Privacy Policy

Last updated: 2026-06-19

LILAC is a messaging app built so that you never have to hand over a phone number, email address, or password to use it. This policy explains, in plain language, what LILAC does and does not do with your information.

Contact: [email protected]

The short version

No account, no signup. LILAC does not ask for your email, phone number, name, or a password. There is nothing to log in to.
Your identity is a key on your device. When you first open LILAC it creates a cryptographic key. That key stays on your device (and, where available, in your platform's secure keystore for backup). It is never sent to us.
We cannot read your messages. Messages are end-to-end encrypted. Our relay server only ever sees scrambled (encrypted) data, random mailbox identifiers, message sizes, and timestamps — never the content, and never who you are.
No ads. No analytics. No trackers. LILAC contains no advertising SDKs, no analytics SDKs, and no third-party tracking.

What is stored, and where

Data	Where it lives	Can the developer see it?
Your identity key	On your device; optionally your platform keystore (Google)	No
Your contacts / conversation list	On your device only	No
Message content	End-to-end encrypted; in transit through the relay as ciphertext	No
Recovery phrase (12 words)	Shown to you to write down; never transmitted	No
Encrypted mailbox messages	On the relay temporarily, as ciphertext only	No (encrypted)

The relay server

To pass a message from one device to another, LILAC uses a relay (a "mailbox" service). The relay is designed to know as little as possible:

It holds only encrypted message blobs, random mailbox identifiers, message sizes, and timestamps.
It does not know your name, phone number, email, or who you are talking to in any human-readable form.
Undelivered messages are automatically forgotten after 24 hours of inactivity. A relay that forgets is a feature.

Even if the relay were fully compromised or seized, your keys, contacts, and message content could not be recovered from it.

Data deletion

Delete a contact: removes it from your device. Because you only ever shared a disposable link, nothing about you remains on the other person's side that ties back to a phone number or email.
Delete everything: uninstalling LILAC removes your on-device data. Encrypted relay messages expire on their own.

Permissions LILAC uses

Permission	Why
Internet	To send and receive encrypted messages through the relay
Notifications	To let you know when a new message arrives
Camera (optional)	Only if you scan an invite QR code
Foreground service (optional)	Only if you turn on instant delivery

Children

LILAC is not directed at children under 13 (or the minimum age in your country).

Changes

If this policy changes, the "Last updated" date above will change. Material changes will be reflected in the app's store listing.

Contact

Questions about privacy: [email protected]

← Back to lila-c.com