Privacy

Who is responsible

The data controller is Lillith, publisher of the Lillith app and of lillith.app. For any question about your data, write to privacy@lillith.app. A person reads it.

What we collect

• Email address, when you join the founders list or contact us, with the answer you give to our one question.
• Birth date, time and place, when you share them in the app so your chart can be drawn.
• Your messages with Lillith and with the guides, so the conversation can continue and be remembered.
• Photos you choose to send, for the scan or in a conversation. Only what you send, never your library.
• A device identifier created by the app, so your account works without a password.
• Your purchase ledger: which credit packs you bought and how credits were spent. Payment itself is handled by Apple; we never see your card.
• Sign in details, if you sign in with Apple, Google or an email code: your email address, your name if the provider shares it, and the provider's account identifier, so your account follows you to a new phone.
• The people you add: the name you give them, their birth date, time and place, your relationship, and the pronoun you choose for them if you choose one. Used only to read your connection with them, never shown to anyone else. Please add only people who would be fine with it.
• Sky Progress: your tasks and habits, the days you tick them, and the settings you choose for it.
• Cycle phase, only if you turn it on: the start date of your last period and your usual cycle length, used only to tune Movie Night to tonight. It is off by default and you can switch it off at any time.
• Body Goals, only if you opt in (18 and over): the photo you take is read once and never stored. We keep the goals you pick, the plan and the habits you add. The optional strongest self preview is made by our image provider, sent straight back to your phone and not kept by us.
• Movie Night: your film and series preferences, what you watched and how you rated it, the titles you never want to see, and, if you link a partner, the choices you make together. Film data comes from TMDB; nothing about you is sent to TMDB.
• Bond Visualizer: the dynamic you choose, the gender you pick for the fictional person, and your private ratings. If you choose to add your face, your photo is sent to our image provider for that one request; the images made from it and your guide are kept 30 days, or longer only if you save them.
• Même ciel: what you choose to post publicly (photos, videos, captions, comments), your public profile (handle, name, bio, photo and the signs you show), your likes and follows, and the reports and blocks you make. Posts and comments are checked by an automated moderation service before they appear.
• Things read once and not kept: Bubble screenshots, palette selfies and voice recordings are read and then discarded. Only the reading, the colours or the transcribed words are kept.
• App usage: which features you open and when, your notification token if you allow notifications, and how many AI requests your account makes, so we can keep costs and abuse in check. Never the content of what you read or write.
• Site analytics: page views on lillith.app with a hashed network address and browser signature. No cookies, no advertising trackers.

Why we use it

• To run the app: draw your chart, carry your conversations, deliver your daily reading, keep your credits right.
• To write to you: the founders emails you asked for, and answers to your requests. Every email has an unsubscribe link.
• To keep Lillith safe and honest: preventing abuse, fixing bugs, and understanding which pages people visit.
• To meet our legal duties, for example keeping purchase records.

The legal bases are the contract between you and Lillith when you use the app, your consent for the founders list and for the birth details you choose to share, and our legitimate interest in keeping the service secure.

How long we keep it

• Account data, birth details and messages: as long as your account exists. Photos you send to the Scan are read and then discarded, only the reading is kept. Delete the account and everything goes with it.
• Founders list email: until you unsubscribe or ask us to remove it.
• Purchase records: for the period French law requires for accounting, then deleted.
• Site analytics: kept in aggregate form, without any way to point back to you.
• Bond Visualizer images and guides: 30 days after purchase, unless you save them.
• Même ciel posts, comments and profile: until you delete them or your account.
• Body Goals photos, Bubble screenshots, palette selfies and voice recordings: not kept at all.

Who processes it for us

We work with a small number of providers, each bound by a data processing agreement and each receiving only what its job requires.

Some of these providers operate outside the European Union. Where that is the case, transfers rest on the European Commission's standard contractual clauses or on an adequacy decision.

Your rights

Under the GDPR you can ask to see your data, correct it, receive a copy, restrict or object to its use, and have it deleted. Two ways to do that:

• In the app: delete your account from the settings. Your data is removed from our live database right away, together with your Même ciel posts and comments and the images stored for you.
• By email: write to support@lillith.app from the address on your account, for deletion or for an export. We answer within 30 days at most, usually much sooner.

If you believe we handled your data badly, you can complain to the CNIL, the French data protection authority.

Cookies

None. lillith.app sets no cookies and loads no third party trackers. The only measurement is a page view with a hashed network address, which cannot be turned back into you.

Children

Lillith is for adults. You must be 18 or older to use the app or to join the list. If we learn that a younger person has an account, we delete it.

Changes

When this policy changes in a way that matters, we say so in the app and update the date at the top of this page.