privacy policy.
Last updated: August 24, 2026
the short version
You upload photos, we turn them into stickers, and then we get rid of them. Your photos are used only to generate your stickers, are deleted from our servers as soon as your stickers reach your device — and in any case within 48 hours — and are never used for advertising, never sold, and never used to train AI models. There are no ads and no third-party analytics trackers in the apps. Your finished stickers live on your device, not on our servers.
This summary is here to help — the full policy below is what counts.
1. Who we are
The lil guys and lil couple iOS apps (the "apps") and the website lilguys.app are operated by Mihai Honceriu, an independent developer based in Romania ("we", "us"). For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller for the processing described in this policy.
Contact for anything privacy-related: [email protected].
2. What this policy covers
This policy covers both apps and this website. The apps share the same backend and process personal data in the same way; where something applies to only one app, we say so.
3. The photos you upload
The apps exist to turn photos into stickers, so photos are the heart of what we process:
- lil guys — a photo of a person (or, in pet mode, a pet), plus an optional photo of a companion pet.
- lil couple — a photo of each of the two people in the couple, plus an optional photo of their pet.
Here is exactly what happens to them:
- Before upload, the app runs a quick on-device check (Apple's Vision framework) to confirm the photo contains a usable face. This happens entirely on your iPhone; no biometric data is created, stored, or sent anywhere as part of this check.
- Your photos are sent over an encrypted connection to our backend (hosted on Cloudflare), which passes them to OpenAI's image-generation API to create your stickers.
- Photos and generation results are kept on our servers only for as long as the generation needs them. As soon as your stickers are finished and saved on your device, the app confirms it and the server deletes them immediately — your uploaded photos and the generated images alike — usually within seconds of your pack being ready. If that confirmation never arrives — the generation failed, or you lost connection or closed the app mid-run, in which case the files are held briefly so it can resume — everything is deleted automatically within 48 hours.
- Your photos and stickers are not used for advertising, not sold or shared for anyone else's purposes, and not used to train AI models (OpenAI does not train on API data under the API terms we use).
- We do not perform facial recognition, do not extract biometric identifiers on our servers, and do not build any database of faces.
Your generated stickers are stored locally on your device. When you export stickers to WhatsApp, Telegram, iMessage, or anywhere else, that happens at your explicit request, and the receiving app's own privacy policy applies from that point.
4. Other data we process
| Data | What & why | Kept for |
|---|---|---|
| Account & session | The app automatically creates an anonymous account (a random identifier and security tokens stored in your device's keychain) so your credits, purchases, and generations can be tracked without you signing up. | Until you delete your account in the app's settings |
| Sign-in details (optional) | If you sign in with Apple or Google, we receive your name, email address, and an account identifier from the provider, so your purchases and credits can follow you across devices. Signing in is never required to use the apps. | Until you delete your account |
| Purchase data | Payments are processed entirely by Apple. We receive transaction identifiers, the product purchased, and subscription status — never your payment card or billing details. | As long as needed for accounting and to provide what you bought |
| Device integrity | We use Apple's App Attest / DeviceCheck to verify that requests come from a genuine, unmodified copy of the app — this protects the service from abuse and fraud. | Attestation keys persist while the app is installed |
| Technical logs | Our backend logs request metadata (timestamps, request identifiers, response codes, and IP addresses at the infrastructure level) for reliability and abuse prevention. Logs never contain your photos or generated images. | Short rolling window, then deleted |
The apps contain no advertising and no third-party analytics or tracking SDKs, and they do not use Apple's ad-tracking framework (you will never see an App Tracking Transparency prompt from us).
5. This website
lilguys.app is a static site hosted by Hostinger. We set no cookies and run no analytics. Hostinger's servers keep standard access logs (IP address, browser type, pages visited) for security and operations. The site loads the Inter font from Google Fonts, which means your browser sends a standard request (including your IP address) to Google's servers when the page loads.
6. Who we share data with
We share data only with the service providers (processors) needed to run the apps, and only for the purposes above:
- OpenAI (USA) — generates your stickers from your photos.
- Cloudflare (USA/global) — hosts and runs our backend.
- Apple — payments, sign in with Apple, device integrity, and app distribution.
- Google (USA) — sign in with Google (only if you use it) and web fonts on this site.
- Hostinger (EU) — hosts this website and our email.
We never sell personal data, and we do not share it with data brokers or advertisers.
7. International transfers
Some providers above process data in the United States. Where personal data leaves the European Economic Area, the transfer is protected by recognized safeguards — the EU–U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses, depending on the provider.
8. Legal bases (GDPR)
- Performance of a contract (Art. 6(1)(b)) — processing your photos to generate the stickers you asked for, managing your account, and delivering your purchases.
- Legitimate interests (Art. 6(1)(f)) — fraud and abuse prevention (device integrity checks), service reliability, and security logging.
- Consent (Art. 6(1)(a)) — optional features like signing in with Apple or Google.
9. Your rights
Under the GDPR you can ask us for access to, correction of, deletion of, or a portable copy of your personal data, and you can object to or ask us to restrict certain processing. Two things you can do without even emailing us:
- Delete your account — available directly in the app's settings; it removes your account and associated data from our backend.
- Photos — these are deleted as soon as your stickers reach your device, and within 48 hours regardless.
For anything else, email [email protected] and we will respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Romania that is the ANSPDCP (dataprotection.ro), or you can contact the authority in your own country.
10. Photos of other people
lil couple is built around photos of two people, and you may upload photos where you are not the only person visible. Please only upload photos of people who are okay with it — you are responsible for having their permission (see our terms of service). If you believe someone has uploaded a photo of you without your consent, email us and we will help; note that uploaded photos are deleted from our servers as soon as the stickers reach the device that made them, and within 48 hours in any case.
11. Children
The apps are not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.
12. Security
All traffic between the apps, our backend, and our providers is encrypted in transit (TLS). Session credentials are stored in the iOS keychain on your device. Access to backend infrastructure is restricted and authenticated, and our backend verifies device integrity (App Attest) before serving requests.
13. Changes to this policy
If we change this policy, we will post the new version here and update the date at the top. For significant changes we will let you know in the app.
14. Contact
Mihai Honceriu · Romania · [email protected]