Back to LilpoLast updated: September 6, 2026
Zero Trackers · 100% On-Device

Privacy Policy

Lilpo has no account, advertising, or analytics service operated by us. Records stay on your device unless you enable Private iCloud, invite someone to a pet, or export them.

1. What Lilpo Stores

Everything you enter (including pets, care and health records, documents, contacts, costs, scan images, and recognized text) is saved directly to local storage within your iOS device (iPhone or iPad) in the app's secure sandbox.

In Local mode, your data stays strictly on this device unless you choose to export it. If you enable Private iCloud, Apple CloudKit synchronizes it through the personal Apple Account signed in on your devices.

We do not operate a Lilpo account or data server, sell your information, show advertising, track you, or run analytics on your records.

2. Apple Services & System Integration

  • Apple Maps: Address and city search sends the text you type to Apple Maps so it can locate the clinic or city. Nothing about your pet is included.
  • Apple Weather: Weather displays the conditions for the city you chose by sending city coordinates to Apple Weather. Your device GPS location is never read.
  • App Store & StoreKit: Purchases and subscription management use the App Store. Apple handles your payment details directly; Lilpo receives only verified product and entitlement receipts needed to unlock Pro.
  • Private iCloud: Synchronization and pet invitations use Apple CloudKit. Those records are processed under your Apple Account and Apple's terms. Lilpo does not send them to a server operated by us.
  • Exports: Exports leave the app only when you share them, to wherever you choose to put them.

3. Smart Scan & On-Device Intelligence

Photographs of documents are read directly on your device. Text recognition (via Apple Vision) and, where the hardware supports it, Apple Intelligence on-device models both run locally.

Scanning does not send a document page or its text to us or to any non-Apple AI service. If you save the result, its images and recognized text become part of your pet record and follow your Private iCloud and pet-sharing choices.

4. Sharing a Pet

The pet owner can invite specific people through Apple CloudKit. A participant can see and update the complete shared pet record, including health and care entries, contacts, costs, documents, scan images, and recognized text.

Pet-record invitations are separate from StoreKit Family Sharing, which only shares an eligible Lilpo Pro purchase. Sharing Pro does not share any pet record automatically.

The owner can manage participants or stop sharing anytime. Apple applies access changes through CloudKit, but Lilpo cannot recall information that a participant already exported, copied, or captured outside the app.

5. Deleting Your Data

  • Deleting a Pet: Deleting a pet permanently removes it from your device's local storage. With Private iCloud enabled, that deletion synchronizes through CloudKit and removes the shared pet from participants after synchronization.
  • Deleting the App: Deleting the app removes all local data from your device, but does not by itself delete a Private iCloud copy. You can remove Lilpo's iCloud data anytime from your Apple Account's iCloud settings.
  • Raw Backup Export: If you want to keep an offline archive before deletion, export first via Settings › Storage & backup › Raw backup.

6. Children's Privacy

Lilpo is not directed at children and does not ask anyone to create an account. Do not enter or share another person's information unless you have permission to do so.

7. App vs. Website Privacy & Browser Signals

The Lilpo iOS application has zero trackers, zero advertising SDKs, and zero analytics of any kind. Your pet records stay strictly on your device or in your personal iCloud container.

On our promotional website (lilpo.app), we use Google Analytics solely to measure aggregate traffic trends (such as visitor numbers and referring links). Google Analytics is loaded only if you explicitly click Allow on our cookie consent banner. If you choose Deny, Google Analytics is never loaded.

When website analytics are enabled, we enforce IP anonymization to preserve individual privacy. We never use advertising pixels (such as Meta Pixel) or marketing re-targeting scripts. Our website also respects browser-based opt-out signals, including Global Privacy Control (GPC); if transmitted, analytics scripts remain blocked. You can adjust your preferences anytime via our Cookie Preferences.

8. Legal Bases for Processing & Data Retention (GDPR)

Under European data protection law (GDPR Article 6), we process data based on the following legal grounds:

  • Contractual Necessity: Storing and synchronizing your pet care records locally or across your devices via Apple CloudKit to fulfill the core application functionality.
  • Consent: Loading non-essential website measurement scripts (Google Analytics) only when you provide affirmative consent via our banner.
  • Legitimate Interests: Responding to customer support emails, protecting infrastructure against security abuse, and managing voluntary user feedback.

Data Retention Periods:

  • Local Pet Records: Kept on your device until you delete the pet in the app or uninstall the application.
  • Private iCloud Sync: Kept in your Apple Account container until deleted in-app or purged via your Apple iCloud storage settings.
  • Website Analytics Data: Retained in Google Analytics for a maximum of 14 months before automated deletion.
  • Support Communications: Emails sent to hello@lilpo.app are retained only for as long as necessary to resolve your inquiry and maintain support context.

9. California Privacy Rights (CCPA / CPRA) & Do Not Sell

We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. We do not share your personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes other than delivering the core app services.

California consumers have the right to know what personal information is collected, the right to request deletion, the right to correct inaccurate information, and the right not to receive discriminatory treatment for exercising their privacy rights.

10. European User Rights & Supervisory Authorities

If you reside in the European Economic Area or United Kingdom, you have rights under Chapter III of the GDPR:

  • Right of Access & Portability: Export your pet's complete Care Card PDF or raw data backup anytime in the app.
  • Right to Rectification & Erasure: Edit or delete pet profiles directly on-device and across iCloud with immediate effect.
  • Right to Withdraw Consent: Revoke website analytics consent anytime via our interactive Cookie Preferences button.
  • Right to Lodge a Complaint: If you believe our data processing does not comply with applicable law, you have the right to lodge a complaint with your national Data Protection Authority (in Romania: National Supervisory Authority for Personal Data Processing, ANSPDCP at dataprotection.ro).

11. Data Controller & Contact

For the purposes of the General Data Protection Regulation (GDPR), the Data Controller is Lilpo, developed and operated by Dan Deaconu, located in Bucharest, Romania, European Union.

Privacy inquiries and requests: hello@lilpo.app