LiliMind Privacy Policy
Effective date: 13 November 2026
This policy explains what LiliMind does with information, where it happens and what choices you have. It applies to the LiliMind app for iPhone and iPad and to https://lilimind.com.
1. Who is responsible
LiliMind is made and sold by Daguang Han, an individual developer based in the United Kingdom (“we”, “us”).
- Post: 15 Barsby Drive, Loughborough, LE11 5UJ, United Kingdom
- Email: support@lilimind.com
- UK Information Commissioner’s Office: registration number to be added on issue
We are the “controller” of the information described in sections 3 and 4 under UK and EU data protection law.
2. The short version
- Speech is turned into text on your device. Audio is never uploaded. Recording is off unless you turn it on for a session, and a recording is saved only on your device.
- Transcripts and notes are stored only on your device. You can delete any one of them, or all of them.
- When you use the cloud AI features (AI translation, suggestions, summaries, answers and notes), the text of what was said is sent through our relay to our AI provider, Anthropic, and the result comes back to your device.
- Our relay does not store that text. Anthropic deletes it within 30 days unless it is flagged for a safety review, and does not use it to train its models.
- There is no account. We do not ask for your name or email address. Our relay keeps a random device ID, purchase references and how much time you have used.
- No advertising, no tracking across other apps or websites, no sale of data.
- LiliMind does not identify speakers, make voiceprints, recognise faces or try to work out anyone’s emotions.
3. What is processed, and where
| Information | Where it is processed | Stored by us? |
|---|---|---|
| Sound picked up by the microphone during a session | On your device only, by Apple’s on-device speech recognition | No. It is not uploaded. If you turn recording on for a session, the audio file is saved only on your device, where you can play or delete it. |
| Transcripts, translations, summaries, answers and notes | On your device | No. They are stored only on your device until you delete them or remove the app. |
| Text sent for cloud AI features: lines of the transcript, the goal you typed for the session, your glossary, the topic and any questions you ask | Sent over an encrypted connection (TLS) to our relay, which passes it to Anthropic and returns the result | No. The relay handles it in memory and does not write it to a database or log. Anthropic keeps it for a limited time (section 8). |
| Device ID: a random identifier the app creates. It is not your Apple ID, your phone number or an advertising identifier. It is kept in your device’s secure storage, so it stays the same if you delete the app and install it again on the same device. “Delete my data” removes it | Our relay | Yes |
| Purchase references: Apple transaction identifiers, which plan you bought and when it ends | Our relay, which checks them with Apple | Yes |
| Usage records: session start and end times, mode, languages, minutes of cloud time used, token counts, the time you confirmed that you had told the people present, error codes, response times, app version, device type and language setting | Our relay | Yes |
| Internet address (IP address) | Seen by our relay and by Cloudflare when your device connects, as with any internet service; used to prevent abuse of the free trial | Only in scrambled form. To limit free trials to a few devices per network per day, the relay keeps a keyed hash of the address with the date and a count. It does not keep the address itself. |
| Messages you send to support@lilimind.com | Our email inbox | Yes |
The free features (on-device captions and on-device translation) work on your device with Apple’s software. Text from those features is not sent to us.
We do not collect your name, email address, contacts, location, photos, advertising identifier or any audio. We do not use analytics or advertising software from other companies in the app.
4. Other people in the room
LiliMind is used in meetings, lectures and calls, so it handles words spoken by people who are not its users.
What you must do. You are responsible for telling the people present that you are using LiliMind, and for following the law and the rules of the place you are in. The app asks you to confirm this before every session and can show a notice card in English and Chinese for you to show the room.
What we process about other people. Only the words they say, as text, and only when you use a cloud AI feature. The text passes through our relay to Anthropic to produce the translation, suggestion, summary, answer or notes you asked for. We do not know who spoke. We do not receive voices, we do not identify speakers, and we do not build profiles of anyone.
What stays with the user. The transcript and notes are stored on the user’s own device. The user decides how long to keep them and what to do with them, and is responsible for that.
If you are one of those people. Speak first to the person who used the app; they hold the transcript. You can also write to us at support@lilimind.com. We store no transcript text and hold nothing that identifies you, so in most cases we will not be able to find anything about you, but we will explain what was processed and help where we can.
5. Why we use information, and our legal bases
| Purpose | Information | Legal basis (UK GDPR and EU GDPR) |
|---|---|---|
| Providing the cloud AI features you ask for | Text sent for cloud AI features; device ID | Performance of our contract with you (Article 6(1)(b)) |
| Handling words spoken by other people present, as part of the text | Text sent for cloud AI features | Legitimate interests (Article 6(1)(f)): your interest in following and taking part in a conversation you are present at, balanced by the safeguards in section 4 |
| Checking purchases and counting the time included in your plan | Device ID, purchase references, usage records | Performance of our contract with you (Article 6(1)(b)) |
| Preventing abuse and fraud, keeping the service secure and keeping costs under control | Device ID, usage records, IP address | Legitimate interests (Article 6(1)(f)) |
| Answering support requests and complaints | Your message, device ID if you give it | Legitimate interests; legal obligation where the law requires a reply |
| Tax, accounting and consumer-law duties | Purchase references, totals | Legal obligation (Article 6(1)(c)) |
We do not make decisions about you by automated means that have legal or similarly significant effects. AI output in the app is a suggestion for you to check.
We do not ask for sensitive information (for example about health, religion or political views) and we do not try to infer it. If it is spoken in a session, it is processed only as part of the text, to produce the output you asked for.
6. Who receives information
| Recipient | Role | What they receive | Where |
|---|---|---|---|
| Apple | Independent controller for the App Store, purchases and its on-device software | Your purchases and Apple account details are handled by Apple under Apple’s privacy policy. Apple tells us that a purchase is valid; it does not give us your name or payment details. | Worldwide |
| Cloudflare, Inc. | Our processor: runs the relay and its database | Text in transit (not stored), device ID, purchase references, usage records, IP address | Cloudflare’s global network, including the United States |
| Anthropic | Our processor: provides the AI models (Claude) | Text sent for cloud AI features. No device ID, name or account detail. | United States |
Cloudflare and Anthropic use their own sub-processors, listed at https://www.cloudflare.com/gdpr/subprocessors/ and https://www.anthropic.com/subprocessors.
We do not sell personal information, and we do not share it for advertising. We will disclose information if the law requires it, and we will say so in this policy if the app is ever transferred to another owner.
7. Transfers outside the UK and EU
Cloudflare and Anthropic process information in the United States and other countries. These transfers are covered by:
- Cloudflare: the EU-US Data Privacy Framework and its UK Extension, with the EU Standard Contractual Clauses and the UK Addendum as a fallback, under Cloudflare’s Data Processing Addendum.
- Anthropic: the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, under Anthropic’s Data Processing Addendum.
We are based in the United Kingdom. The European Commission has decided that the UK provides an adequate level of protection for personal data.
You can ask us for a copy of the transfer terms.
8. How long information is kept
| Information | Kept for |
|---|---|
| Audio | Not kept by us. A recording you turn on stays on your device until you delete it |
| Transcripts and notes on your device | Until you delete them or remove the app |
| Text passing through our relay | Not stored |
| Text held by Anthropic | Deleted automatically within 30 days. Anthropic may keep text that its safety systems flag for up to 2 years, and safety classification scores for up to 7 years, to enforce its usage policy, or longer where the law requires. |
| Device ID, purchase references and usage records on our relay | Until you use “Delete my data”, or 24 months after the device last used the service, whichever comes first |
| Hashed network addresses kept for the free-trial limit | 7 days |
| Cloudflare technical logs | Invocation logs are switched off for our relay. Cloudflare keeps its own network logs for a short period (up to 7 days) under its privacy policy |
| Support emails | Up to 24 months after the matter is closed |
| Totals that do not relate to any device (for example hours used per month across all users) | Kept for accounts and planning |
9. Your choices and rights
In the app. You can delete any transcript or note, or use Settings > Delete my data to delete everything stored on the device and ask our relay to delete every record for your device ID. You can turn off microphone access in iOS Settings at any time.
Your legal rights. If you are in the UK or the European Economic Area you have the right to ask for access to your personal data, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable form. Where we rely on legitimate interests you can object at any time.
How to use them. Write to support@lilimind.com. Because there is no account, we can only find relay records by device ID; the app shows a short support reference in Settings so you can quote it. We cannot search text held by Anthropic for a particular person, because it is not stored with anything that identifies you. We reply within one month. There is no charge.
Complaints. Please tell us first; we will acknowledge a complaint within 30 days and answer without undue delay. You also have the right to complain to a regulator:
- UK: Information Commissioner’s Office, https://ico.org.uk/make-a-complaint/, telephone 0303 123 1113.
- EEA: the data protection authority of the country where you live or work. A list is at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.
10. United States and California
We do not sell personal information and do not share it for cross-context behavioural advertising. We do not use sensitive personal information to infer characteristics about anyone. We are below the size at which the California Consumer Privacy Act applies to a business, but anyone in the United States can ask us what we hold about their device, ask us to delete it, and will not be treated differently for asking. Use support@lilimind.com.
11. Children
LiliMind is for adults. It is not directed at children, and you must be 18 or over to use it. If you believe a child has used the app, write to us and we will delete the relay records for that device.
12. Security
Text is sent over encrypted connections (TLS). Our relay stores no transcript text, prompts or AI output. Transcripts and notes on your device are protected by the device’s passcode and iOS data protection. No system is completely secure; if a breach affecting you occurs, we will tell you and the regulator as the law requires.
13. Changes to this policy
If we change what the app does with information, we will update this policy, change the effective date, and show a notice in the app before the change takes effect. If a change needs your agreement, the app will ask for it.
14. Contact
Daguang Han, 15 Barsby Drive, Loughborough, LE11 5UJ, United Kingdom. Email: support@lilimind.com. Website: https://lilimind.com.