Lilo — Privacy Policy

1. Introduction

Welcome to Lilo: collect and share your places (the "App"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our App via TestFlight or the App Store.

Your privacy is important to us. We comply with applicable laws, including GDPR, CCPA/CPRA, Apple's App Store Review Guidelines, and other relevant regulations.

2. Data Controller

Lilo: collect and share your places

Email: listplacesapp@gmail.com

3. Information We Do Not Collect

• Your personal geolocation: We do not collect or process GPS, Wi-Fi, Bluetooth, background location, or precise location data of your device.
• Sensitive personal data: We do not collect race, ethnicity, health, biometric, or similar categories of data.
• Unnecessary personal identifiers: We do not collect phone numbers, contacts, or device identifiers beyond what is required for essential app functionality.

4. Information We Collect

4.1 Account & Contact Information

• Email address: Provided when you register or subscribe.
• Profile information: Username or any other data you choose to provide.

4.2 Usage Data & Diagnostics

We use Firebase Analytics and Firebase Crashlytics to collect anonymized and aggregated information such as device type, operating system, session duration, screens viewed, and crash logs.

This helps us understand usage patterns and improve app performance.

Data is processed by Google in accordance with its Privacy Policy.

4.3 Place Search & Autocomplete (Google Places API)

When you search for or view a place, data such as place names, addresses, and coordinates is retrieved directly from Google Places API.

This relates only to the place, not your device location.

Some place IDs or metadata may be temporarily stored as needed for the feature to work.

5. Legal Basis for Processing (where applicable)

• Contractual necessity: Providing and maintaining app functionality.
• Legitimate interests: Improving the App, maintaining security, preventing abuse.
• Legal compliance: Fulfilling obligations under applicable law.
• Consent: For optional communications such as newsletters.

6. How We Use Your Information

• To operate, maintain, and improve the App.
• To communicate with you (support, updates, optional marketing).
• To ensure safety, detect fraud, and enforce our Terms.
• To comply with legal and regulatory requirements.

7. Third-Party Services

Firebase Analytics & Crashlytics (Google LLC)

Used for anonymized analytics and crash diagnostics.

Data is processed according to Google's Privacy Policy and Firebase Security documentation.

Google Places API

Used for place search, autocomplete, and details.

This service provides place-related data only.

Handled in accordance with Google Maps Platform Terms of Service.

Authentication (Firebase Authentication)

Used to manage user sign-in and password recovery.

Your email is used solely for authentication purposes and is not shared.

Apple TestFlight / App Store Analytics

Used during testing and release for crash and performance diagnostics.

Sharing & Web Preview

If you choose to share a list via a public link, only the content you include (e.g., list title, cover image, place names) will be visible.

No personal data such as your email or account information is exposed.

8. Data Sharing & Disclosure

We do not sell your data.

We may share information with:

• Service providers under strict confidentiality agreements.
• Legal authorities, if required by law.
• Business successors, in the event of a merger or acquisition, under protective terms.

We may also share information with your explicit consent.

9. International Data Transfers

Your data may be processed outside your country (e.g., EU or US).

We use safeguards such as Standard Contractual Clauses and adequacy decisions.

10. Data Retention

• Account data: Retained while your account is active.
• Analytics and diagnostics: Retained in aggregated or anonymized form for up to 24 months.
• Legal obligations: Longer retention where required.

11. Security

We use industry-standard measures such as encryption in transit, restricted access, and regular security reviews to protect your data.

12. Your Rights

Depending on your location, you may have rights including access, correction, deletion, or restriction of processing.

You may also request to opt out of non-essential processing.

To exercise your rights, email: listplacesapp@gmail.com

We usually respond within 30 days.

13. Children's Privacy

The App is not directed to children under 13, and we do not knowingly collect personal data from minors.

If we learn we have collected such data, we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in practices or legal requirements.

The "Last updated" date will be revised accordingly.

Significant changes may be notified in-app or by email.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact:

Email: listplacesapp@gmail.com

Thank you for trusting Lilo. We remain committed to safeguarding your privacy while delivering a high-quality Lilo experience.