Privacy Policy — DevZHR Apps

Effective Date: July 14, 2026  ·  Last Updated: July 14, 2026

DevZHR ("we," "our," or "us") publishes the Lili family of iOS apps. This single Privacy Policy applies to all of them:

• Lili Call Blocker — blocks unwanted phone calls
• Lili AI Router — chat with AI models using your own API keys, or fully offline
• Lili Widget — home screen widgets and personalization
• Lili Keyboard — custom keyboard with fonts and styles

Section 1 describes principles common to every app; Section 2 describes what is specific to each app. By using any of these apps, you agree to the practices described here. If you do not agree, please do not use the apps.

1. Practices Common to All Our Apps

What We Never Do

• We do not require account creation or sign-in.
• We do not operate a backend server: your personal content is never uploaded to infrastructure we control.
• We do not sell, rent, or trade personal information.
• We do not access your contacts, messages, call content, or conversations.

Analytics & Crash Reports (Google Firebase)

Except where noted in Section 2, our apps use Google Firebase (Analytics, Crashlytics, Remote Config) to understand which features are used, to receive crash reports so we can fix bugs, and to deliver configuration updates (for example, updated block lists in Lili Call Blocker). Firebase may collect device identifiers, coarse device information (model, OS version, language), and app interaction events. This data is aggregated and is not used by us to identify you personally. See Google's privacy policy in Section 4.

Advertising (Google AdMob) — ad-supported apps only

Lili AI Router, Lili Widget, and Lili Keyboard show ads served through Google Mobile Ads (AdMob). These apps request App Tracking Transparency (ATT) permission to access the advertising identifier (IDFA) for more relevant ads. If you decline, ads are still shown but are less personalized. Lili Call Blocker shows no ads and performs no ad tracking.

Data Stored Locally on Your Device

Each app stores its working data (settings, lists, history) locally on your device using Apple's standard storage frameworks, protected by iOS file protection. Deleting an app removes its local data.

2. App-Specific Details

Lili Call Blocker

• How blocking works: the app compiles block lists into Apple's CallKit Call Directory system, which filters calls entirely on your device. By Apple's design, the app is never told who is calling you — incoming call information never reaches the app or us.
• Your block and allow lists: numbers and patterns you add manually, and the community lists you select, are stored locally on your device only.
• Community lists: downloaded from Firebase Remote Config. Selecting or applying lists sends no personal data — the app only fetches the catalog.
• No ads, no ATT tracking, no access to your contacts or call history.

Lili AI Router

• API keys: any key you enter (OpenAI, Anthropic, Google Gemini, Mistral, and others) is stored in the iOS Keychain and only ever sent, over HTTPS, directly from your device to the provider you configured it for. We never receive it.
• Conversations: stored locally on your device. When you send a message to a cloud provider, its text (and any photo you attach) goes directly to that provider under its own privacy policy. On-device models and Apple Intelligence run entirely offline.
• Camera: used solely to attach photos you capture to messages you choose to send.
• Local network: if you connect to a server on your own network (Ollama, LM Studio…), traffic stays between your device and that server.

Lili Widget

• Widget configurations and personalization choices (styles, photos you pick for widgets) are stored locally on your device. Photos you select are used only to render your widgets and are never uploaded to us.

Lili Keyboard

• What you type stays yours: the keyboard extension never records, stores for us, or transmits to us the text you type. Typing happens on your device.
• Full Access: the keyboard offers iOS's "Allow Full Access" option, which iOS requires for features such as ads and richer content inside the keyboard. Granting it never causes your keystrokes to be sent to us. You can use the keyboard without granting Full Access, with reduced features.
• Fonts and styles you choose are stored locally on your device.

3. How Information Is Used and Shared

The limited information described above is used only to:

• Operate each app's features on your device
• Measure aggregate usage and fix crashes (Firebase)
• Serve advertising in the ad-supported apps (AdMob), personalized only if you grant ATT permission
• Send your content to services you explicitly configure (e.g. an AI provider in Lili AI Router)

We do not build advertising profiles ourselves, sell data to third parties, or make automated decisions about you. We may disclose information if required by law — though, as described, we hold essentially none.

4. Third-Party Services

5. Data Retention

• Local data (lists, conversations, settings, API keys, fonts, widget setups): retained on your device until you delete it or delete the app.
• Firebase analytics and crash data: retained by Google per Firebase's standard retention periods (up to 14 months for analytics identifiers).
• Data sent to services you configure (AI providers): retention is governed by that provider's own policy.

6. Data Security

• Credentials (such as API keys in Lili AI Router) are stored in the iOS Keychain, Apple's dedicated secure credential store.
• All network requests use HTTPS/TLS (with a narrow exception for local-network-only connections you configure yourself, such as an Ollama server on your own Wi-Fi).
• On-device data benefits from iOS's standard file protection.

No method of transmission or storage is 100% secure, but we take reasonable steps consistent with Apple's platform guarantees.

7. Your Rights

Because your content lives on your device rather than on our servers, you are already in direct control of it:

• Access & deletion: view, edit, or delete your data directly within each app, or delete the app to remove all its local data.
• Analytics: for questions about data processed by Google (Firebase, AdMob), contact us and we will assist, including forwarding deletion requests where applicable.

Contact us at [email protected] for any request. We will respond within 30 days.

For European Union / EEA Residents (GDPR)

• Data controller (for analytics and advertising data): DevZHR, [email protected]. For content you send directly to a third-party service you configured (e.g. an AI provider), that service is the data controller.
• Lawful bases: consent (ad personalization via the ATT prompt, which you may decline) and legitimate interest (measuring usage and fixing crashes to operate free apps).
• You have the right of access, rectification, erasure, restriction, and objection, and the right to lodge a complaint with your local Data Protection Authority.

For California Residents (CCPA/CPRA)

• Right to know / delete: we hold no server-side personal information ourselves; Google processes analytics and advertising data as described in its policy.
• Right to opt out: we do not sell personal information. You can limit ad personalization by declining the App Tracking Transparency prompt in the ad-supported apps.
• We will not discriminate against you for exercising your rights.

8. Children's Privacy

Our apps are not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through one of our apps, contact us at [email protected] so we can address it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time — for example when we release a new app or change a service provider. When we make significant changes, we will update the "Last Updated" date above and, where appropriate, notify you through the apps. Continued use after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

• Email: [email protected]
• Developer: DevZHR