Privacy Policy

Who we are

LILO is the service described in this policy. In this policy, “we” and “us” refer to the people responsible for operating LILO. Questions and privacy requests can be sent to contact@lilo.app.

Data we process

Depending on how you use LILO, we process:

• Account information, such as your email address, username, display name, authentication provider, and internal user identifier.
• Content you provide, including Orbs saved in your Orbithek (such as saved links, thoughts, images, audio or video), metadata, related URLs, saved locations, coordinates, titles, descriptions, private notes, source links, codes, tags, collections, sharing choices, and uploaded photos or files.
• Location data, including precise coordinates, timestamps, and accuracy information when you save your current location or explicitly enable background location gathering.
• Social and notification data, including friend requests, friendships, collection invitations and memberships, notification status, and when a notification is seen or read.
• Technical and security data, such as a LILO-generated installation identifier, extension credentials, request and audit information, IP address, browser or device information, and diagnostic information needed to operate and secure the service.
• Communications you send to us, including support requests and beta feedback.

How we use data

We use this data to:

• authenticate users and maintain accounts;
• store, synchronize, display, export, and share content as requested;
• provide maps, location features, and optional background gathering;
• operate the iOS Share Extension and macOS Safari Extension;
• protect LILO, prevent abuse, investigate errors, and maintain reliability;
• respond to support, privacy, and legal requests.

We do not sell personal data. LILO contains no third-party advertising and does not use personal data to track you across other companies’ apps or websites.

Location controls

Foreground location access is used when you ask LILO to use your current position. Background location gathering is optional and starts only after you enable it and grant the required system permission. You can disable it in LILO and revoke location permission at any time in Apple system settings. Map selection remains available without location permission.

Sharing and visibility

Your Orbs, private notes, and private location data are restricted to authorized access. LILO also lets you deliberately share locations with accepted friends, registered members, or the public, and collections with their participants, registered members, or the public. You can also choose whether your member profile is available to friends, registered members, or the public. The visibility option shown for the content or profile controls who can access it. Profile details include your bio, city or region, and the month and year when you joined LILO. Public locations, collections, and member profiles may be indexed by search engines and reshared by other people. Restricted content and access links are not intended for search indexing, but third-party services may retain previews that they have already generated.

Optional AI suggestions

Where available, you can ask AI to suggest a name and description for a location. When you use this feature, a resized copy of the photo you choose is sent through Vercel AI Gateway to the AI provider shown in the form (OpenAI or Google). This copy excludes original photo metadata; we do not include your coordinates or private notes in the request. The photo itself may still contain personal information. Provider processing and retention follow their terms. Suggestions are only added to your draft when you choose to use them, and your existing visibility settings govern the location when saved.

Assistants you connect

You can optionally connect a third-party assistant to LILO. We use Clerk to authenticate the connection and record the permissions you grant. Requests are limited by those permissions and your existing access rights. Depending on your grant and the tools used, responses may include saved locations, coordinates, private notes, collection contents, profile details, temporary photo links, or a location export. Authorized tools may also change or delete content or change its visibility.

The assistant provider receives the requested data and processes it under its own privacy policy. Treat temporary download links as private: anyone holding a valid link may be able to access its content. Signing out of LILO does not revoke an assistant’s separate authorization. LILO currently has no self-service page for revoking individual assistant connections. Contact us if you suspect misuse or need help with access to your data.

Service providers

We use service providers to operate LILO. They process data for the purposes described above and under their agreements with us:

• Clerk for authentication and account management;
• Supabase for databases, file storage, and backend services;
• Vercel for website hosting, delivery, and optional AI request routing;
• OpenAI or Google for optional photo-based AI suggestions, as selected in the form;
• Apple for platform services such as Sign in with Apple, Maps, TestFlight, and App Store distribution;
• OpenStreetMap map-tile services on relevant web pages, which receive ordinary network information such as your IP address.

We may also disclose data when required by law, to protect users or the service, or as part of a business reorganization subject to appropriate safeguards. We do not disclose personal data to advertising networks or data brokers.

Legal bases and international processing

Where the European General Data Protection Regulation applies, we process data to provide the service you request, based on your consent where required—particularly for optional device permissions—based on our legitimate interests in securing and improving LILO, and to comply with legal obligations. Some providers may process data outside your country. Where required, international transfers are protected by recognized legal safeguards.

Retention and deletion

We retain account and service data while your account is active and for as long as needed to provide LILO. We may retain limited records longer when required for security, dispute resolution, backups, or legal compliance. Deleted data may remain in protected backups for a limited period before those backups are routinely overwritten.

Pending friend-request and collection-invitation notifications remain available while the underlying action is pending. After a notification is resolved, its notification history is deleted after 90 days. This notification retention does not cancel or shorten the underlying friendship or collection state.

You can delete individual content in LILO and request deletion of your LILO account and associated service data by emailing contact@lilo.app. Deleting only your authentication account does not necessarily delete all application data, so contact us if you want the complete service record removed.

Your choices and rights

Depending on your location, you may have rights to access, correct, export, restrict, object to processing of, or delete personal data, and to withdraw consent. LILO provides a data-export feature for supported account data. You may also contact us to exercise a right or complain to your local data-protection authority.

Security

We use access controls, encrypted network connections, private storage, scoped credentials, and other technical and organizational safeguards. No service can guarantee absolute security, but we work to protect data in proportion to its sensitivity.

Children

LILO is not directed to children under 16. If you believe a child has provided personal data without appropriate authorization, contact us so we can investigate and delete it where required.

Changes to this policy

We may update this policy when LILO or applicable requirements change. The date at the top identifies the current version. Material changes will be communicated through an appropriate service channel.

Contact

LILO
contact@lilo.app