Lila

Lila – Privacy Policy

Last updated: July 29, 2026

This Privacy Policy explains how Lila ("we", "our", or "us") collects, uses, and protects your personal information when you use our mobile application ("Service"). By using the Service, you agree to the terms of this policy.

1. Information We Collect

a. Account Information:

Name and email associated with the sign-in method you choose. Lila supports Google, Apple, and email/password authentication via Supabase Auth.

b. Device & Usage Data:

Device type, operating system, IP address

App usage statistics (e.g., features used, duration of sessions)

c. Camera & Photos:

Optional access to your device's camera or photo library to capture or upload images within the app

d. Microphone:

Access to your device's microphone to record voice notes within the app

e. Location:

Optional access to your device's location to tag memories with location data

f. Memory Metadata & AI Results:

Titles, notes, location tags, and — when you choose to run analysis — transcripts, summaries, themes, emotional intensities, and searchable embeddings derived from your voice recordings.

g. Health Data (Android - Health Connect):

Optional read-only access to health data via Android Health Connect. This includes:

  • Steps (daily step counts)
  • Heart Rate
  • Heart Rate Variability (RMSSD)

We request these health permissions only to show activity and wellbeing metrics inside the app. The app only reads this data if you explicitly grant permission through Health Connect; we do not write or modify Health Connect records. Health Connect readings are processed on your device for display and are not uploaded to or stored by Lila's servers. Health data is not sold.

2. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Authenticate and manage your account (Google, Apple, or email/password)
  • Enable features like encrypted voice and photo capture, location tagging, maps, and optional AI insights
  • When you opt in to Reflect or Connect, process audio for transcription and analysis, and power semantic search and memory chat from stored analysis results
  • Improve and analyze app performance

3. Sharing Your Information

We do not sell your personal information. We may share your information:

  • With service providers who help us operate the app (for example, cloud hosting, authentication, storage, and — when you run AI analysis or memory chat — our AI provider, OpenAI)
  • As required by law or legal processes

4. Data Retention

We retain your personal information only as long as necessary to provide the Service or comply with legal obligations. You can delete your account from the app or request deletion by contacting us — see Delete Account.

5. Your Rights

You may:

  • Access and update your account information
  • Delete your account and associated Lila-hosted data from the app or by contacting us (Delete Account)

6. Security

We take reasonable steps to protect your personal information using industry-standard security practices:

  • Voice recordings and photos Voice recordings and photos are encrypted on your device with AES-GCM before upload. Lila does not hold the key required to decrypt stored media.Media is stored as ciphertext; Lila's servers retain only the download URL and non-secret encryption metadata needed for client-side decryption.
  • Optional key backup: You can optionally back up your media encryption key to your own Google Drive app-data folder or iCloud. Those backups are controlled by your cloud account, not by Lila, and are not removed when you delete your Lila account.
  • Voice analysis: When you choose to run AI analysis, decrypted audio is sent securely to Lila and our AI provider (OpenAI). Lila deletes temporary audio files after processing. Derived results — transcripts, summaries, themes, emotions, and searchable embeddings — remain stored on our servers to power Reflect and Connect.
  • Other data including titles, notes, location tags, and AI analysis results is stored in our database with encryption in transit (TLS) and host-level encryption at rest. Titles, notes, location tags, and media encryption metadata (IV, authentication tag, algorithm) are stored on our servers so the app can show your timeline.
  • Health Connect data is read on-device for display when you grant permission and is not stored on Lila's servers.

Please note that no method of transmission over the Internet or electronic storage is 100% secure.

7. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

8. Contact Us

For questions or requests regarding your data:

Email: Tejasva@lilaintelligence.com