Privacy Policy

01About this policy

This policy covers the LilyChat app for iOS, the website hosted at api.lilychat.cc, and any features or communications connected to them (collectively, the "Services"). In this policy, "LilyChat", "we", "our" and "us" mean the operator of the Services. Websites or services run by others that we link to are governed by their own policies.

02What we collect

Provided by you

• Account information: your email address, display name and an encrypted password, or the anonymous identifier Apple shares if you sign in with Apple.
• Persona content: names, bios, traits, profile pictures you upload and memory notes.
• Chat content: the messages you write and the AI responses generated in your chats.
• Communications: messages you send to support and any reports you submit.

Collected automatically

• Device and app data: device type, OS version, app version, language setting and time zone.
• Usage data: which features are used, how long sessions last and errors encountered, analysed in aggregate.
• General location: your country or region, estimated from your IP address. We do not access precise GPS location.
• Crash reports: technical logs that help us diagnose and fix problems.

Payments

Purchases are completed through Apple's App Store. We receive your subscription status and a transaction reference from Apple; we never receive or store your card number.

03How we use information

• Operating your account and keeping your personas and chats in sync between devices.
• Generating persona replies and maintaining memory notes.
• Verifying purchases and providing access to premium features.
• Keeping the community safe: screening content, reviewing reports and enforcing our Terms of Use.
• Responding to your questions and sending essential notices such as security alerts or policy updates.
• Diagnosing bugs, monitoring performance and improving the Services.
• Meeting legal requirements and protecting the rights, property and safety of users and the public.

For users in the EEA, UK and similar jurisdictions, our legal bases are: performing our contract with you; our legitimate interest in providing a secure, functioning service; your consent where we ask for it (you may withdraw it at any time); and compliance with the law.

04AI processing

When you send a message, the recent conversation and your persona's settings are transmitted to a third-party AI model provider so that a reply can be generated. These providers act on our behalf, process the data only to return a response, and are not permitted to use it to train their models.

05Sharing

We don't sell personal information. We share it only in these situations:

• Service providers that host our servers, databases and file storage.
• AI providers that generate replies, as described in section 04.
• Apple, for Sign in with Apple and purchase validation.
• Analytics and crash-reporting tools, to measure stability and usage in aggregate.
• Authorities or other parties, where the law requires it or it's necessary to prevent fraud, abuse or harm.
• A successor business, if LilyChat is part of a merger, acquisition or asset sale. We will let you know if this happens.

Every provider we work with is bound to protect your information and to use it only as we instruct.

06Ads & tracking

Parts of the free experience may show advertisements delivered by Google AdMob. Your chats and persona content are never shared with advertisers. LilyChat only reads your device's advertising identifier (IDFA) if you agree through Apple's App Tracking Transparency prompt. If you say no, you may still see ads, but they won't be personalised with that identifier. You can update your choice at any time in Settings → Privacy & Security → Tracking.

Our website only uses cookies that are strictly necessary for it to work. It does not use third-party advertising cookies.

07Retention

Some information may be kept longer if the law requires us to.

08Protection

Traffic between the app and our servers is protected with TLS encryption, and stored data is encrypted at rest. Internal access is limited to staff who need it and requires multi-factor authentication. While no system can be guaranteed 100% secure, we will notify you as required by applicable law if a security incident affects your information.

09Your choices & rights

Depending on your location, you may be entitled to:

• request access to, and a copy of, your personal information;
• have inaccurate information corrected;
• have your information and account deleted;
• object to, or ask us to limit, certain processing;
• withdraw consent you previously gave;
• opt out of the "sale" or "sharing" of personal information (note: we do not sell it);
• complain to a data protection regulator in your country.

Delete in the app: open Me → Settings → Delete account. Other requests: email [email protected] from the email address on your account. We'll reply within 30 days and may first ask you to confirm your identity. Exercising your rights will never result in less favourable treatment.

10Minors

The Services are designed for adults aged 18 and over and are not aimed at children. We don't knowingly collect information from anyone under 18. If we discover that we have, we will close the account and delete the related information. If you think a minor is using LilyChat, please contact us.

11Data transfers

Your information may be processed in countries other than where you live, including the United States, by us or our service providers. When required, we use appropriate safeguards, such as the EU Standard Contractual Clauses, for these transfers.

12Changes to this policy

We may revise this policy as the Services evolve. The effective date at the top of this page reflects the latest version. For important changes, we'll notify you in the app or by email before they apply.