Privacy Policy
Last updated: July 29, 2026
This Privacy Policy explains how the operator of Lily ("Lily", "we", "us") collects, uses, discloses, retains, and protects personal information when you visit our website or use Lily through iMessage. Because skincare information and photos can reveal health information, we treat them as sensitive data.
Who We Are & Scope
Lily is a consumer AI skincare routine and tracking service. Lily's operator is responsible for the personal information described in this Policy and acts as the data controller or business where those terms apply. This Policy covers Lily's website, iMessage conversations, routine tools, reminders, memory, photo features, support, and related services. Apple, Sendblue, and other third-party services have their own privacy terms for information they process independently.
Information We Collect & Sources
We collect information from you, from the messaging and hosting services that deliver your requests, and from Lily's responses and inferences: • Account and contact data: your phone number, internal account ID, language, country, timezone, consent records, and confirmation that you are at least 16. We ask only for 16+ confirmation, but information you voluntarily include in a message may remain in message history. • Messages and content: the text you send, Lily's replies, product names and labels, support requests, and a sanitized photo-turn marker instead of raw image bytes in conversation history. • Skincare and wellness data: goals, skin type, sensitivity, allergies or ingredients to avoid, visible skin concerns you describe or ask about, reactions, routines, product use, experiments, logs, and progress notes. • Photos: skin, face, product, or label images you choose to send, plus limited metadata needed to process or, with separate consent, retain them. • Reminder and activity data: reminder times, routine completion, adherence summaries, and scheduled follow-ups. • Service data: message IDs and delivery status, timestamps, feature actions, security events, error and usage data, and IP address, browser/device, and request data that our website host, content providers, or messaging providers receive automatically.
Sensitive & Consumer Health Data
Skincare concerns, allergies, reactions, routines, product use, messages, and photos may be health data or sensitive personal information under some laws. We collect them from you and use them only for the purposes described here. Where consent is the required legal basis, we ask for it before storing setup data and ask separately before enabling 30-day photo retention. You may withdraw consent, but Lily may be unable to provide features that require that data. Unless we expressly agree otherwise in writing, Lily is not provided by or on behalf of a health care provider or health plan and is not intended to be a HIPAA-covered service. Information you send may therefore not receive the protections that apply to medical records held by a HIPAA-covered provider.
How We Use Information & Legal Bases
We use personal information to provide and personalize Lily; understand your messages; generate AI responses; analyze product labels and photos; maintain conversation memory; create logs, reminders, summaries, and exports; deliver and troubleshoot messages; prevent abuse and secure the service; respond to privacy and support requests; comply with law; and establish, exercise, or defend legal claims. Depending on where you live, we rely on: your consent for sensitive skincare data and optional photo retention; performance of our agreement with you for requested service features; our legitimate interests in operating, securing, and improving Lily where those interests do not override your rights; and legal obligations. Lily does not make decisions that produce legal or similarly significant effects about you.
AI Processing, Memory & Photos
Lily uses automated AI systems. Your relevant messages, profile context, and current photo may be sent through our AI infrastructure providers to produce a reply. AI providers may keep request data for security or abuse monitoring under their business/API settings and legal obligations. Do not send information you do not want processed this way. By default, a photo is processed for the current reply and is not intentionally added to Lily's conversation history or photo store. The text sent with it, Lily's reply, a generic photo marker, and-if saved-an internal photo reference may remain in history. If you separately opt in, Lily may keep a private copy for up to 30 days so you can refer to it later. Turning retention off affects future photos; ask Lily to delete already-saved photos separately. Messaging and AI providers may still temporarily process transmitted photos under their own retention rules.
How We Disclose Information
We disclose only the categories of information needed for the relevant purpose: • Sendblue and Apple process phone numbers, message content, images, delivery data, and device/account information to deliver iMessage communications. • Vercel provides hosting, workflows, private file storage, logs, and AI routing and may process service data, messages, outputs, and photos. • OpenAI and any other AI provider we deliberately enable process prompts, relevant context, outputs, and current photos to generate and safeguard responses. • Neon hosts account, routine, reminder, and conversation data. Mastra provides agent infrastructure and redacted operational observability. Our configured Redis provider processes limited identifiers and coordination data. • Vendors that help with security, support, professional advice, or business operations receive information only as reasonably necessary for those services. We may also disclose information when required by law; to protect users, Lily, or others; in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards; or when you direct or consent to the disclosure. Service providers are required by contract or applicable terms to process data for specified purposes.
No Sale or Targeted Advertising
We do not sell personal information or consumer health data for money. We do not use your messages, skincare data, or photos for targeted or cross-context behavioral advertising, and we do not knowingly allow third parties to do so. We do not authorize our service providers to use your sensitive data for their own advertising. If these practices change, we will update this Policy and obtain any consent required by law before the change applies.
Data Retention
We use the following retention periods or criteria: • Incomplete setup details generally expire about 24 hours after the latest setup message. A minimal account-routing record may remain until the account is deleted. • Account data, consent records, routine logs, reminders, preferences, agent memory, and sanitized conversation history remain while your account is active, unless you delete them or a shorter period is required. • Saved photos become unavailable after 30 days and are scheduled for deletion. A deletion retry record may remain briefly if storage deletion initially fails. • Short-lived message deduplication and processing locks expire within minutes. • Security, diagnostic, provider, backup, and legal-compliance records may remain for a limited period after deletion when reasonably necessary, permitted, or required by law. We may retain de-identified information that cannot reasonably be linked to you. Deleting saved photos does not delete text or AI-generated observations from earlier photo discussions. Deleting your account removes both from Lily's active systems, subject to the limited exceptions above.
Security
We use administrative, technical, and organizational safeguards designed for the nature of the data, including TLS in transit, private photo storage, access controls, scoped internal IDs, and limiting raw photos in conversation memory. No service, AI system, messaging network, or storage method is completely secure, and we cannot guarantee absolute security. You are responsible for securing your device, Apple account, iMessage access, and passcode and for avoiding sensitive details you do not need Lily to know.
International Processing
Lily and its providers may process information in the United States, Europe, Israel, and other countries where they operate. Those countries may have different data-protection laws. Where required, we use contractual or other recognized safeguards for international transfers and provide information about applicable safeguards on request.
Your Choices & Requests
You may ask Lily what she remembers; correct or remove profile, product, and experiment details; change or cancel reminders; enable or disable future photo retention; delete saved photos; withdraw consent; request a copy of your data; or permanently delete your account. For permanent photo or account deletion, Lily asks for confirmation. You may also contact privacy@skintext.ai. We may need to verify that the request comes from the phone number or person concerned. An authorized agent may submit a request where local law permits, subject to verification. We will not discriminate against you for exercising a privacy right. Some requests may be limited where retention or processing is required by law, needed to protect rights or security, or otherwise exempt.
Additional Rights by Location
If applicable law gives you additional rights, those rights remain available. Depending on your location, these can include access, correction, deletion, portability, restriction, objection, withdrawal of consent, limiting use of sensitive information, opting out of sale or targeted advertising, and appealing a refused request. You may complain to your local data protection or privacy authority. For consumer health data laws, the categories collected, sources, purposes, and disclosures are described above. We do not sell consumer health data. To appeal a decision on a privacy request, email privacy@skintext.ai with "Privacy Appeal" in the subject line and explain the request and decision.
Age Requirement
Lily is not intended for anyone under 16. We ask users to confirm they are at least 16 and do not intentionally create an active account for a person we know is under 16. If you believe a person under 16 has provided personal information, contact privacy@skintext.ai so we can investigate and delete it as appropriate.
Changes to This Policy
We may update this Policy as Lily, our providers, or applicable law changes. We will change the date above and provide additional notice or request renewed consent when a change is material or the law requires it. We will not use previously collected sensitive data for a materially different purpose without the notice and consent required by law.
Contact Us
For privacy questions, requests, complaints, or information about Lily's operator and applicable transfer safeguards, contact privacy@skintext.ai. For general support, contact support@skintext.ai.