal Data held by us and the adopted technical means;
• Request restrictions to your Personal Data processing or deletion;
• Report any infringements to our policy and procedures.

You can demand your rights at any time by our email hello@kululu.me and we will guarantee them.

In compliance with the CCPA, we will not incur the following conducts: Selling personal information; retaining, using, or disclosing personal information for purposes other than as required for the services we provide to you; and Retaining, using, or disclosing the personal information outside of the direct relationship that we have with you; all as set forth and described in the CCPA, as applicable.

Please note that any breach or leak of Data will be reported by email and at our Website on a timely manner.
‍

7.1 GDPR Rights (EU Users)

In addition to the above, EU users have the right to:

• Restrict Processing: Limit how we process your data
• Withdraw Consent: Withdraw consent for consent-based processing
• Lodge Complaints: File complaints with supervisory authorities

7.2 CCPA Rights (California Users)

California residents have the right to:

• Know: What personal information we collect and how it's used
• Delete: Request deletion of personal information
• Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
• Non-Discrimination: Not be discriminated against for exercising these rights

7.3 Australian Privacy Rights (Privacy Act 1988)

Australian residents have the right to:

• Access and Correction: Request access to and correction of your personal information
• Complaints: Lodge complaints about our privacy practices with us or the Office of the Australian Information Commissioner (OAIC)
• Marketing Opt-Out: Opt out of direct marketing communications
• Breach Notification: Be notified of eligible data breaches that may cause serious harm

7.4 Marketing Communications

You can opt out of marketing communications by:

• Clicking unsubscribe links in emails
• Contacting us at hello@kululu.me

7.5 International Data Transfers

Your information may be processed in countries other than your residence. We ensure adequate protection through:

• Adequacy Decisions: Transfers to countries with adequate protection levels
• Standard Contractual Clauses: EU-approved contract terms
• Certification Programs: Privacy Shield successors and similar frameworks

8. Data Retention

We retain your data according to your purchased plan and usage. If your plan expires or becomes inactive, we will notify you via email at least 30 days before deleting your data. This gives you the opportunity to renew or back up your content.

You may also request deletion at any time, and we will process the request without undue delay.

Additionally, we reserve the right to immediately delete your data if your use of our service violates our Terms of Use, including but not limited to the upload of prohibited content or abuse of platform functionality.

9. Changes to this Policy

We may update this Privacy Policy occasionally. If we make significant changes, we’ll notify you via email or on the website.
‍

10. Contact Us

For any questions, concerns, or privacy-related requests, contact:

Crunchy Granola LLC
Email: hello@kululu.me
Website: https://www.kululu.com