MILO Privacy Policy
Effective: 2026-05-19
This Privacy Policy describes how the MILO iOS app handles your data. Published by MILO USA ("MILO," "we," "us"). Short version below; full details follow.
The short version
- The free tier runs entirely on-device. Questions you type or speak never leave your iPhone.
- We do not track you across apps or websites. No IDFA. No App Tracking Transparency prompt.
- The iOS app has no third-party analytics or ads. No Firebase Analytics, Google Ads, Facebook SDK, or AppLovin in the app.
- The public website may use limited analytics. Website analytics are for page-performance and product-interest signals, not ad targeting.
- Voice transcription is on-device. Audio is never uploaded.
- We don't sell your data. We don't have data to sell.
1. What we collect
A. Free tier (anonymous, on-device)
We collect nothing. Your questions and MILO's answers are processed by Apple's on-device Foundation Models and stored locally on your iPhone in the app's sandboxed Application Support directory. They are never transmitted to MILO, Apple, or any third party.
B. If you Sign In with Apple
We receive from Apple: a stable opaque Apple user ID (a hash, not your Apple ID email), your display name if you choose to share it, and your email (real or Apple's private relay — Apple decides). These are stored in encrypted iOS Keychain on your device and, when our backend is provisioned, on our server to recognize you across devices.
C. MILO Pro subscribers
Apple processes the payment. We never see your credit card. We receive a signed receipt from Apple confirming an active subscription and the product ID purchased (com.milousa.app.pro.monthly).
Cloud LLM requests go to our Cloudflare Worker at milo-lite.workers.dev. The Worker sees your prompt and MILO's reply (used only to generate the answer, not stored), a request ID for billing reconciliation, and the IP address Cloudflare's edge sees (transient, used for rate limiting). The Worker does not log prompts to disk.
D. Public website analytics
The public website at milo-usa.com may use limited, cookieless analytics to understand which public pages are useful, such as the homepage, demo, article, model, and citation pages. Analytics are configured separately from the iOS app and are not used for ad personalization, cross-app tracking, or selling data.
2. Permissions MILO asks for
| Permission | Why | Data leaves device? |
|---|---|---|
| Microphone | Voice input — only while you tap and hold the mic. | No. |
| Speech Recognition | Transcribe voice (requiresOnDeviceRecognition=true). | No. |
| HealthKit (read-only, opt-in) | Context for advice (e.g. "you slept 4h, factor in fatigue"). | No. Health data never sent to our servers. |
| Notifications | Opt-in advice digests. | Only if you opt in. |
| Siri / Shortcuts | "Ask MILO" voice command. | Anonymous request goes to the cloud Worker. |
3. Data retention
- On-device: Chat history is kept locally until you delete the app or clear it from Settings → Clear chat history. Capped at the last 100 messages.
- Server: For Pro users, individual prompts are processed in memory and discarded. We retain only subscription state (until you cancel + Apple's 30-day grace period) and anonymous request counts for capacity planning.
4. Sharing
We share app data only with these parties, only for these purposes:
| Party | What we share | Why |
|---|---|---|
| Apple | Subscription state | StoreKit 2 is Apple's payment system |
| Cloudflare | Prompt + reply (Pro only) | Edge proxy for the LLM provider |
| LLM provider (Anthropic) | Prompt + reply (Pro only) | Generate the answer |
For the public website, limited analytics vendors may receive page-view and interaction signals only when analytics is configured. We do not share data with advertisers, data brokers, or social networks.
5. Your rights
- Delete the app to remove all on-device data instantly.
- Sign out from Settings to clear stored Apple credentials.
- Email Email to request deletion of any server-side subscription record. We process requests within 30 days.
6. Children
MILO is rated 17+ on the App Store and is not directed at children under 13. We do not knowingly collect data from children. Parents who believe a child has used MILO can email Email.
7. Changes
We may update this policy. The "Effective" date at the top will change. Material changes will be surfaced in the app on next launch.
8. Contact
Email
MILO USA, Florida, United States