Last Updated: 04.06.2025
1. Introduction
This Privacy Policy explains how Wullup (“we,” “us,” or “our”) collects, uses, and protects your personal information when you use our music social media platform.
We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).
2. Information We Collect
2.1 Information You Provide
- Account registration information (username, email, age verification)
- Profile information (bio, profile picture, music preferences)
- Content you post (music, comments, messages)
- Communications with us
2.2 Information We Collect Automatically
- Device information (device type, operating system, browser)
- Usage data (features used, time spent, interactions)
- Log data (IP address, access times, pages viewed)
- Location data (if enabled)
2.3 Analytics Information
We use PostHog for analytics, which collects:
- User interaction data
- Performance metrics
- Feature usage statistics
- Error reports
2.4 Information from Third Parties
- Music streaming service connections (if linked)
- Social media account connections (if linked)
- Authentication services
3. How We Use Your Information
3.1 Service Provision
- Create and maintain your account
- Provide platform features and functionality
- Process your requests and communications
- Facilitate music sharing and social interactions
3.2 Service Improvement
- Analyze usage patterns through PostHog analytics
- Improve platform performance and user experience
- Develop new features and services
- Conduct research and testing
3.3 Safety and Security
- Monitor for harmful or inappropriate content
- Prevent fraud and abuse
- Enforce our Terms and Community Guidelines
- Protect against security threats
3.4 Legal Compliance
- Comply with applicable laws and regulations
- Respond to legal requests and court orders
- Protect our rights and interests
4. Information Sharing
4.1 Service Providers
We share information with trusted service providers:
- PostHog: Analytics and user behavior analysis
- Netcup.de: Server hosting and infrastructure
- Music Partners: Licensed music content delivery
- Moderation Services: Content review and safety
4.2 Legal Requirements
We may disclose information when required by law or to:
- Comply with legal processes
- Protect safety of users or public
- Prevent fraud or illegal activities
- Enforce our Terms of Service
4.3 Business Transfers
Information may be transferred in connection with mergers, acquisitions, or asset sales.
5. Data Storage and Security
5.1 Data Location
- Primary servers located in Germany (netcup.de)
- Data may be processed in other EU countries
- No data transfer outside EU without adequate protections
5.2 Security Measures
- Encryption of data in transit
- Regular security assessments and updates
- Access controls and authentication
5.3 Data Retention
- Account data retained while account is active
- Deleted account data removed within 90 days
- Some data retained for legal compliance or safety
- Analytics data anonymized after 24 months
6. Your Rights Under GDPR
6.1 Access and Portability
- Request copies of your personal data
- Download your data in portable format
6.2 Correction and Updates
- Correct inaccurate personal data
- Update your profile information
6.3 Deletion
- Request deletion of your personal data
- Delete your account and associated data
6.4 Processing Restrictions
- Object to certain data processing
- Restrict processing in specific circumstances
6.5 Withdraw Consent
- Withdraw consent for optional data processing
- Opt out of marketing communications
7. Minors and Age Verification
7.1 Age Requirements
- Service limited to users 16 years and older
- We verify age during registration process
- Accounts of underage users will be terminated
7.2 Parental Rights
- Parents may request information about their minor children
- Parents may request account deletion for underage users
8. Cookies and Tracking
8.1 Essential Cookies
- Authentication and session management
- Security and fraud prevention
- Basic functionality
8.2 Analytics Cookies
- PostHog analytics tracking
- Performance measurement
- User experience optimization
8.3 Cookie Controls
- Manage cookie preferences in settings
- Disable non-essential cookies
- Browser-level cookie controls
9. International Data Transfers
When data is transferred outside the EU, we ensure:
- Adequate protection through legal mechanisms
- Standard Contractual Clauses for service providers
- Adequacy decisions for approved countries
10. Contact Information
Wullup GmbH
Im Vogelsang 14
35452 Heuchelheim, Germany\
Email: info@wullup.com
10.3 Supervisory Authority
You may contact your local data protection authority with concerns.
11. Policy Updates
We may update this Privacy Policy periodically. Material changes will be communicated through:
- In-app notifications
- Email notifications
- Website announcements
12. Additional Information
12.1 Third-Party Links
Our service may contain links to third-party websites with separate privacy policies.
12.2 Children’s Privacy
We do not knowingly collect data from children under 16.