1. Introduction

Your data is yours. The short version: we collect what we need to keep Lilith working for you, we tell you what stays and what doesn't, and you can change any of it at any time.

Lilith is operated by Oshun Synthetics LTD ("we," "our," or "us"), the data controller for the Service. We are committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our web application and related services (collectively, the "Service").

By accessing or using Lilith, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use our Service.

2. Information We Collect

We collect the following categories of information:

• Account information: Email address, display name, and profile preferences when you create an account.
• Usage data: Interaction patterns, domain preferences, session durations, and feature usage across Tara, Veritas, Nyx, Arete, Nisaba, and Metis domains.
• Device information: Browser type, operating system, device identifiers, and screen resolution for optimization purposes.
• Content data: Meditation logs, reading history, sky observation records, and habit tracking data that you voluntarily provide.
• Technical data: IP addresses, cookies, and similar technologies for authentication and security.

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To personalize your experience across domains
• To generate cross-domain recommendations and insights
• To communicate service updates and security notices
• To detect, prevent, and address technical issues or abuse
• To comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data in the following limited circumstances:

• Service providers: Third-party vendors who assist in operating our Service (hosting, analytics, email delivery), bound by contractual confidentiality obligations.
• Legal requirements: When required by law, regulation, or legal process.
• Safety: To protect the rights, property, or safety of Lilith, our users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. Account data is retained while your account is active. You may request deletion at any time through your profile settings or by contacting us.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest, secure session management, and regular security audits. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your personal data
• Restrict or object to certain processing activities
• Port your data to another service
• Withdraw consent at any time

To exercise any of these rights, please contact us at privacy@oshunsynthetics.com.

8. Regional Privacy Notices

Lilith publishes region-specific notices for Global, California, EU/EEA, UK, China, Brazil, Japan, Korea, Australia, and New Zealand users. These notices describe the local rights, consent controls, residency commitments, and reporting paths that apply in each region.

California users can exercise the CCPA/CPRA do-not-sell and do-not-share choice at account level. EU/EEA and UK users receive explicit opt-in controls for optional analytics and marketing processing.

9. DSAR Requests

Data-access, portability, correction, and erasure requests can be filed through the companion app privacy center after account verification. DSAR export and erasure requests carry a 30-day response SLA unless a legally permitted extension applies.

10. Data Residency

EU player account, save, telemetry, DSAR, moderation, and consent data is stored in EU regions only. China player account, save, telemetry, DSAR, moderation, and consent data is stored in China regions only. Cross-region replication is blocked for those pinned residency paths.

11. Moderation Reporting

EU and UK content reports expose a DSA-style moderation path with human review, appeal routing, and transparency logging for eligible workshop, social, profile, and chat reports.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by relevant authorities.

13. Children's Privacy

Under-13 accounts are routed to a guardian-controlled COPPA path. Social surfaces, voice chat, workshop publishing, personalized advertising, and nonessential telemetry are disabled until the restricted path is lifted or the account ages into an eligible profile state.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

15. Contact Us

For questions, concerns, or requests regarding this Privacy Policy, please contact:

Oshun Synthetics LTD — Privacy Team
Email: privacy@oshunsynthetics.com