Lily — Privacy Policy — Digital Ninja

01Who we are

Lily is developed and published by Khodour Fouani, an independent developer trading as Digital Ninja (www.dninja.com). Khodour Fouani is the developer named on the Google Play and Apple App Store listings for Lily and is the party responsible for the information described in this policy.

Application: Lily — Period & Health Tracker
Package / Bundle ID: lily.ai
Developer: Khodour Fouani
Trading as: Digital Ninja — dninja.com
Platforms: Google Play (Android) and Apple App Store (iOS)
Contact: Via the developer contact details published on Lily’s Google Play and App Store listings

This policy covers the Lily mobile app only.

02Stored on your device

Lily has no account, no login, and no server of ours. Everything you enter is written to a private database inside the app’s own storage on your phone, which no other app can read. We cannot see it. That database holds:

Cycle records — start and end dates, cycle length, period duration, and flow intensity.
Mood entries, with any note you attach.
Symptom entries and their intensity.
Personal events and notes you add to your calendar.
Medicines you set up — name, dosage, timing, schedule, and reminder settings — and a log of each dose you mark as taken.
Pregnancy records — start date, due date, and how and when a pregnancy ended, if you record one.
Your first name and date of birth, if you enter them during setup.
App preferences such as theme and language.

Reminders are scheduled by your phone’s own alarm and notification system. On Android no reminder content is sent over the internet.

03What leaves your device

We want to be precise here rather than claim more privacy than the app delivers. The following information does leave your phone.

Google Analytics for Firebase

Lily uses Google Analytics for Firebase, a Google service, to understand how the app is used. It records a small set of usage events — that the app was opened, that onboarding was started or finished, that a period was saved or deleted, that a mood, symptom, medicine, or note was logged, that the colour guide was opened, and how a rating prompt was answered. These events record only that the action happened, not the health values you entered.

There is one exception you should know about. When you finish the initial setup, the completion event includes the first name you entered, your date of birth, and your typical cycle length. Apart from this single event, no cycle, symptom, mood, medicine, or pregnancy data is transmitted.

Alongside these events, the Firebase library collects standard technical identifiers: an app instance identifier, your device’s advertising identifier, device model, operating system version, country and language, and — on Android — Google Play install referrer information. Google processes this as our service provider. See Firebase’s privacy documentation and Google’s privacy policy.

Push notifications — iOS only

The iOS version registers with Firebase Cloud Messaging, which issues a device token so we can send occasional app notifications. The token identifies the installation, not you. The Android version does not use push messaging at all — its reminders are generated entirely on the device.

Backups to your own cloud account

On Android, if you have Google’s automatic backup switched on for your device, Lily’s data is included in that backup and stored in your own Google Drive, encrypted, under your Google account. On iOS, Lily offers a backup and restore feature that writes a copy of your data to your own iCloud Drive when you choose to use it. In both cases the data goes to your personal cloud account, not to us — we have no access to it. You can turn Android backup off in your device settings, and iCloud backup is only performed when you ask for it.

Data you export yourself

Settings includes an export that produces a CSV file of your records. The file is created only when you tap Export, and it goes wherever you choose to send it. Once it leaves the app it is outside our control, so take care when sharing it.

04What Lily never does

We never sell or rent your personal information to anyone.
Lily contains no advertising and shows no ads.
Your health data is never used for advertising, ad targeting, or building marketing profiles.
There is no account system, so nothing is stored on our servers — we do not operate a server for Lily.
We do not share your data with data brokers, insurers, employers, or any advertising network.
Nobody at Digital Ninja can read your cycle, symptom, medicine, or pregnancy records.

05Who we share with

Google is the only third party that receives information from Lily, in its role as our analytics and messaging provider, and only the information described in section 03. Google processes it on our behalf under its own terms.

We would disclose information if compelled by a valid legal request from a competent authority. Given that we hold no copy of your health records, there is in practice nothing of that kind for us to hand over.

06Keeping & deleting your data

Your records stay on your device until you remove them. You are in control of all of it:

Delete individual records — remove any cycle, log, medicine, or entry from within the app.
Delete everything — use the delete option in Settings to clear all app data.
Uninstall — removing the app deletes its database from your phone.
Remove cloud copies — delete Lily’s backup from your Google account backup settings, or the Lily folder in your iCloud Drive.
Reset or limit the advertising identifier — in Android Settings under Privacy, or on iOS by turning off tracking for the app.

Analytics events already sent to Google are retained by Google under its retention settings, up to a maximum of 14 months, and are then deleted automatically. To ask us to delete the onboarding information described in section 03, write to us using the developer contact details published on Lily’s Google Play or App Store listing, and we will remove it from the analytics property.

07Security

Lily’s database lives in the app’s private storage area, which the operating system isolates from other apps, and it benefits from your device’s own encryption. Information sent to Google’s services travels over encrypted connections. The most important protection is the one you control: keep a screen lock on your phone, since anyone who can unlock it can open Lily.

08Children’s privacy

Lily is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided information through the app, contact us using the developer contact details published on Lily’s store listing and we will delete anything we hold.

09International transfers

Your health records are not transferred anywhere — they remain on your device. The analytics information described in section 03 is processed by Google on infrastructure that may be located outside your country, under the safeguards set out in Google’s own privacy terms.

10Your rights

Depending on where you live you may have the right to:

Access the personal information held about you.
Correct information that is inaccurate or out of date.
Delete your information.
Export your information in a portable format.
Object to certain processing, or withdraw consent where it was the basis.

For everything stored on your device you can exercise these rights directly in the app — view, edit, export to CSV, or delete, at any time, without asking us. For the analytics information described in section 03, contact us using the developer contact details published on Lily’s store listing and we will respond within a reasonable timeframe.

11Changes to this policy

We may update this policy as the app changes or the law evolves. When we do, we will revise the “Last updated” date at the top of this page. If a change materially affects how your information is handled, we will make that clear in the app.

12Contact us

Lily is published by Khodour Fouani, trading as Digital Ninja. Questions, requests, or concerns about the app and this policy should be sent to the developer contact address published on Lily’s Google Play listing and on its Apple App Store listing, which is kept current on both stores.

We handle privacy requests received that way and will respond within a reasonable timeframe.