Draft for attorney review. This page was prepared for MBC's attorney and is not final until approved. Remove this notice when the final version is published. Name change for review: on October 30, 2026 the product was renamed from Lilia AI to Dr. Lily AI; the attorney should confirm the new name throughout this page (and any trademark questions).

Privacy Policy

Version 2026-11-07 · Effective date: [to be set at launch]

1. Who is responsible

Medical Business Consulting (MBC), Florida, runs Dr. Lily AI and is responsible for your information.

2. What we collect

Account: your name, email address and password (stored only as a secure hash), your plan, and the date you accepted our Terms and this Policy.
Conversations: the messages you send and Dr. Lily AI's answers, the titles of your chats, and which chats you pin.
Memories and settings (Super Dr. Lily AI): notes you ask Dr. Lily AI to keep, and your settings such as language and the name Dr. Lily AI should call you.
Improving Dr. Lily AI: when this is turned on, MBC may review your finished chats automatically to find general lessons for all users (for example a question Dr. Lily AI could not answer). Lessons never include your name, contact details or case details, and an MBC reviewer approves each one before Dr. Lily AI uses it. Dr. Lily AI Amiga, Start fresh and course practice chats are never used. You can turn this off at any time under Your data. [Attorney: confirm this use, the default and the consent wording before it is turned on for the live site.]
Files: files you attach are sent to our AI provider to answer you. We keep a copy of the file with that chat, so Dr. Lily AI can keep using it in the next few messages. It is deleted when you delete the chat or your account.
Career profile and plan (Super Dr. Lily AI, only if you agree): the career facts you tell Dr. Lily AI to keep (for example your degree, exams, goals and available hours) and the plans you confirm. You can see, change or delete each item in your route view.
Meetings (Dr. Lily AI Conference add-on): when you upload or record a meeting after confirming everyone agreed to be recorded, we keep the transcript and the minutes you review. The audio itself is not stored in Dr. Lily AI's database. Transcripts and minutes are deleted when you delete them, the project, or your account.
Brigada internacional registration: if you register, we keep what you write in the form: name, email, country, profession, languages, where your credential was issued, your U.S. license status and jurisdiction, training, availability dates and the experience you describe. MBC uses it only to contact you about brigade opportunities. You can withdraw it or delete it at any time.
Encouraging messages: when you confirm one with the “Yes, save it” button, we keep its topic, text and date, and the exam or interview date you gave. If you choose phone notifications, we keep your browser's push address. You can delete each message in Schedule or turn them off in Customize.
Apply with MBC: when you tap "Apply with MBC", we keep your name, email, the state, the license type, and the phone and message you choose to add, and we send them to MBC's client records (CRM) so MBC's licensing team can contact you.
MBC Team case files: when you hire MBC, MBC's analysts may upload your CV and your NPDB report to Dr. Lily AI to prepare your case report and draft letters for your review and signature. These files are sent to our AI provider (OpenAI, or Anthropic as a stand-by), to do that work, and the case is kept in MBC's client records. [Attorney: confirm the client authorization MBC collects before uploading an NPDB report.]
Website visits (public pages only): on our public pages (home, help, terms, privacy and AI disclaimer) we use Google Analytics, through Google Tag Manager, to count visits: which page was opened, roughly where from (country or city), the device and browser, how the visitor found us, and whether they created an account. Google Analytics is never loaded inside the Dr. Lily AI chat, so your conversations, files, memories and account details are never sent to Google.
Usage: how many messages you send each day, to apply plan limits, and a sign-in cookie that keeps you signed in.

We do not use advertising trackers: Google Analytics is set up with Google signals and ad personalization turned off. We do not sell or share your personal information for advertising.

3. How we use it

To run Dr. Lily AI: answer you, remember your chats and memories if your plan includes them, and apply plan limits.
To keep Dr. Lily AI safe and working, and to fix errors.
To contact you about your account or important changes.

4. Who receives it

Optional AI voice, OpenAI. When AI voice is configured and you select it, the answer you choose to hear is sent to OpenAI to generate synthetic audio. This feature uses the server owner’s OpenAI API account and its applicable processing terms. Browser voice and dictation may use your browser or operating system’s speech services. Audio is not stored in Dr. Lily AI’s database.
Email, Resend. When email is set up, password-reset links, and the encouraging messages you chose to receive by email, are sent through Resend to your email address.
Phone notifications. If you turn them on, your browser's push service (for example Google, Apple or Mozilla) delivers a signal with no message content; your phone then fetches the message from Dr. Lily AI's server. You can turn them off in Customize.
Meeting transcription, OpenAI. When you use Dr. Lily AI Conference, the meeting audio is sent to OpenAI to be turned into text. The transcript is then sent to our AI provider (OpenAI, or Anthropic as a stand-by) to write the minutes. This uses the server owner’s OpenAI API account and its applicable processing terms. [Attorney: confirm the consent wording for recording other participants under the laws of each state where meetings take place.]
Voice conversation, OpenAI. When you start a voice conversation (🎙️), your voice goes directly from your browser to OpenAI to be turned into text and to speak Dr. Lily AI’s answers. The text of what you said and Dr. Lily AI’s answers are saved in your chat like any other message. Dr. Lily AI’s answers are written by our AI provider (OpenAI, or Anthropic as a stand-by), as in a written chat. Audio is not stored in Dr. Lily AI’s database.
Our AI providers, OpenAI and Anthropic. Your messages, files and the context Dr. Lily AI needs are sent to an AI provider to generate answers, and when Dr. Lily AI searches the web, her search queries go through that provider’s web search. Since 4 November 2026 answers are generated by OpenAI (the Responses API); Anthropic (the Claude API) is kept as a stand-by for when OpenAI is unavailable. Each provider processes this data under its commercial terms and retention rules (OpenAI data controls, Anthropic data retention). [Attorney: confirm the provider terms MBC accepts for both providers, including any zero data retention agreement.]
Website analytics, Google. Visits to our public pages are measured with Google Analytics and Google Tag Manager, which use cookies and send visit information to Google under Google's Privacy Policy. Google does not receive anything from inside the chat.
Our hosting provider, which stores the database for us.
Authorized MBC staff, only when needed to support you, fix a problem, or when you ask for MBC's help.
Authorities, only when the law requires it.

We will not send your conversations to MBC's sales or client records unless you choose to share a case summary with MBC.

5. How long we keep it

You can delete your account in the app (Account → Your data) or, if you cannot sign in, ask us at drlilyai.com/delete-account. We keep your chats, memories and account until you delete them or delete your account. When you delete them, they are removed from our live systems right away and from backups within 30 days (we keep daily backups for 30 days to protect your data). [Attorney: confirm the retention schedule.]

6. Your choices and rights

Delete any chat, any memory, or your whole account in the app.
Analytics: you can block Google Analytics with your browser's cookie settings or Google's opt-out add-on. Dr. Lily AI works the same either way.
Export your data from Account in the app.
Correct your name and memories in the app.
Depending on where you live, you may have more rights. Write to us to use them; we will answer within the time the law requires.

7. Sensitive information

Dr. Lily AI is not for patient care. Please do not enter identifiable patient information, Social Security numbers, passport or immigration document numbers, or payment card numbers. If you share health, criminal or other sensitive details about yourself, we use them only to answer you.

8. Security

Dr. Lily AI uses encrypted connections (HTTPS), stores passwords as secure hashes, and limits staff access. No system is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.

9. Children

Dr. Lily AI is for adults 18 and older. We do not knowingly collect information from anyone under 18.

10. Changes

We will tell you in the app before an important change to this Policy applies.

11. Contact

Privacy questions or requests: info@medicalbcorp.com.

Medical Business Consulting (MBC), affiliated with Medical License Factory · PO Box 7168, Daytona Beach Shores, FL 32116 · info@medicalbcorp.com