Kuuluu is an ambient social app: you share what you're doing right now with the people you choose, and your day log writes itself. Privacy is the product, so this policy is short and honest. The promises up front:
The data controller is Sami Huuskonen, operating as a sole trader (yksityinen elinkeinonharjoittaja, Finnish Business ID 3541927-4), Finland. Contact: support@kuuluu.app.
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address | Sign-in (one-time codes) and account-related messages. Nothing else — no newsletters. | Contract, Art. 6(1)(b) |
| Handle, display name, timezone | Your identity in the app; the timezone anchors your day log. | Contract, Art. 6(1)(b) |
| Activity sessions (what, when, for how long, your chosen visibility, optional note) | The core of the service: shown live or after the fact to the audience you picked, and rolled into your own day log. | Contract, Art. 6(1)(b) |
| Custom activity names | Activities you add yourself. Visible only to you and to people who can already see a session using one. | Contract, Art. 6(1)(b) |
| Social graph (follows, close-friend grants, blocks) | Deciding who sees what. | Contract, Art. 6(1)(b) |
| Reactions ("me too") | Lightweight social feedback on sessions. | Contract, Art. 6(1)(b) |
| Reports you file (reason, optional description) | Keeping the service safe; reviewed by the operator. | Legitimate interest, Art. 6(1)(f) |
That's the whole list. We collect no location, no contacts, no advertising identifiers, and no usage analytics. Reminders ("still going?") are generated locally on your device — no push token is stored on our servers.
The "world" layer shows things like "58 at the gym". These are totals computed on the server over a fixed activity catalog — statistics, not content. Your identity is never attached to them, nothing you type ever appears in them, small totals are deliberately rounded or hidden so individuals can't be singled out, and you can exclude any activity from world totals entirely.
Both act under data-processing agreements. No other third party receives your personal data, except if the law requires it.
Under the GDPR you can access, correct, export, delete, and object to the processing of your data. Most of this is built into the app (edit your profile and sessions; delete your account under You). For a full export of your data, or anything else, email support@kuuluu.app — we respond within 30 days. You also have the right to lodge a complaint with your supervisory authority; in Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).
Kuuluu is not directed at children under 13, and you must be at least 13 to use it.
If this policy changes in a way that matters, we'll say so in the app before the change takes effect. The current version always lives at this address.