Privacy Policy

This policy describes how LIL (the “LIL — Listen It Later” iOS app; “we”, “us”) collects, uses, and shares data when you use our iOS app, website, and related services (the “Service”). We designed the Service around a personal music inbox — saving, organizing, and playing music across platforms — and we collect only the data needed to make that work.

1. Data we collect

All data listed below is linked to your account. We do not use any of it for cross-app or cross-site tracking, and we do not sell your data.

• Email address: used to create your account, authenticate you, and send service-related messages.
• Name: your display name or profile name, used to present your account inside the Service.
• User ID: an internal LIL account identifier used to associate your inbox, purchases, and settings with you.
• Photos or videos: images you upload, such as tracklist photos or screenshots you want us to parse.
• Audio data: short audio samples captured only when you explicitly start the song-recognition flow.
• Other user content: URLs, pasted text, notes, and other content you submit so we can parse, organize, and save music to your inbox.
• Search history: searches you run inside the app so we can return results and help you revisit prior lookups.
• Product interaction: actions such as feature taps, screen views, inbox activity, playback events, and parse requests. We use this for app functionality and limited first-party analytics.
• Device identifiers: an app-generated analytics identifier used to understand feature usage and diagnose crashes. Not used for advertising or cross-app tracking.
• Purchase history: records of your in-app purchases and subscription status, used to deliver, restore, and support what you bought.

2. How we use your data

• Operate core features: parsing, inbox, search, playback.
• Process the text, links, and images you submit using third-party AI to identify music and generate editorial summaries.
• Authenticate you and keep your account secure.
• Fulfill purchases and restore entitlements.
• Respond to support requests and legal obligations.
• Improve the Service through aggregated usage analytics.

3. Third-party processors

We use the following providers to operate the Service. They act as processors under our instructions and are bound by their own privacy terms.

• Supabase — authentication, database, and realtime sync.
• Apple (StoreKit, Apple Music, Sign in with Apple) — purchases, music catalog, and optional login.
• Google (OAuth) — optional social login.
• Vercel — application hosting and infrastructure analytics.
• PostHog — product-analytics events, configured without third-party advertising integrations.
• Last.fm (optional connection) — if you link your Last.fm account, we exchange tokens so scrobbles can flow between your LIL activity and Last.fm.
• OpenAI — processes the text, links, and images you submit to identify music and generate editorial summaries. Inputs sent via the API are not used to train OpenAI models.
• A third-party AI agent provider — powers the optional deep AI research tasks you explicitly start, receiving the text or links for that task.

4. Tracking, ads, and children

We do not run third-party advertising, and we do not use your data for ad targeting or cross-app tracking (no IDFA, no advertising IDs).

LIL is not directed to children under 13 and we do not knowingly collect personal information from them.

5. Data retention

We retain your data as long as your account is active. When you delete your account (see below), we delete or anonymize your personal data within 30 days, except where we are required to retain specific records (for example, transaction receipts for accounting or fraud prevention).

6. Your rights

• Access & export: you can request a copy of your personal data at any time.
• Correction: fix inaccurate profile data through the app settings.
• Account deletion: request deletion from within the app or by emailing support@playlater.app. Deleting your account removes your inbox items, parse history, activity, and profile.
• Disconnect third parties: you can revoke Apple Music, Google, and Last.fm integrations from the relevant provider and from the app’s settings.

7. Security

Data in transit uses TLS. Data at rest is protected by Supabase managed encryption. Access to production systems is restricted to authorized personnel and gated by MFA.

8. International transfers

The Service is operated on infrastructure that may process data in the United States and other regions. By using the Service you consent to such transfers.

9. Changes to this policy

When we make material changes, we will update the date above and — for significant changes — notify you in-app or by email before the changes take effect.

10. Contact

Questions, requests, or complaints? Email us at support@playlater.app.