Last updated 20 September 2026
Lilica is a personal and family care organiser made by Luxford Interactive ("Lilica", "we", "us"). This policy explains what information Lilica collects, why, and how it is kept safe. Lilica is not a clinical system, emergency monitoring service, or medical device, and this policy should be read with that in mind.
When you create a Lilica account and use the app, you may provide:
Lilica only ever records what you tell it. It does not verify diagnoses or prescriptions, does not give medical advice, and never infers medical, legal, emergency or monitoring conclusions on your behalf.
Lilica collects a small amount of technical information needed to run the service reliably: device/app version information (for crash and compatibility diagnostics), and basic sign-in/session activity. Lilica does not use third-party advertising trackers, and does not sell your information to anyone.
Lilica lets you invite other people ("Care Circle" members) to help with a person's care. If you invite someone, they can see the categories of information you specifically grant them access to (for example, "Care & health" or "Bills & money"), and nothing else. You control who is invited, their role, and what they can see, and you can remove access at any time. A Care Circle member's own access is enforced by Lilica's servers, not just the app.
Lilica's data is stored using Supabase (a hosted PostgreSQL database and file storage provider). Your account information, records, and any attached files are held on Supabase's infrastructure, protected by encryption in transit and access controls that restrict data to your own account and the Care Circle members you have explicitly granted access.
Lilica offers a paid annual subscription after an initial free period. Subscription purchases are handled entirely by the Apple App Store or Google Play, using the payment details you have already provided to Apple or Google - Lilica never sees or stores your card details. Lilica uses RevenueCat to manage subscription status across devices; RevenueCat receives your subscription/purchase status from Apple or Google, not your payment details.
Account emails (such as sign-up verification codes and password reset codes) are sent using Resend, an email delivery provider. Resend processes your email address only to deliver these messages.
If you choose to turn on Face ID/Touch ID app lock in Lilica, this uses your device's own built-in biometric system. Lilica never receives, stores, or transmits a biometric scan or template of any kind - it only ever receives a pass/fail result from your device's operating system.
If you are in the UK or EU, you have rights under data protection law (including the UK GDPR/EU GDPR) to access, correct, delete, or restrict the use of your personal information, and to complain to your local data protection authority (in the UK, the Information Commissioner's Office, ico.org.uk).
Lilica accounts are intended for adult organisers. Information about a person being supported (which may include a child) is entered by the organiser who creates and controls that record, not by the child themselves.
We may update this policy from time to time. The "last updated" date above will always reflect the most recent version.
Questions about this policy or your data can be sent to admin@luxfordinteractive.com.