Privacy Policy

Home Privacy Policy

Lilitopia Inc.
Effective as of: 7 September 2026

IMPORTANT PRIVACY INFORMATION

If you use the Lilitopia mobile application or website, we will ask you to specify your child’s name and age range. We may also automatically collect from your device language settings, IP address, time zone, type and model of a device, device settings, operating system, Internet service provider, mobile carrier, and hardware ID. We need this data to provide our services, analyze how our customers use the service, to measure ads.

For improving our Service, we may share this data with third parties. Such parties include Facebook and Google. As a result of sharing this data with third parties we (1) analyze different interactions (what products our users have viewed); (2) measure ads.

If you decide to make a purchase on the Service, we will ask you to provide your email – we will use it to send your purchase.

Please read our Privacy Policy below to know more about what we do with data (Section 2), what data privacy rights are available to you (Section 5) and who will be the data controller (Section 12). If any questions remain unanswered, please contact us at [email protected].

By tapping the button below to start your subscription you explicitly agree to the Terms and Conditions of Use, Privacy Policy (in particular, to sending data to the third parties, as described in the Privacy Policy).

“COPPA” means Children’s Online Privacy Protection Act of 1998.

“GDPR” means the General Data Protection Regulation (EU) 2016/679.

“EEA” includes all current member states to the European Union and the European Economic Area.

“Process”, in respect of personal data, includes to collect, store, and disclose to others.

TABLE OF CONTENTS

  1. CATEGORIES OF PERSONAL DATA WE COLLECT
  2. FOR WHAT PURPOSES WE PROCESS YOUR PERSONAL DATA
  3. UNDER WHAT LEGAL BASES WE PROCESS YOUR PERSONAL DATA (Applies only to EEA-based users)
  4. WITH WHOM WE MAY SHARE YOUR PERSONAL DATA
  5. HOW YOU CAN EXERCISE YOUR RIGHTS
  6. CHILDREN’S PRIVACY
  7. INTERNATIONAL DATA TRANSFERS
  8. CHANGES TO THIS PRIVACY POLICY
  9. CALIFORNIA PRIVACY RIGHTS
  10. DATA RETENTION
  11. HOW “DO NOT TRACK” REQUESTS ARE HANDLED
  12. PERSONAL DATA CONTROLLER
  13. CONTACT US

1. CATEGORIES OF PERSONAL DATA WE COLLECT

We collect data you give us voluntarily (for example, when you contact our support, you may enter your email). We also collect data automatically (for example, your IP address).

1.1. Data you give us

We will ask you about your child’s age range and name. You may choose to register an account with us and provide your email for this purpose. You may also choose to sign in using your Google or Apple account, in which case we receive the account identifier and, where you allow it, the email address associated with that account. If you decide to make a purchase on the Website, we will ask you to provide your email to send your order there. We may also ask you to provide, for example, your email address if you wish to contact us for any inquiries.

1.2. Data we collect automatically

1.2.1. Data about how you found us

We collect data about your referring app or URL (that is, the app or place on the Web where you were when you tapped on our ad).

1.2.2. Device and Location data

We collect data from your mobile device. Examples of such data include: language settings, IP address, time zone, type and model of a device, device settings, operating system, Internet service provider, mobile carrier, and hardware ID.

1.2.3. Usage data

We record how you interact with our Service. For example, we log your taps on certain areas of the interface, the features, and content you interact with, how often you use the Service, how long you are in the Service, and your subscription orders.

1.2.4. Advertising identifiers

We do not collect advertising identifiers. Our app does not request the Apple App Tracking Transparency permission, so we do not access your Apple Identifier for Advertising (“IDFA”). On Android, the Google Advertising ID (“AAID”) permission is removed from our app and advertising ID collection is disabled.

To measure the effectiveness of our own advertising campaigns on iOS we use Apple SKAdNetwork. This is Apple’s privacy-preserving attribution framework: no identifier leaves your device, and Apple sends us only aggregated install reports.

2. FOR WHAT PURPOSES WE PROCESS YOUR PERSONAL DATA

We process your personal data:

2.1. To provide our Service

This includes enabling you to use the Service in a seamless manner and preventing or addressing Service errors or technical issues.

To host personal data and enable this Service to operate and be distributed we use DigitalOcean (application hosting) and Cloudflare R2 (media storage and content delivery).

2.2. To customize your experience

We process your personal data, such as actions with App or Website, to adjust the content of the Service and make offers tailored to your personal preferences.

2.3. To provide you with customer support

We process your personal data to respond to your requests for technical support, Service information or to any other communication you initiate. For this purpose, we may send you, for example, notifications about the performance of our Service, security, payment transactions, notices regarding our Terms and Conditions of Use or this Privacy Policy.

2.4. To communicate with you regarding your use of our Service

We communicate with you, for example, by push notifications or emails. These may include information on certain Service updates, or other information about the Service. To opt out of receiving push notifications, you need to change the settings on your device. You can also opt-out of receiving emails using unsubscribe link found in the footer of our emails.

The services that we use for these purposes may collect data concerning the date and time when the message was viewed by our users, as well as when they interacted with it, such as by clicking on links included in the message.

We use Apple Push Notification service (APNs).

We also use Firebase Cloud Messaging and Firebase Notifications, provided by Google.

2.5. To research and analyze your use of the Service

This helps us to better understand our business, analyze our operations, maintain, improve, innovate, plan, design, and develop the Service and our new products.

We use:

  • Firebase Analytics, provided by Google (to analyze in-app events, sessions, device types).
  • Firebase Crashlytics, provided by Google (to receive crash and stability reports).
  • Facebook Analytics (aggregated demographics and engagement insights).
  • Google Analytics (visitor flows on our website, ad effectiveness, cookies).

2.6. To enforce our Terms and Conditions of Use and to prevent and combat fraud

We use personal data to enforce agreements and contractual commitments, detect, prevent, and combat fraud. We may share your information with law enforcement if required.

2.7. To comply with legal obligations

We may process, use, or share your data when the law requires it.

2.8. To process your payments

We provide paid products and/or services within the Service. All payments are processed by Apple (App Store in-app purchase) or Google (Google Play in-app purchase), depending on the platform you use. We use RevenueCat to manage and verify subscription status. We do not store or collect your payment card details ourselves, and they never reach us.

3. UNDER WHAT LEGAL BASES WE PROCESS YOUR PERSONAL DATA (Applies only to EEA-based users)

We process under:

  • Contract (provide Service, customize, support, communicate, payments).
  • Legitimate interests (communications, research, fraud prevention).
  • Legal obligations (comply with law).

4. WITH WHOM WE MAY SHARE YOUR PERSONAL DATA

  • Service providers: push notification delivery (Apple, Google), email services, sign-in providers (Google, Apple), analytics and crash reporting (Google, Facebook), advertising networks (Facebook, Google), payments and subscription management (Apple, Google, RevenueCat), hosting and content delivery (DigitalOcean, Cloudflare).
  • Law enforcement/public authorities: as required.
  • Corporate transactions: mergers, acquisitions, bankruptcy, restructuring.

5. HOW YOU CAN EXERCISE YOUR RIGHTS

  • Access/review/update/correct via app profile or by emailing [email protected].
  • Request a copy of your personal data.
  • Delete your personal data (reasonable efforts, subject to legal obligations).
  • Object/restrict processing.

EEA additional rights:

  • Lodge complaint with supervisory authority.
  • Data portability.

6. CHILDREN’S PRIVACY

Lilitopia is designed for young children and is intended to be used under the supervision of a parent or legal guardian. Children cannot create an account. Every child profile is created from inside a parent’s account, behind a parent gate, by the parent or guardian who holds that account.

For each child profile we collect: the child’s name, the child’s birth month and year (used to offer age-appropriate content), the avatar chosen from the set we provide, and the child’s learning progress within the Service. We do not collect photographs of children, and we do not ask children for an email address or a phone number.

United States. The Children’s Online Privacy Protection Act (COPPA) applies to children under 13. A parent or legal guardian may review the information we hold about their child, ask us to correct it, or ask us to delete it, at any time.

European Economic Area and United Kingdom. The age at which a child can consent on their own to online services is between 13 and 16 depending on the country. Children using Lilitopia are below that age, so consent is always given by the parent or legal guardian who creates the account — which is how the Service works by design.

To review or delete a child profile, use the parent area in the app, or contact us at [email protected]. If you believe a child has given us information without a parent’s or guardian’s consent, contact us at the same address and we will delete it.

7. INTERNATIONAL DATA TRANSFERS

We may transfer personal data outside your country. For EEA users, we rely on Standard Contractual Clauses or adequacy decisions.

8. CHANGES TO THIS PRIVACY POLICY

We may update this Policy. Material changes will be notified through the Service or other means. Continued use = acceptance.

9. CALIFORNIA PRIVACY RIGHTS

California’s “Shine the Light” law gives residents the right to ask once a year what personal data we share for third parties’ direct marketing purposes.

Email [email protected] with subject: Request for California Privacy Information.

10. DATA RETENTION

We will store personal data for as long as reasonably necessary for Service provision and legal purposes.

11. HOW “DO NOT TRACK” REQUESTS ARE HANDLED

This Service does not support “Do Not Track” requests. Please check third-party services’ privacy policies for their practices.

12. PERSONAL DATA CONTROLLER

Lilitopia Inc.

4362, 1007 N Orange St., 4th Floor, Wilmington, DE, New Castle, USA, 19801

13. CONTACT US

Email: [email protected]

You may contact us at any time for details regarding this Privacy Policy and its previous versions.