Last updated: 12 October 2026
LLYLL Corp ("LLYLL", "we", "us") is a video-based communication and content creation platform designed primarily for professional and corporate (B2B) use. This Privacy Policy explains how we collect, use, process, store, and protect personal data when you use our website (llyll.com), mobile application, and related services (the "Services"). The data controller is LLYLL Corp, 1111B S Governors Ave STE 82882, Dover, DE 19904, United States. You can reach us about your personal data at contact@llyll.com.
LLYLL is a semi-public professional video platform. Content is generally accessible to authenticated users. Videos are private by default and may become public through deliberate user action, such as publication in a public group.
We may collect: - Identity data: name, email, phone number, company. - Authentication data: Apple user identifier, Google user identifier, Supabase user ID. - Content data: videos, audio recordings, transcripts, subtitles, thumbnails you create or upload. - Device data: device model, operating system version, application version, crash reports, performance telemetry, IP address (transiently, for delivery and security). - Usage data: pageviews, feature interactions, session recordings (product analytics only — see section 6). - Push notification token: an opaque device identifier used to deliver transactional notifications (see section 7). - Install attribution data (mobile app): the advertising campaign that led to your install, the date of the install and of your account creation, device model, OS version, IP address, and a device identifier (the identifier for vendors on iOS, and the advertising identifier if you allow tracking; the advertising ID on Android). Why we use your data, and on what legal basis: - To provide the Services (your account, your videos, AI script writing and editing, notifications): performance of our contract with you. - Product analytics, session replay and advertising measurement: your consent where the law requires it (cookie banner on the website), otherwise our legitimate interest in understanding and improving the Services and measuring our campaigns. - Security, fraud prevention and crash reporting: our legitimate interest in keeping the Services safe and working. - Recordings made in the browser by web contributors: your consent (see section 15). - Compliance with our legal obligations, when applicable.
When you install the iOS application, LLYLL requests access to specific device capabilities to provide the core features of the Service. Each permission is requested at the point of first use and can be revoked at any time in the iOS Settings app. - Camera: required to record video contributions and briefing videos. - Microphone: required to capture audio alongside video recordings. - Speech Recognition (iOS): used when you dictate a change to a script, to turn what you say into text. Apple may process the audio to do so. - Photo Library (Add-only): required to save finished videos to your device photo library when you choose to export one. LLYLL does not read the contents of your photo library. - Notifications: required to deliver transactional notifications (contribution reminders, project updates). See section 7. LLYLL does not request location, contacts, health, calendar, motion, or Bluetooth access, and does not access the camera or microphone outside of an active recording session. On iOS, LLYLL shows Apple's "Allow Tracking" question (App Tracking Transparency). Your answer only decides whether the app may read your device's advertising identifier. On Android, the app uses your device's advertising ID for install attribution only. You can reset or delete it at any time in your device settings.
Users are solely responsible for obtaining consent from any individual appearing in a video. LLYLL provides technical mechanisms to request consent but does not independently verify its legal validity.
LLYLL uses artificial intelligence to improve the clarity, pacing, and accessibility of your content — including automatic cuts, subtitles, summaries, indexing, and voice adjustments. AI is never used to alter the meaning of content, and user content is not used to train AI models. Audio and video content submitted to LLYLL is processed by third-party AI providers acting strictly as data sub-processors under contract: - OpenAI (transcription, including the live spoken interview, and text generation) - Amazon Web Services Bedrock (transcription, script writing and editing decisions, using Anthropic Claude and Mistral models hosted by AWS) - ElevenLabs (speech-to-text transcription) AI processing is transient; raw inputs are discarded after processing, and only the final derived artifacts (subtitles, edited video) are retained as part of your content. AI processing never makes decisions about you that produce legal effects or similarly significant effects. It only helps produce your videos.
Website: LLYLL uses PostHog for product analytics and session replay. On the website, PostHog operates in cookieless mode until you grant consent; once accepted, it may set cookies to persist your session identifier. PostHog may collect pageviews, clicks, device identifiers, usage data, and performance metrics. Mobile application: LLYLL uses PostHog for product analytics and session replay on mobile as well. In the app, two choices are on by default, and you can turn either one off at any time in Privacy Choices, in your account: Statistics (product analytics and session replay, PostHog) and Ad Measurement (install attribution, AppsFlyer). Turning a choice off stops that collection immediately. You can also ask us to stop it at contact@llyll.com. Advertising measurement (website): with your explicit consent, LLYLL uses the Meta Pixel and the LinkedIn Insight Tag to measure the effectiveness of advertising campaigns on Meta platforms (Facebook, Instagram) and LinkedIn. These tools set cookies and may collect pages visited and actions taken on our website. This data is shared with Meta Platforms, Inc. and LinkedIn Corporation respectively, and processed under their privacy policies. You may opt out at any time via the cookie consent banner or by clearing your browser cookies. Advertising measurement (mobile app): when Ad Measurement is on, LLYLL uses AppsFlyer to learn which advertising campaign led to an app install. Four events are reported to the ad network that showed the ad (Meta Platforms, Inc., Google LLC or LinkedIn Corporation): the install, the creation of your account, your first script and your first recorded video. They only say that each step happened, never what your script or video contains. We use them to measure our campaigns. On iOS, Apple's "Allow Tracking" prompt decides whether the app may read your device's advertising identifier: if you allow it, the ad network can match the install to the ad you saw; if you refuse, it only receives Apple's anonymous, aggregated campaign reports. You can change your answer at any time in iOS Settings > Privacy & Security > Tracking. On Android, the ad network receives your advertising ID so it can match the install to the ad you saw; you can also delete your advertising ID in your device settings. LLYLL does not use this data to show you ads elsewhere and does not sell it. You can also ask us to delete this data at contact@llyll.com. Crash and performance reporting: LLYLL uses Sentry on both the website and the mobile application for crash reporting and performance monitoring. Crash reports include device model, OS version, app version, stack traces, and anonymized breadcrumbs; they do not include content you have uploaded.
When you grant notification permission on iOS, the application registers a device push token with Apple Push Notification service (APNs) and forwards it to OneSignal, Inc., the provider we use to schedule and deliver transactional notifications (contribution reminders, project updates, invitations). OneSignal processes the device token, anonymous user identifier, and notification delivery metadata solely on our behalf as a sub-processor. You can revoke notification permission at any time in iOS Settings; this will stop all future deliveries.
LLYLL offers three sign-in methods: - Sign in with Apple: your Apple ID is shared with LLYLL only to the extent permitted by Apple. You may choose to hide your real email, in which case Apple provides a relay address. - Sign in with Google: your Google account email and basic profile are shared with LLYLL when you consent at the Google sign-in prompt. - Email one-time passcode: you provide an email address; LLYLL sends a one-time code via Supabase authentication services. No password is stored or transmitted by the application for SSO methods; authentication credentials are handled end-to-end by the respective identity provider.
Users retain full ownership of their content. LLYLL only receives a limited, non-exclusive license to host and display content for the operation of the Services. Certain content may be voluntarily submitted to LLYLL for marketing or communication purposes via explicit opt-in.
LLYLL reserves the right to restrict, modify, block, or remove content for legal, security, or policy reasons.
Data is stored primarily in the United States (Amazon Web Services). When personal data of people in the European Economic Area, the United Kingdom or Switzerland is transferred to the United States or another country, the transfer relies on the EU-U.S. Data Privacy Framework where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses included in our data processing agreements. Personal data is retained for the duration of your account. Upon account deletion, personal data, videos, and associated content are permanently removed within 30 days. Anonymized analytics data may be retained for up to 12 months for service improvement purposes. Retention by category: - Account, videos and content: for the life of your account, then deleted within 30 days of account deletion. - Session recordings and product analytics: 12 months at most. - Install attribution data: 12 months at most. - Crash reports and technical logs: 90 days at most.
LLYLL shares personal data only with subprocessors necessary to operate the Service. Each subprocessor is bound by a data processing agreement requiring equivalent protection of your data: - Supabase, Inc. — authentication, database hosting - Amazon Web Services, Inc. — media storage (S3), AI transcription, script writing and editing (Bedrock, using Anthropic Claude and Mistral models hosted by AWS), infrastructure hosting (United States) - OpenAI, OpenAI Ireland Ltd. — AI transcription (including the live spoken interview) and text generation - ElevenLabs, Inc. — AI speech-to-text transcription - OneSignal, Inc. — push notification delivery - PostHog, Inc. — product analytics and session replay - Functional Software, Inc. (Sentry) — crash and performance reporting - AppsFlyer Ltd.: mobile install attribution and advertising measurement - Meta Platforms, Inc.: advertising measurement on the website (with consent) and in the mobile app (see section 6) - LinkedIn Corporation — advertising measurement on the website (with consent) and in the mobile app (see section 6) - Apple Inc. — push notification transport (APNs), Sign in with Apple - Google LLC — Sign in with Google, advertising measurement in the mobile app (see section 6) - Cloudflare, Inc. — bot protection (Turnstile) on browser recording links The current subprocessor list is reviewed periodically; material changes will be reflected in this Privacy Policy.
You have the right to access, correct, delete and export your personal data, to object to its processing or ask us to restrict it, and to withdraw your consent at any time, without affecting processing done before. To exercise these rights, write to contact@llyll.com. We reply within one month. You can delete your account directly from the mobile application (Settings > Account > Delete account). Upon deletion, your personal data, videos, and associated content will be permanently removed within 30 days. Web contributors who recorded without an account can request access to, or deletion of, their contribution by contacting contact@llyll.com. If you think we are not respecting your rights, you can lodge a complaint with a data protection authority, such as the CNIL in France (www.cnil.fr).
LLYLL is only for people aged 18 or over. We do not knowingly collect data about minors. If you believe a minor has given us personal data, write to contact@llyll.com and we will delete it.
Some videos are created from contributions filmed in the browser via a link shared by an organizer, without creating an account. If you record a contribution this way: - We collect the video you record (your image and voice) and basic technical data needed to upload it: an anonymous session identifier, device and browser data, and IP address (transiently, for delivery and security). - The legal basis is your consent, given when you record after being shown the on-screen notice. We store a record of the terms version and the time of your consent. - Your clip is shared with the organizer who invited you and processed by our subprocessors (see section 12) to assemble the final video. - We do not perform facial recognition and do not use your image or voice to identify you. - Your clip is retained for the lifetime of the organizer's project and is deleted when the project is deleted. - As you have no account, to access or delete your contribution, contact contact@llyll.com with the recording link; we will action your request within 30 days.
LLYLL may update this Privacy Policy from time to time. If a change is significant, we will tell you in the app or by email before it takes effect. The date at the top of this page shows the latest version.