Privacy

Last updated 20 September 2026.

This describes what the software and the server actually do, taken from the code that runs them. Where something is a limitation rather than a promise, it says so.

What Lilypad cannot see

Your screen and your input never reach Lilypad's server. A session is a direct encrypted connection between your phone and your Mac (WebRTC, DTLS-SRTP). When the two cannot reach each other directly (some mobile networks make that impossible) the media is forwarded by a relay, which passes through encrypted packets it has no key for. Nothing in that path is recorded.

Lilypad does not have your files, your keystrokes, your screen contents, your location, or an advertising identifier. There is no analytics or tracking code in the apps or on this site.

What is stored, and why

• Your account. Email address, the name you chose, and a hash of your password (never the password). If you sign in with Apple or Google, the identifier that provider gives us instead.
• Your devices. For each computer and phone: a name, its platform, the app version it last reported, the public half of a keypair it generated, when it was added, and when it last signed in. The private half never leaves the device.
• Which devices are paired, so a phone can reach a laptop without scanning a code every time, plus when that pair last connected.
• A short security log. Sign-ins, failed sign-ins, device changes, with the IP address they came from. This is what makes "was that me?" answerable.

How long

The security log is deleted automatically after 2 days. Everything else lasts until you remove it: removing a device deletes it, and deleting your account deletes the account, every device on it, and every pairing between them. Deletion is immediate and cannot be undone.

Database backups are kept for 7 days and then deleted. They are held on two machines, sent between them over an encrypted connection, and readable only by the administrator account on each. A backup taken before you deleted something still contains it until it ages out.

Who else is involved

• Oracle Cloud runs the server.
• Cloudflare carries traffic to it, and serves this website.
• Apple and Google, only if you choose to sign in with them, and only to verify that sign-in.
• The AI provider you set up on your Mac (such as Anthropic, OpenAI, Google or OpenRouter), and only if you use Ask. See below.
• TypeSafe, if you add your own TypeSafe key or choose Lilypad’s hosted Jev option. See below.

Your data is not sold, and is not shared for advertising.

Ask, and the one time something leaves your Mac

Everything above describes a product that carries nothing. Ask is the exception, and it is worth stating plainly rather than burying.

When you use Ask, your Mac sends what is on its screen, including window titles and any text that is visible, to the AI provider you configured on that Mac: Anthropic, OpenAI, Google Gemini, OpenRouter, or another endpoint you enter. A model running on the Mac itself receives it without it leaving. It goes directly from your Mac to them, under your own API key. Lilypad does not receive it, store it, or see it, and it is not used to train anything on our side. What the provider does with it is governed by their terms, not ours, so read whichever one you chose.

If you also add a TypeSafe key on your Mac for instant actions, short commands such as “scroll down” or “click Compose” go to TypeSafe first, so they can be done at once: your command, the name of the app in front, and the names of actionable controls on the screen, including buttons, links, fields, rows, and menu items, plus matching installed-app names when you name an app. Never a screenshot, and never what is typed in a field. That too goes directly from your Mac under your own key, and your phone names TypeSafe before the first time.

Pro and Team accounts may instead choose Lilypad runs whole tasks, with no API key on the Mac. The same text-only information — the command, front app, keyboard focus, control roles and labels, matching installed-app names, and short summaries of prior steps — goes first to Lilypad’s server and then to TypeSafe on Lilypad’s key. If an app exposes no controls, the Mac may read its pixels locally to find something named in the command; only a complete recognized label already in that command is sent, never the other recognized screen text. No screenshot or field value is sent. Lilypad checks the subscription and keeps only expiring counters for the 25-task daily allowance; it does not store or log the request or answer. Bring-your-own-key Ask remains available on every plan and continues to go directly to the provider chosen on the Mac.

Ask does nothing until you turn it on. Your phone asks before the first task and explains what is about to happen; you can say no, and everything else in Lilypad keeps working exactly as it did. You can turn it off again at any time from the Ask panel, and the provider can be removed entirely on the Mac.

What you can do

Everything here is in the app rather than behind a support request. "Your devices" on your phone lists every device on your account, renames them, and removes them. The same screen deletes your account outright. It asks you to type your email address first, because it cannot be undone.

Being straight about the stage this is at

Lilypad is new and is run by one person. There is no dedicated security team and no third-party audit. The server is one machine; if it is down, pairing and remote wake-up are down with it. Please weigh that before putting a machine that matters behind it.

Contact

Questions about any of this, or a request to see or delete your data: support@takedia.com. A privacy page that makes you go somewhere else to find the address is not much of one.