Privacy Policy

1. Who we are

Felku is a sticker creation service, available through the WhatsApp bot and the native app (iOS and Android), operated by:

This policy describes how we collect, use, and protect your information when you use our service, whether through the WhatsApp Business Platform (Meta) or through the Felku app.

2. Data we collect

Through the WhatsApp bot:

• Phone number: used to identify your account and send the stickers you create.
• WhatsApp profile name: used to personalize communication.
• Images, videos, and GIFs you send: processed temporarily to create stickers. The original content is not stored after processing.
• Usage data: counters of stickers created, interactions with the assistant, and command history, for limit control and service improvement.
• Survey responses: when you choose to answer a survey within the bot, we record your responses and the profile data you provide (such as age range, gender, and region). Participation is always voluntary.

Through the Felku app:

• Device identifier: generated locally by the app, with no personal information, used to recognize your install.
• Push notification token: used to send alerts and updates within the app.
• Email: if you create an account in the app, we use your email for authentication and account recovery.
• Subscription status and history: whether and when the Felku Pro plan is active, processed by our subscription management partner (see Section 4). We do not have access to your card number or payment data itself — that stays with Apple or Google.
• App usage data: stickers created, screens visited, and features used, to improve the product.
• Advertising data, if you do not subscribe to Felku Pro: the device advertising ID, app and installation identifiers, IP address, device model and operating system, connection type, interactions with ads (views, taps) and ad diagnostics data (such as crashes and loading time). It is collected by the ad SDKs built into the app — see Section 4.1.
• Astral Chart data, when you use that feature: birth date, time, and location you provide, used exclusively to calculate your astral chart.
• AI image photos and requests, when you use that feature: the photo or sticker you choose to edit and the text of your request, in "Edit with AI" or "Create with AI". None of this is collected unless you tap to use the AI.

In optional bot features:

• Habit buddies: if you invite someone to track a habit with you, we record the chosen habit and each person's progress. The person you invite sees your progress, and you see theirs — that is the point of the feature. No other data of yours is shared, and either side can end the pairing.
• Prediction pools: when you take part in a pool run by Felku, we record your predictions and the result. Other participants may see your first name in the ranking.
• Product search: when you ask for a shopping suggestion, the search term is sent to our catalogue partners to fetch the offers (see Section 4).

Through the Felku Empresas page (felku.com.br/empresas):

• Business contact details: name, company, job title, work email and, if you choose, WhatsApp, entered in the cost review (raio-x) form.
• Simulation figures: the message volumes you typed into the calculator, sent along with the request when you used them.

The calculator runs in your browser. The numbers you type into it only reach us if you submit the form. Without a submission, we only record, anonymously and without identifying you, in our own analytics tool, that the page was opened, that the contact button was clicked, that the calculator was used and which range the estimated monthly bill fell into.

3. How we use your data

• Create and send stickers as requested by you.
• Manage your account, usage limits, and subscription plan, on the bot and/or the app.
• Process subscription payments.
• Send notifications about pending stickers and service updates.
• Improve the service and fix technical issues.
• Conduct opinion surveys and generate aggregated reports and statistics, when you choose to participate (see Terms of Use, Section 8.1).
• Calculate and deliver your Astral Chart reading, when you use that feature.
• Show ads in the app to people who do not subscribe to Felku Pro, which keeps creating sticker packs free.
• Generate the image you asked for with the AI image feature and check the content before delivering it, when you use that feature.
• Respond to your cost review (raio-x) request and talk to you about it, when you fill in the form on the Felku Empresas page.

Each of these purposes has its own legal basis under article 7 of the Brazilian data protection law (LGPD):

• Performance of a contract — creating and sending stickers, managing your account and limits, processing payments, delivering the Birth Chart you purchased and generating the image you asked the AI for. Without this data the service cannot be provided.
• Consent — opinion surveys, promotional notifications, the cost review (raio-x) request on the Felku Empresas page (through the form checkbox) and, where the law requires it (such as in the European Union and the United Kingdom), personalized ads. You choose to take part, and may withdraw consent at any time without losing access to the rest of the service.
• Legitimate interest — fixing technical problems, preventing abuse and fraud, producing aggregate statistics that do not identify you, and showing ads in the free app (with the controls in Section 4.1).
• Compliance with a legal obligation — keeping tax and transaction records for the periods required by law.

4. Data sharing

We do not sell or rent your personal data. Apart from advertising in the app, described in Section 4.1, we do not share your data with third parties for marketing purposes. We share data only with:

• Meta / WhatsApp Business Platform: to send and receive messages. Meta processes the data according to its own privacy policy.
• Stripe: to process subscription payments made through the bot (PIX/credit card). Only the data necessary for the transaction is shared.
• Apple (App Store) and Google (Google Play): when you subscribe to Felku Pro through the app, payment is processed entirely by them — we do not receive your card data. We only receive confirmation that the subscription is active, through our subscription management partner (RevenueCat).
• RevenueCat: a platform that manages your app subscription status (active, canceled, renewed) between Felku and the Apple/Google stores. It processes only subscription data, not payment data.
• Lomadee and Shopee: when you use product search, we send the search term in order to fetch the offers. Shopee links also carry an internal search code, which lets us know which search led to a purchase — it contains no name, number or information about you, and only we can relate it back to your account.
• Anthropic: when you use the Birth Chart, Tarot or Synastry, the already-calculated positions of your chart and your first name are sent to Anthropic, which generates the reading text using artificial intelligence. The content is used only to produce your reading and is not used to train models.
• OpenAI: only when you tap to use "Edit with AI" or "Create with AI" in the app, we send to OpenAI, in the United States, the photo or sticker you chose to edit (if any) and your request text. OpenAI uses this data to generate the image you asked for and to check whether the request text is allowed. Before delivery, the photo you sent and the generated image also go through an automated content check on our own servers; a rejected request or image is not delivered. Under the current API terms, OpenAI does not use this data to train its models, and it may keep it for up to 30 days to monitor for abuse and safety, unless the law requires longer retention or the content is flagged for safety review. Do not upload other people's photos without their permission.
• Sentry: technical error monitoring. It receives information about system failures; authentication headers and message bodies are stripped before sending.
• Supabase: for secure storage of account data (number, plan, counters). Data hosted on servers with encryption.
• Slack: when you request a cost review (raio-x) through the Felku Empresas page, your name, company, job title, contact details and simulation figures reach our team as an internal alert in Slack, which is where we answer these requests.
• Legal obligations: when required by Brazilian law or court order.
• Market research partners: when you participate in the Opinion Program (see Terms of Use, Section 8.1), we share the survey results with the partner research company in an aggregated or anonymized form. We never share your phone number, your name, or any data that individually identifies you.

OpenAI and Anthropic process the data described above for those features in the United States. This international transfer relies on article 33, IX, of the LGPD, because it is necessary to carry out what you yourself requested (article 7, V): the data is only sent when you tap to use the AI image feature, the Birth Chart, Tarot or Synastry.

Survey responses are handled in an aggregated or anonymized form before any sharing. The research partner receives statistics and trends from the pool of respondents — never the identity, phone number, or contact details of specific individuals. The delivery of rewards (credits) is carried out exclusively by us, within WhatsApp.

4.1 Advertising in the app

The Felku app is free and shows ads to people who do not subscribe to Felku Pro: a video you can watch to create a sticker pack without paying, and banners on some screens. Felku Pro subscribers see no ads. The WhatsApp bot does not show ads.

Ads are served by Google AdMob. On Android, other ad networks may compete for the same slot through AdMob: Meta Audience Network (Meta), Pangle (ByteDance) and Liftoff Monetize (Vungle). This does not increase the number of ads: it only decides which network fills the slot that already exists.

To choose, show and measure ads and to prevent fraud, these companies receive directly from the app, through their SDKs: the device advertising ID (on Android, or on iPhone if you allow tracking), app and installation identifiers, the IP address (from which an approximate location, such as city or country, is estimated), device model and operating system, language, connection type and carrier, interactions with ads, and ad diagnostics data (such as crashes and loading time). We do not send them your name, phone number, email, or your photos and stickers. Each company handles this data under its own privacy policy: Google, Meta, Pangle and Liftoff. These companies may process the data outside Brazil.

How to control it:

• Android: in your device Settings → Google → Ads (or Privacy → Ads), you can delete or reset your advertising ID. Without it, ads are no longer personalized through that ID.
• iPhone: Apple's advertising identifier is only used if you allow tracking when the system asks. You can change this at any time in Settings → Privacy & Security → Tracking.
• Where the law requires consent (such as the European Union and the United Kingdom): when you open it, the app asks whether you accept personalized ads. Declining does not stop you from using the app.
• Brazil: the app requests only non-personalized ads from the networks, for all users. The app may be used from age 13 (see the Terms of Use).
• Subscribing to Felku Pro removes all ads from the app.

4.2 Cookies and ads on the website

The felku.com.br website measures visits with its own tool, without cookies and without identifying you. Beyond that, only with your permission in the cookie notice:

• Google Ads: measures whether our ads brought visits to the site. If you decline or do not choose, it works without storing cookies in your browser: Google receives only a signal without identifiers (with the IP address and browser type) to estimate campaign results. On the app install page the notice does not appear, and Google Ads always works this way, without cookies.
• Google AdSense: some pages of the site may show Google ads, always non-personalized and tagged for a teen audience (no interest profile and no remarketing). The cookies AdSense uses limit ad repetition and fight fraud. If you decline, no ad is loaded.

Payment pages, the app install page and legal documents never show ads. Your choice is stored only in your browser. To change it at any time, tap "Cookie preferences" in the site footer. Google may process this data outside Brazil.

5. Storage and security

Your data is stored on secure servers with encryption in transit and at rest. Images and videos are processed temporarily and removed after the sticker is created. The stickers created are stored to allow resending when necessary, for up to 60 days after creation. After that period the copy we keep is deleted automatically — the sticker you already received on WhatsApp or saved to your device remains yours and is not affected.

6. Your rights

Under the Brazilian General Data Protection Law (LGPD — Brazil's data protection law), you may at any time:

• Request access to your personal data.
• Request the deletion of your data by sending "delete my data" in the WhatsApp conversation, or through the app's support.
• Stop using the service by no longer sending messages, or by uninstalling the app.

7. Data retention

We keep each type of data for a different period, according to its purpose:

• Images and videos you send to turn into stickers: deleted right after the sticker is created. We do not keep the original file. (Photos sent to the AI image feature follow their own period, below.)
• Created stickers (resend copy): up to 60 days after creation.
• Photos sent to and images generated by the AI: on our side, the photo you send is deleted within 24 hours; the generated image is available to download for up to 24 hours and is then deleted from our copy. The one you save as a sticker follows the rule for created stickers. At OpenAI, the period described in section 4 applies.
• Reported images: when you report an AI-generated image, we keep the image, the reason and the comment (if you write one) for up to 90 days to review the report. If you delete your account before that, they are deleted with it.
• Text of your AI request: it is not stored in a database or in logs; on our side, it is deleted as soon as the request finishes and, if there is an error, within 24 hours.
• Account data and usage history: while you use the service. After 12 months of inactivity, it may be automatically removed.
• Habits, pools and product searches: while the feature is active for you. Ending a habit pairing deletes the link between the two accounts.
• Felku Empresas contact details: for up to 12 months after our last contact with you. You can ask for deletion earlier, at any time.
• Records required by law (such as payment receipts): for as long as applicable legislation requires, even after the other data is deleted.

You may request deletion before these periods at any time, through the channels in section 6.

8. Changes

We may update this policy periodically. Significant changes will be communicated via WhatsApp or through the app.

9. Contact

For questions about privacy or to exercise your rights, contact us by email at [email protected] or via WhatsApp +55 11 97877-5451.