Liloo Consumer Health Data Privacy Policy

Effective date: August 15, 2026 Controller: Rudenko Yevheniia Yevhenivna FOP Contact: privacy@liloosafespace.com

This policy supplements the Liloo Privacy Policy. It explains how Liloo handles information that may reveal a person's mental or emotional state (“consumer health data”). Liloo is a difficult-conversation practice simulator. It is not a healthcare, therapy, diagnosis, crisis, or emergency-response service.

1. Data covered by this policy

Depending on what you choose to write, consumer health data may include:

  • message text that reveals a mental or emotional state;
  • a deterministic safety classification, such as a self-harm signal;
  • the time and direction of a safety event;
  • the account, conversation and message identifiers needed to connect a critical safety event to an authorised moderation review.

Liloo does not infer a medical diagnosis. It does not collect medical records, prescriptions, biometric data, precise location, or health-insurance data.

2. Sources

We receive message text directly from you. The Liloo app and backend generate technical identifiers and safety classifications while providing the service. We do not purchase consumer health data from data brokers or obtain it from advertising partners.

3. Why we process it

We process message text to provide the conversation you requested and to run the safety checks necessary to keep unsafe generated content from reaching you. A self-harm signal short-circuits roleplay: it is not sent to another AI model for a roleplay response. Liloo shows a reviewed support message and regional support resources instead.

For safety review, a critical event is retained with the source message and its account and conversation linkage. This review data is restricted to authorised Studio moderators and is not used for advertising, personalisation or product analytics. Support resources and safety filtering do not depend on moderation.

4. What is retained

Every critical moderation event may retain the source message, matched safety trigger, account ID, conversation ID, message ID, direction, system action, review status and moderator note. This lets an authorised moderator see what requires review without searching unrelated user records. Critical moderation events are deleted after 90 days. Account deletion or an earlier verified privacy request removes the linked source content and identifiers. Normal conversation retention is described in the main Privacy Policy.

The app does not store crisis message text or safety flags in files backed up to iCloud. Crisis review data and conversation content remain in Liloo's server-side data stores.

5. Sharing and processors

We do not sell consumer health data. We do not use it for targeted advertising, cross-context behavioural advertising, profiling, or Google Ads/Analytics measurement.

We disclose data only to service providers that process it for Liloo:

  • Google Firebase for authentication, Firestore, Cloud Functions and storage;
  • DigitalOcean for Liloo's backend and database hosting;
  • OpenAI for ordinary AI dialogue inference when a message passes the safety short-circuit; OpenAI is not asked to generate a roleplay response to a detected self-harm message;
  • Mailjet for a minimal moderation alert. The email does not include message text or account/conversation identifiers; full review data stays in Studio.

These providers may process data only to provide their contracted service. We do not disclose consumer health data to data brokers or advertising networks.

6. Your choices and rights

Critical-event retention is part of Liloo's safety and moderation operation and is not an advertising or analytics consent. You can still request access to or deletion of this data at any time.

You may request access to or deletion of consumer health data by:

  • using Profile → Delete profile permanently; or
  • emailing privacy@liloosafespace.com from the address associated with your account.

We will verify and complete a valid request within 30 days. If we deny a request, you may appeal by replying to our decision with “Appeal” in the subject. You may also contact the relevant regulator or attorney general.

7. No sale or geofencing

Liloo does not sell consumer health data and does not use geofencing around healthcare facilities to identify or target people.

8. Changes

We will update the effective date and notify users when a material change affects the collection, use, or sharing described here. Consent for a new purpose will be requested before that new processing begins.