Legal

Privacy Policy

Last updated: August 31, 2026 — operated by Sergey Litau, contact [email protected]

This page explains what the Lilu iOS app ("Lilu," "the app") and this website (lilu.litau.app) collect, why, and how you can control it. Lilu is operated by Sergey Litau ("we," "us"). If anything here is unclear, write to [email protected] — a person reads that inbox.

1. No account, no sign-in

Lilu 1.0 has no account system and no login. Your saved words, watch history, streaks, and settings are stored only on your device, in the app's own private storage, and are never uploaded to a server under your name. Nothing here — this policy or the app itself — ever asks for your name, email, or phone number in order to use Lilu.

2. What we collect

CategoryWhat it isLinked to youPurpose
Product usage
(PostHog)
Which screens you open, video plays, word taps, subscription-screen views and similar in-app actions, plus a random, app-generated install ID and coarse device/app info (OS version, device class, app version, locale) No Understanding which parts of the app work, and improving them
Crash reports
(Sentry)
Automatic diagnostic information if the app crashes or logs an error No Finding and fixing bugs
Early-access payment
(PayPal)
Your card or PayPal account details, handled entirely by PayPal on its own payment page, plus the email address PayPal passes to us with the payment so we can send you the install link Tied to your PayPal account by PayPal — never joined to your analytics or crash-report identity Processing the one-time $19 early-access purchase sold on this website, and delivering what you paid for
Purchases
(Apple / RevenueCat)
Your purchase and subscription status, handled by Apple's App Store and RevenueCat Tied to your Apple ID by Apple — not to your analytics or crash-report identity Unlocking paid content, restoring purchases
Video catalog
(Supabase)
Anonymous requests for the current clip catalog and its transcripts No Delivering the clips and transcripts you scroll through
Embedded video
(YouTube / Google)
Standard requests Google's own player makes while playing a clip (see §5) Governed by Google, not us Playing the video

The install ID above is generated on your device the first time you open Lilu, stored in iOS's own secure keychain storage, and is not derived from your Apple ID, your device's advertising identifier, or any other Apple-issued identifier. It is never handed to a function that could turn it into a named profile — Lilu's analytics code has no identify() call anywhere in it, on purpose. It resets to a brand-new random value whenever you use the local-data reset in Profile/Settings, or when you reinstall the app.

We do not record your IP address next to this analytics activity — every event we send explicitly tells our analytics provider to discard it — and we do not run session recording of any kind. Every property we send is also screened for anything shaped like an email address, name, phone number, or full web address before it leaves your device, as a second layer of protection behind simply not collecting that information in the first place.

3. What we deliberately do not do

4. How long we keep it, and how to reset it

Your learning data (saved words, progress, settings) lives on your device for as long as you keep Lilu installed. Deleting the app deletes it — there is no separate copy anywhere else to delete afterward. Inside the app, Profile → Settings has a reset option that clears this local data immediately and starts a brand-new, unlinked install ID, so nothing ties your future activity back to what came before.

Anonymous analytics and crash records held by our vendors are kept only as long as those tools' own default retention windows, and are never matched back to a named individual, because we never gave them a name or email to match against. If you would still like a specific record looked into or removed, write to [email protected] with the approximate date and device — we will do what we reasonably can with data that, by design, is not tied to an identity.

5. YouTube and Google

Every clip in Lilu plays through YouTube's own official embedded video player, with its native controls and branding left fully visible. That player belongs to Google, and it can set its own cookies and collect its own data under Google's Privacy Policy and the YouTube Terms of Service — this is true of any app or website that embeds a YouTube video, and it sits outside our control. We do not download, store, or re-host any YouTube video or audio ourselves.

6. Children

Lilu is not directed at children under 13, and we do not knowingly collect personal information from anyone using the app — there is no sign-up field to collect it in. If you believe a child has provided personal information to us, contact [email protected] and we will remove it.

7. Where your data is processed

Our analytics, crash-reporting, purchase, and content vendors run infrastructure in the United States and other countries. Using Lilu means the data described above may be processed outside the country you're in.

8. Third-party vendors we use

9. Changes to this policy

We update the date at the top of this page whenever this policy changes, and post the new version at this same address. Material changes are also reflected in the app's release notes.

10. Contact

Email [email protected] for privacy questions, data requests, or anything else about how Lilu handles data. Operator: Sergey Litau.