Privacy Policy

Your privacy matters

Welcome to Talk to Lili.

Lili is an AI-powered conversational companion who shares stories, ideas and Masterclasses inspired by her experiences and outlook on life.

We want you to feel comfortable exploring, learning and talking with Lili. We also want you to understand how your information is handled and what choices you have.

This Privacy Policy explains how we collect, use and protect personal information when you visit www.talktolili.com or use our services.

1. Who is responsible for your information?

Talk to Lili is operated by Decision Graphics UK Ltd, registered in England and Wales, company number 01049921.

Registered office: 20 Highfield Close, Lingfield, England, RH7 6GR.

Email: hello@talktolili.com

Decision Graphics UK Ltd is responsible for the personal information processed through Talk to Lili.

2. Information we collect

Depending on how you use Talk to Lili, we collect:

• Your email address when you become a member, together with the date you joined and whether your membership is current. If you tell us what Lili should call you, we keep that name with your membership record, and it goes to the AI service with your conversation so that Lili can use it. You can change or remove it on your account page.
• Membership, subscription and transaction references from our payment provider, Stripe. Stripe holds your payment details and billing history; we receive confirmation of payment and a reference number, never your card number.
• Your email address if you ask to be told when a Lili Collections piece is ready, together with which piece.
• If you buy from Lili Collections, your name, email address and delivery address, and what you bought.
• Messages you send to Lili, which are processed to provide a reply and are not saved by us (see section 3).
• Information you choose to save in your Companion Note, if you are a member and write one (described in section 4).
• Technical information needed to operate and secure the website: a service log line for each message (described in section 3), and two cookies (described in section 13).
• Statistics about how the site is used: the pages visited, how you found us, how long you stay and how much of each Masterclass is listened to (described in section 14).
• Any enquiries you send us by email, and your communication preferences if we introduce news or promotional messages.

You can explore the website, talk to Lili and listen to free Masterclasses without creating an account. Some technical information is still processed when you use the site, as explained below.

3. Conversations with Lili

Lili uses artificial intelligence to respond to your messages and help you explore everyday life, ideas and the subjects covered in her Masterclasses.

Please remember that Lili is an AI companion, not a human being or a qualified medical, psychological, financial or legal adviser. You should avoid sharing information you would not want processed by an AI service, particularly highly sensitive personal details.

What happens to your messages. Your conversation lives in your browser while your tab is open; it isn’t kept by us and goes when you close the tab or press Start again. Each message you send, together with the conversation so far, goes to our server and then to two service providers:

• Anthropic, whose Claude model generates Lili’s replies. We use Anthropic’s standard commercial API terms. Under those terms, messages are deleted from Anthropic’s systems within 30 days of receipt, unless Anthropic’s safety systems flag the content as violating its usage policy, in which case it may be kept for up to two years. Anthropic does not use your messages to train its models. Processing takes place in the United States.
• OpenAI, which runs two safety checks on each message: a moderation check on the message itself, and a short decision step that sees the message and up to four earlier turns, each cut to 500 characters. We instruct OpenAI not to store the decision step’s content, and no identifier for you is sent with either call. Under OpenAI’s API terms, abuse-monitoring logs may be kept for up to 30 days. OpenAI does not use your messages to train its models. Processing takes place in the United States.

No other company receives the text of your conversation.

What we keep. We do not save the text of chats. The chat is available in your browser during the visit and is not saved as a history for a future visit. Our infrastructure retains the following limited operational data:

• One line per message in our hosting provider’s logs, for 30 days, recording that a request happened, how long it took, the result of the safety check, and whether the message used any of sixteen words we watch for (such as “grief” or “lonely”) so that we can confirm the safety system is working. The line does not contain your words.
• A count of messages from your network address over the last two minutes and the last two days, held in a form that cannot be turned back into the address, so that no one person can overload the service. These counts lapse by themselves.
• If Lili has shown you a safety message, a ten-minute marker so that her next reply follows on properly. It is deleted after ten minutes.

Lili does not remember you between visits. If you come back tomorrow, she starts again. If you are a member, the one exception is what you’ve written in your Companion Note, unless you’ve switched it off (section 4).

4. Your Companion Note: helping Lili remember

Members can keep an optional Companion Note: a short note, of up to 1,500 characters, that you write yourself on your account page.

Its purpose is simple: to help Lili remember things you have chosen to share, so your conversations can feel more connected and useful. For example, what you are working on, something you would rather she didn’t raise, or how you like to be talked to.

This is how it works:

• Your choice: The note is on from the moment you become a member. Lili reads what’s in it at the start of each conversation; there’s a switch on your account page to turn it off, and it stays off until you turn it on again. Lili reads it only while it is switched on and your membership is current.
• Your words only: Lili never adds to it or changes it herself, and nothing from your conversations is saved into it unless you choose to keep it.
• Lili’s offers: In a conversation, Lili may offer to add a line she thinks you would want kept, shown to you with Keep and No. Nothing is added unless you press Keep, and what is kept is exactly the words shown to you.
• Your control: You can change it, switch it off or delete it on your account page at any time. Deleting it removes the words straight away.
• Your privacy: The note is kept with your member record in our member database. Our team cannot read it. They can see only whether it is on, how long it is and when it last changed, and can delete it if you ask.
• Your right to leave: If your membership ends, Lili stops reading the note, and it is cleared 90 days after the membership ended. Until then you can still read it and delete it on your account page.

While it is switched on, the note goes with the conversation to the AI provider that generates Lili’s replies, each time you send her a message, so that her reply can take it into account. The terms in section 3 apply to it as they do to your messages.

The Companion Note is not a record of your conversations. We still do not save what you say to Lili.

5. If you buy something from Lili Collections

Stripe takes the payment; we never see your card number.

We keep a record of the order (what you bought, your name and email, the delivery address you gave, and Stripe’s references) for six years, because tax law requires it.

To post your order we place it with Amazon, who receive your name and delivery address for that delivery and nothing else.

Once your order has been sent you can ask us to remove the delivery address from our record.

6. How we use your information

We use personal information to:

• Provide conversations with Lili and access to Masterclasses.
• Create and manage memberships and subscriptions.
• Process payments and maintain necessary transaction records.
• Provide customer support.
• Maintain the security and reliability of the website.
• Operate the optional Companion Note for members who use it.
• Meet our legal obligations.
• Send news or promotional messages where permitted by law and your communication preferences.

We do not sell your personal information to advertisers.

7. Our legal reasons for using information

Depending on the purpose, we rely on appropriate lawful grounds under UK data protection law.

These may include:

• Contract: To provide the services and membership you request.
• Legal obligation: To comply with applicable accounting, tax and other legal requirements.
• Legitimate interests: To maintain service security, respond to enquiries and improve the reliability of our services, where those interests do not override your rights.
• Consent: Where required, including optional activities for which we ask your permission.

If conversations contain sensitive personal information, additional legal protections may apply. We will assess these before launching any feature that retains conversation content.

8. Who we share information with

We use these providers to operate Talk to Lili:

• AI technology: Anthropic (Lili’s replies) and OpenAI (the safety checks), both in the United States.
• Website hosting and technical infrastructure: Vercel (the website and Lili’s engine, United States), Neon (our member database, the United Kingdom), and Mux (streaming of the My Story film and the Masterclasses).
• Payments and subscriptions: Stripe.
• Amazon, who receive your name and delivery address so that a Lili Collections order can be delivered, and nothing else.
• Site statistics, only if you say yes to them on our cookie message: Google Analytics (section 14).
• Email: Resend (sends your sign-in links and membership emails from its European region in Ireland).

These providers process information on our behalf, or, where applicable, under their own privacy responsibilities.

We do not make private conversations publicly available.

9. Where information is processed

Our website and AI services use infrastructure in the United States. Our member database is held by Neon in the United Kingdom. Sign-in and membership emails are sent through Resend’s Ireland region.

Where personal data is transferred outside the UK, we rely on each provider’s data processing agreement incorporating the UK International Data Transfer Addendum to the EU standard contractual clauses.

10. How long we keep information

• Conversations: not saved by us; processed by the AI providers subject to the retention terms described in section 3.
• Service log lines (no conversation content): 30 days.
• Rate-limit counts: two minutes and two days, held in a form that cannot identify you.
• Member records (email address, join date, membership status, and the name you’ve asked Lili to use, if you’ve given one): for the life of your membership and until you ask us to delete them once it has ended.
• Membership history: the dates of joining, renewal, payment failure, cancellation and ending, kept with your member record, together with any change the team makes to your membership from the admin and the reason they record.
• Sign-in links: a link’s record is deleted the moment it’s used, or within a day of expiring unused; a note that a link was requested is kept for 30 days.
• Sign-in sessions: up to 30 days, or until you sign out.
• Collections interest requests: kept until we’ve emailed you that the piece is ready and for 90 days after, or until you tell us to stop, which you can do from that email.
• Failed email attempts: the address and the provider’s error, kept 90 days.
• Site statistics (described in section 14): 13 months, then deleted.
• Payment records: held by Stripe for as long as the law requires.
• Lili Collections orders: six years from the order, because tax law requires it; the delivery address can be removed on request once the order has been sent.
• Companion Notes: for as long as you keep one while you are a member, and cleared 90 days after your membership ends. Deleting your note, or your member record, removes it straight away.
• If you switch the note off, we keep that setting with your member record so that it stays off.

11. Keeping your information secure

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss and misuse. Sign-in links work once, sessions can be ended by signing out, and member Masterclasses are streamed with time-limited tokens issued only to signed-in members.

No online service can guarantee absolute security, but protecting your information is an important part of how Talk to Lili is designed and operated.

12. Your rights and choices

Under UK data protection law, you may have rights to:

• Access personal information held about you.
• Request correction of inaccurate information.
• Request deletion of information.
• Restrict or object to certain uses.
• Receive certain information in a portable format.
• Withdraw consent where processing is based on consent.

These rights depend on the circumstances and applicable law.

You can request deletion of your account information by emailing us. We will explain any information that must be retained for legal or contractual reasons. Cancelling a paid membership and requesting deletion are separate actions: cancel first from your account page, and once the paid period has ended we can delete your record on request.

You also have the right to object to the use of your personal information for direct marketing at any time.

To make a request, email hello@talktolili.com.

You may also raise a concern with the UK Information Commissioner’s Office at www.ico.org.uk.

13. Cookies and website technology

We set two cookies, both needed to run the service, and no advertising cookies:

• sos_visitor: a random identifier used to manage the daily message allowance for conversations with Lili. It is set when you first send Lili a message, lasts one year, and holds nothing about who you are.
• sos_member: set when you sign in as a member. It holds a random session reference, not your email address, and lasts 30 days or until you sign out.

We also set three cookies of our own for the site statistics described in section 14:

• tl_vid: a random identifier for your browser, used only for those statistics. It lasts 13 months from your first visit.
• tl_sid: a random identifier for a single visit, which ends after 30 minutes without activity.
• tl_optout: set only if you turn analytics off, so that nothing more is measured. It lasts 13 months.

One more of our own remembers your answer about Google Analytics:

• tl_consent: remembers your Google Analytics choice, so we only ask once. It lasts 13 months.

And only if you say yes, Google Analytics sets two cookies of its own (section 14):

• _ga: a random identifier Google Analytics uses to recognise your browser. It lasts 14 months.
• _ga_W4Z398MRV2: keeps track of your visit for Google Analytics. It lasts 14 months.

Video and audio playback is provided by Mux and sets no cookie.

If we introduce optional analytics, advertising or other technologies requiring consent, we will provide appropriate information and choices before using them.

14. How we measure the site

We keep simple statistics about how the site is used so we can make it better: which pages are visited, how people found us (for example through Instagram or TikTok), how long they stay, and how much of each masterclass is listened to.

This uses a small cookie that identifies your browser to us and to no one else. We do not store your IP address, we never record anything you write to Lili, and none of this information is shared with advertisers or social networks. If you are a member, this activity is linked to your membership so we can understand which masterclasses are helping.

We keep this information for 13 months and then delete it.

You can turn analytics off at any time using the “Turn off analytics” link at the bottom of our pages, or here on this page.

Turn off analytics

Google Analytics

If you choose “That’s fine” on our cookie message, we also use Google Analytics to help us understand how the site is used. It sets two cookies (_ga and _ga_W4Z398MRV2) and sends Google information such as the pages you visit, your approximate location and the type of device you use. Google may process this information outside the UK. Google Analytics does not store your IP address, we have turned off Google’s advertising features, and Google keeps this information for 14 months. If you choose “No thanks”, Google Analytics is never loaded. You can change your choice at any time below.

Google Analytics is off. Turn it on

15. Children and younger visitors

Talk to Lili is intended for adults aged 18 or over. Creating a membership requires you to confirm that you are 18 or over.

16. Changes to this policy

We may update this Privacy Policy as Talk to Lili develops or legal requirements change. If what we do with your information changes, this page changes first, with the date at the top.

The latest version will always be available on our website.

17. Contact us

For privacy questions, information requests or concerns, please email:

hello@talktolili.com

Decision Graphics UK Ltd | Company number: 01049921 | 20 Highfield Close, Lingfield, England, RH7 6GR