Your family’s privacy

About this draft

This notice is for review and is not yet effective. It describes the current service and identifies decisions still required before release. Reading it does not give permission to process a child’s information.

Who is responsible

Alejandro Corredor operates Lilo as an individual at 489 30th St., San Francisco, CA 94131, United States. Privacy requests: privacy@lilostory.app; support: support@lilostory.app. Signed-in adults can also submit a privacy request in Manage account and review its recorded status there.

Information used by Lilo

Account information includes your name, email address, password hash, invitation, account settings, credits and purchase records. Family profiles may include nicknames, birthdays, avatars, languages and optional character details. Story requests, generated text, artwork, narration, saved-book references and language editions may contain information you provide about your family. Authorization receipts record the notice, choices, language and time. Hosting and service providers may also process network and device information needed to deliver and secure the service.

Why information is used

Lilo uses account information to sign you in, maintain credits, deliver service messages and respond to requests. Family information supports profiles and the stories you request. Saved stories support reading, narration and translation. Administrative access supports safety, troubleshooting and editorial review. Before release, the operator must confirm and document the applicable legal basis for each purpose, including contract, consent, legal obligations and any specifically assessed legitimate interests. A single checkbox does not establish every legal basis.

Children and parental choices

Adults should manage accounts and provide family information. Use nicknames and avoid school names, addresses, contact details, medical information and other unnecessary sensitive details in prompts. Parent authorization for profiles and stories is separate from agreement to the EULA and is not verified parental identity. If verifiable parental consent is required, collection must remain blocked until a suitable verification process is available. The operator must assess child use, including reading and listening and any associated identifiers, before release.

Service providers and disclosures

Depending on deployment and selected features, Lilo uses Netlify or Vercel for hosting, Neon for database records, Vercel Blob or Netlify Blobs for media, and Stripe for payments. AI requests may be sent to Google Gemini, xAI/Grok, DeepSeek, or Muse through Vercel AI Gateway, according to the configured provider and fallbacks. Resend receives the adult account email and name for signup messages. Lilo does not need to include child profile details in those emails. Final provider contracts, retention, locations, eligible use cases and transfer arrangements must be verified before release; this draft does not promise provider zero retention or no training.

Family stories and publication

Saving a family story does not grant permission to publish it. Application access controls limit who can read stored family stories through Lilo. Existing media uses public storage URLs: anyone with such a URL may be able to retrieve that asset. Private-media delivery and historical migration remain prerequisites for a confidentiality promise. A shared-library edition requires a separate rights and content review; identifiable publication requires separate permission where applicable. Downloaded copies cannot necessarily be recalled.

Storage and retention

Account, profile, story, receipt and transaction data are stored to support their respective service purposes. A reviewed retention schedule, backup expiry, provider deletion process and treatment of legally required records must be finalized before release. Lilo does not currently promise automatic deletion after a fixed period. Deleting a profile removes that profile from the app’s stored family settings; it does not erase references already included in saved stories or provider records.

Your choices and requests

Manage account lets you review or withdraw family authorization when that flow is enabled, and submit requests for access/export, correction, deletion or an objection/restriction. Profile settings also let you remove individual profiles. Request submission is an acknowledgment of receipt, not confirmation that deletion or export has been completed. The operator must verify authority as appropriate, review applicable exceptions and respond within the applicable legal deadline. Withdrawal stops new authorized collection within the enforced flow; it does not recall dispatched work or erase existing information.

International and regional rights

Depending on where you live and which laws apply, you may have rights to access, correction, deletion, portability, restriction, objection, withdrawal of consent and complaint to a competent supervisory authority. California rights may include knowing about disclosures, opting out of sale or sharing and protection against discrimination. Final transfer safeguards and any required regional representative details must be established before release. These rights are not waived by using Lilo or accepting its terms.

Changes and contact

Material changes must be explained and renewed consent obtained where necessary before new processing begins. Versioned copies are available from this page. Contact privacy@lilostory.app for privacy questions or use the signed-in privacy request form for account-related requests. Do not include identity documents or child details in the request form.