Privacy Policy
This policy explains what information Milo collects, why, who we share it with, and the choices you have. It covers the Milo iOS app ("the app") and this website ("the site"). "Milo", "we" and "us" mean the team behind Milo, based in Bangkok, Thailand.
1. Information we collect
In the app
- Account details. When you create an account we receive your email address. If you sign in with Apple or Google, we receive the basic profile information that provider shares with us (such as your name and email, or Apple's private relay email if you choose to hide yours).
- Your notes. The text you write, the collections you create, and the places Milo has pinned from them (place name, address and map coordinates).
- Location. If you allow location access, Milo uses your device's location to find places near you when it resolves a place you've mentioned. You can turn this off at any time in iOS Settings.
- Crash and performance reports. Diagnostic data collected through Apple's MetricKit, such as crash logs and performance metrics. These reports do not include the contents of your notes.
On the website
- Waitlist form. If you sign up through our form (hosted by Tally), we collect your email address, whether you'd like to be a beta tester, the features you'd like to see, and anything you type in the "other" field.
- Technical data. Like most websites, our hosting provider automatically logs basic request data such as your IP address, browser type and the pages you visit. The site does not use analytics or advertising cookies.
2. How we use it
- To run the app: save and sync your notes, detect places you mention, and show them on your map.
- To keep your account secure and let you sign in on your devices.
- To find and fix bugs and improve performance.
- To email you about Milo's launch, beta access and product updates if you joined the waitlist. You can unsubscribe at any time.
- To decide which features to build next, using the feedback you give us in the form.
We do not sell your personal information, and we do not use it for advertising.
3. Who we share it with
We only share data with the service providers we need to run Milo:
- Supabase stores your account and syncs your notes, collections and pins.
- Apple provides place search through MapKit, Sign in with Apple, and crash reporting through MetricKit. When Milo looks up a place, the search text and an approximate search area, which may be based on your current location, are sent to Apple. Apple says these requests are not linked to your Apple Account. See Apple Maps & Privacy.
- Google provides Google Sign-In, if you choose it. The site also loads its font from Google Fonts, which means your browser sends your IP address to Google.
- Tally hosts our waitlist form and stores your responses.
- Vercel hosts this website.
We may also disclose information if the law requires it.
4. Where your data is stored and for how long
Notes are saved on your device first and synced to our Supabase servers when you're online. Our providers may store data on servers outside Thailand. We keep your account data and notes for as long as your account is active. When you delete your account, your account details, notes, collections and pins are deleted from our database immediately and we keep no records of them. Any copy held in our hosting provider's automatic backups is removed when those backups expire. Waitlist responses are kept until Milo launches or until you ask us to delete them, whichever comes first.
5. Your rights and choices
- Access, correct or delete. You can ask us for a copy of your data, to correct it, or to delete it by emailing hello@milonote.com.
- Delete your account. You can delete your account at any time from Settings in the app. This permanently deletes your account and all your notes.
- Location. You can allow, limit or turn off location access in iOS Settings → Milo. Milo still works without it, but place results may be less accurate.
- Emails. Use the unsubscribe link in any email, or contact us.
Depending on where you live (for example under Thailand's PDPA, or the GDPR in the EU and UK) you may have extra rights, such as objecting to processing or complaining to your local data protection authority. We'll answer any request within 30 days.
6. Children
Milo is not intended for children under 13, and we do not knowingly collect their data. If you think a child has given us personal information, contact us and we'll delete it.
7. Security
Data is encrypted in transit between the app, the site and our providers. No system is perfectly secure, but we limit access to your data to what's needed to run Milo.
8. Changes to this policy
If we change this policy we'll update the effective date above, and for significant changes we'll let you know in the app or by email.
9. Contact
Questions or requests about your privacy: hello@milonote.com.