Privacy Policy

What stays on your computer

Lila runs on your computer, and most of what she knows about you is kept there, in her own folder:

• your conversation history, saved memories, reminders, timers and routines;
• the text she reads from your screen (held in memory while she works, and cleared when you press Stop);
• the code changes, websites and video edits she makes for you;
• a count of times she gave crisis-line information, with the time only and never what was said.

These files are not encrypted by Lila, so anyone who can sign in to your computer account can read them. You can see and delete memories in her Memory window.

What leaves your computer, and to whom

To talk, think and see, Lila sends some information to outside services. Each keeps what it receives under its own terms and your account settings, and we can't delete it from there.

• What you say or type, as text, and your saved memories: to Anthropic (Claude, her main thinking), to Google Gemini (quick replies), and to ElevenLabs (her thinking when Claude isn't available). Her replies go to ElevenLabs to be spoken in her voice.
• The sound of your voice: turned into text on your computer and not sent, except in Watch with me, where the shared sound goes to ElevenLabs.
• Pictures of your screen or camera: only when she needs to look, to Google Gemini or to OpenAI (through Codex). With full machine access, when she works in your other apps, pictures of your screen go to Anthropic (Claude, which plans her steps) if you use a Lila Cloud account, or to Google Gemini if you use your own keys. Password, sign-in and payment windows are blanked in her own screen reading, but pictures sent for harder jobs may include whatever is on screen.
• Text she reads from pages, emails and apps: to the same services, with the conversation it belongs to.
• Choosing on screen: when she has to pick between buttons or links, the task and the names of the controls she is choosing between go to TypeSafe (Jev, a decision service).
• Video to paper, image requests and Codex jobs: the video frames, prompt or task (and files Codex reads) go to Google Gemini or OpenAI.
• Documents she makes for you: when you ask for a spreadsheet, Word document, slide deck or PDF, your request and any of your files you ask her to use go to Anthropic. Claude makes the file in a sandbox on Anthropic's servers, and may search the web if the file needs current facts. The finished file is saved on your computer, in Documents\Lila Files. Lila then asks Anthropic to delete your files and the finished file from its file storage, which Anthropic does under its own data retention policy. Anthropic keeps the copies inside the sandbox for up to 30 days.
• Looking things up on the web: when she needs current facts, Claude searches the web through Anthropic, or Lila searches DuckDuckGo or Bing (and ESPN for sports scores) straight from your computer and reads the pages it finds. The search words come from your request. Sites she visits see your computer's network address, as they do when you visit them yourself.
• Gmail and Google Calendar, if you connect them: Lila works with Google's own Gmail and Calendar from your computer, with the access you grant in your browser (reading mail, writing drafts, adding events). Mail she reads goes on with the conversation, like other text she reads. Anything that reaches another person, such as sending a draft or inviting guests, waits for your yes. If you ask her to remember the connection, it is kept on your computer under your Windows account's protection.
• Spotify: playback commands, to your own Spotify account.

With a Lila Cloud account, these requests pass through Lila Cloud on their way (see below). If you use your own keys, they go straight from your computer to those services under your own accounts.

What Lila Cloud keeps

If you use a Lila Cloud account, requests to Anthropic, Google, ElevenLabs and TypeSafe pass through Lila Cloud, which adds our key and forwards them. It does not keep the content of your conversations. It keeps:

• your account: email address, name, a scrambled (scrypt) form of your password, the dates you confirmed you are 18 or older and agreed to the Terms, the version you agreed to, and when your account was first used and when her main thinking first ran for it;
• your computers: the name each one gives itself, and a scrambled form of each one's sign-in token;
• daily usage counts per computer and service (number of requests and amount of data), used for limits;
• for documents she makes, the reference numbers Anthropic gives each file and sandbox, never what is in them (the newest 200 of each per computer, so only the computer that asked can fetch them);
• feedback you send from the app: your words, the app version, the kind of computer (Windows, Mac or Linux), the names of the last few kinds of step she logged (for example computer_use.step; never what was on your screen or what was said), and which account and computer sent it. We keep the newest 500 pieces of feedback and use them only to fix and improve Lila. Feedback that can't reach Lila Cloud waits on your computer, in her folder, until it can;
• if you start Lila Plus: your plan, its status, its trial and renewal dates, and the reference numbers Stripe gives your customer record and subscription. Your card details go to Stripe, never to us;
• short-lived network addresses, used to stop abuse, and basic service logs.

Lila Cloud runs on Amazon Web Services in the United States. Copies of its records are backed up hourly and old backups are deleted after 30 days.

What this website keeps

• If you joined the waitlist: the email address you gave and where you came from.
• When you download Lila: a count of the download, which kind of computer it was for, and where you came from (a link's code or the site that linked here). Nothing else about you is kept with it.
• If you answer "What will you use her for?" after downloading: your answer, kept apart from anything that identifies you.
• If you sign in to your account here: a sign-in token kept in your browser's local storage, which signing out removes. Signing in and making an account talk to Lila Cloud directly.
• If you start Lila Plus or open Manage billing: those are pages run by Stripe, which receives your email address, card and billing details and keeps them under its own privacy policy.

The download itself comes from GitHub, and the pages load their fonts from Google Fonts, so both see your network address when that happens. The site runs on Fly.io, keeps network addresses only briefly in memory to stop floods, and keeps basic service logs. It sets no cookies and uses no advertising or tracking.

The beta Discord

If you join our beta Discord, what you post there is seen by the other members and kept by Discord under its own privacy policy. It is not part of Lila or Lila Cloud.

Why we use it

To run Lila and Lila Cloud, keep them within their limits, stop abuse, fix problems, and contact you about your account. We share information only with the services listed above, to run Lila, or when the law requires it.

Keeping and deleting

We keep your account while it exists. To delete your account and what Lila Cloud keeps about you, write to ethan.g.beirne@gmail.com; we will delete it within 30 days, apart from backups, which expire on their own. To remove what is on your computer, uninstall Lila and delete her folder.

Adults only

Lila is for adults. We don't knowingly collect information from anyone under 18, and we close accounts that belong to minors.

Security

Passwords and tokens are kept only in scrambled form, and Lila Cloud accepts connections only through its secure address. No system is perfectly secure, and Lila's files on your own computer are only as safe as your computer account.

Your rights

Depending on where you live, you may have the right to see, correct, delete or get a copy of your information, or to object to how it is used. Write to ethan.g.beirne@gmail.com and we will answer within 30 days.

Changes

We may update this policy. The version date at the top changes when we do, and if the changes are significant we will tell you in the app or by email.

Contact

Ethan Beirne, ethan.g.beirne@gmail.com.