Privacy
Short version: Lillith keeps what it needs to know you, never sells it, and deletes it when you ask. Everything below says how.
Who is responsible
The data controller is Lillith, publisher of the Lillith app and of lillith.app. For any question about your data, write to privacy@lillith.app. A person reads it.
What we collect
- Email address, when you join the founders list or contact us, with the answer you give to our one question.
- Birth date, time and place, when you share them in the app so your chart can be drawn.
- Your messages with Lillith and with the guides, so the conversation can continue and be remembered.
- Photos you choose to send, for the scan or in a conversation. Only what you send, never your library.
- A device identifier created by the app, so your account works without a password.
- Your purchase ledger: which credit packs you bought and how credits were spent. Payment itself is handled by Apple; we never see your card.
- Site analytics: page views on lillith.app with a hashed network address and browser signature. No cookies, no advertising trackers.
Why we use it
- To run the app: draw your chart, carry your conversations, deliver your daily reading, keep your credits right.
- To write to you: the founders emails you asked for, and answers to your requests. Every email has an unsubscribe link.
- To keep Lillith safe and honest: preventing abuse, fixing bugs, and understanding which pages people visit.
- To meet our legal duties, for example keeping purchase records.
The legal bases are the contract between you and Lillith when you use the app, your consent for the founders list and for the birth details you choose to share, and our legitimate interest in keeping the service secure.
How long we keep it
- Account data, birth details, messages and photos: as long as your account exists. Delete the account and they go with it.
- Founders list email: until you unsubscribe or ask us to remove it.
- Purchase records: for the period French law requires for accounting, then deleted.
- Site analytics: kept in aggregate form, without any way to point back to you.
Who processes it for us
We work with a small number of providers, each bound by a data processing agreement and each receiving only what its job requires.
| Provider | What for |
|---|---|
| Vercel | Hosting of lillith.app and of the app's API |
| Railway | Database and background services |
| Anthropic | The language model behind Lillith the guide and her memory, the reading of photos you send, and translation of the guides' messages |
| OpenAI | Transcription of the voice messages you record |
| Resend | Sending our emails |
| Apify | Reading a public Instagram or TikTok link you paste for the scan |
Some of these providers operate outside the European Union. Where that is the case, transfers rest on the European Commission's standard contractual clauses or on an adequacy decision.
Your rights
Under the GDPR you can ask to see your data, correct it, receive a copy, restrict or object to its use, and have it deleted. Two ways to do that:
- In the app: delete your account from the settings. Your data is removed from our live database right away.
- By email: write to support@lillith.app from the address on your account, for deletion or for an export. We answer within 30 days at most, usually much sooner.
If you believe we handled your data badly, you can complain to the CNIL, the French data protection authority.
Cookies
None. lillith.app sets no cookies and loads no third party trackers. The only measurement is a page view with a hashed network address, which cannot be turned back into you.
Children
Lillith is for adults. You must be 18 or older to use the app or to join the list. If we learn that a younger person has an account, we delete it.
Changes
When this policy changes in a way that matters, we say so in the app and update the date at the top of this page.
A question this page did not answer?
Contact support