Legal
Privacy Policy
Last updated: September 11, 2026
At ILTY, we believe your mental health data is deeply personal. This policy explains what we collect, how we use it, and your rights. We've tried to keep it readable. No one should need a law degree to understand their privacy rights.
What We Collect
Account Information
Email address (for account creation and communication), and any profile information you choose to provide.
Conversation Data
Your conversations with ILTY companions are stored on your own device, not on ILTY servers. On iPhone and iPad they live in your iCloud Documents (or locally, if iCloud is switched off) with full file protection. On Android they live in a SQLCipher-encrypted database on the phone, with the key held in the Android Keystore.
To generate each reply, your message is sent in transit through our server to our AI provider (Anthropic) and is not retained there. That means your conversations are encrypted in transit and at rest but are not end-to-end encrypted, and no AI companion can be — the message has to reach the model that answers it. We would rather say that plainly than imply otherwise.
Voice Mode. When you talk to a companion instead of typing, your speech is turned into text on your phone by Apple's on-device speech recognition. No audio of your voice is recorded, stored, or sent anywhere. The companion's written reply is sent to our voice provider (ElevenLabs) to be spoken aloud, and we delete that generation from ElevenLabs as soon as it has been produced; ElevenLabs may keep backups for up to 30 days. Only the companion's reply is sent — never your words, your name, or anything that identifies you.
Usage Data
How you interact with the app (features used, session length, mood tracking inputs). This helps us improve the product.
Device Information
Basic device type and operating system version, solely for technical support and app compatibility.
How We Use Your Data
- •To provide the ILTY service: your conversations, mood tracking, and personalized insights
- •To improve the product based on aggregate usage patterns (not individual conversations)
- •To send you important service updates (you can opt out of marketing emails)
- •To respond to your support requests
What We Don't Do
- ✗We don't sell your data to third parties. Ever.
- ✗We don't store or have access to your conversation content.
- ✗We don't use your conversations to train AI models.
- ✗We don't show you ads or share data with advertisers.
- ✗We don't share identifiable information with employers, insurers, or other third parties.
Data Security
Your data is encrypted both in transit (TLS) and at rest. We use industry-standard security practices and regularly review our security measures. While no system is 100% secure, we take your data protection seriously.
Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we're legally required to retain it. You can request data deletion at any time by contacting us.
Research data
ILTY collects an anonymous, aggregate dataset of session-level metadata (mood deltas, emotion tags, companion choice, time of day) for occasional published research studies. No messages, no user identifiers, no IP addresses. See the research data policy for the full field list and how anonymization works.
Your Rights
Depending on where you live, you may have the right to:
- •Access the personal data we hold about you
- •Request correction of inaccurate data
- •Request deletion of your data
- •Export your data in a portable format
- •Opt out of marketing communications
To exercise any of these rights, contact us at hello@ilty.co.
Third-Party Services
We use a limited number of third-party services to operate ILTY:
- •Cloud infrastructure providers for hosting and data storage
- •AI model providers for powering conversations
- •A voice synthesis provider (ElevenLabs) for spoken replies in Voice Mode — it receives only the companion's reply text, and we delete each generation right after it is made
- •Analytics tools for understanding aggregate usage
All third-party providers are bound by data processing agreements and are carefully selected for their privacy practices.
Children's Privacy
ILTY is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.
Changes to This Policy
We may update this policy from time to time. If we make significant changes, we'll notify you via email or through the app. Continued use of ILTY after changes constitutes acceptance of the updated policy.
Questions?
If you have questions about this privacy policy or how we handle your data, please reach out at hello@ilty.co. We're happy to explain anything in more detail.