Privacy Policy

Milo is a calm health journal: you write naturally about what you ate, how you trained, and how you felt, and Milo turns it into structured insight. Your journal is personal, and this policy explains — in plain language — exactly what we collect, why, and the control you have over it. The short version: we never sell your data, and we never use it for advertising.

Who we are

Milo (the “app,” “we,” “us”) is operated by Nathan Bekele (the data controller). If you have any question about this policy or your data, reach us at support@milohealthjournal.com.

What we collect

We collect only what the app needs to work. Every category below is linked to your account so your journal is available across sessions; none of it is used for cross-app tracking or advertising.

Account details: Your email address (and name, if you provide one) — to create and secure your account and personalize the app.
Your journal entries: The text you write — food, workouts, sleep, mood, notes — and the calorie/macro estimates Milo derives from it.
Fitness information: Workout entries (exercise, duration, sets/reps) and the weight / body-measurement history you log.
Health data: If you connect Apple Health, the metrics you authorize (active energy, steps, weight, sleep, workouts). See Apple Health.
Audio: If you use voice logging, audio is captured temporarily for transcription and then discarded — we store only the resulting text, not the recording.
Photos: If you log a meal by photo, the image is used to generate a description and is stored with that entry.
Purchase history: Your subscription status and transaction events, via RevenueCat, for receipt validation and access to premium features.
Diagnostics & usage: Crash reports and performance data (via Sentry) and product-interaction analytics (via PostHog) — to keep the app stable and understand which features help.

We do not use App Tracking Transparency, set advertising identifiers, or link your data to third-party data for advertising or measurement.

How we use your data

To run the app — store your journal, compute calorie/macro estimates, surface patterns, and sync across your sessions.
To personalize — tailor targets and insights to the basics you provide (age, height, weight, goals).
To keep it working — diagnose crashes and performance issues, and understand which features are useful so we can improve them.
To process your subscription — validate purchases and unlock premium features.

We never sell your personal data, and we never use your journal, health, or fitness data to advertise to you.

Apple Health (HealthKit)

Connecting Apple Health is optional. When you do, Milo reads only the data types you explicitly authorize (such as active energy, steps, weight, sleep, and workouts) to show your calorie balance and surface patterns, and — if you grant it — can write workouts or nutrition you log back to Health.

Health data is never used for advertising, never sold, and never shared with third parties for their own use. You can revoke Milo’s Health access at any time in the Apple Health app or iOS Settings.

Voice & photos

Voice: transcription runs on your device where supported. Audio is processed to produce text and then discarded — we don’t keep the recording.

Photos: a meal photo is used to generate a description of the food and is stored alongside that journal entry so you can view it later. Deleting the entry removes the photo.

Analytics & crash reporting

We use a small set of first-party services to keep Milo stable and useful:

PostHog — product analytics (which features are used, funnel and retention). Event data is keyed to your user id; we don’t send your journal text or health data as analytics properties.
Sentry — crash and performance diagnostics, so we can fix problems quickly.
RevenueCat — subscription and entitlement management.

These are service providers acting on our behalf, not advertising networks.

We don’t sell your data and we don’t share it for advertising. We share it only with the infrastructure and service providers that make the app function — our backend host (Supabase), the AI services that produce your estimates, and the analytics/crash/subscription providers named above — each acting under contract and only to provide their service. We may also disclose data if required by law or to protect rights and safety.

Where your data lives

Your account and journal are stored on our backend provider, Supabase, hosted in the United States, with row-level security so each account can only access its own data. Your entry text is sent to AI services to generate calorie/macro estimates and is handled only to return that result.

How long we keep it

We keep your data while your account is active so your journal stays available. When you delete your account, your personal data and journal entries are erased from our systems (see below). Backups and legally required records may persist for a limited period before rotating out.

Your rights & choices

Delete your account — anytime, in the app: Settings → Account → Delete account. This permanently erases your profile, journal entries, and associated data from our systems.
Access or export — email us and we’ll provide a copy of your data.
Correct — edit your entries and profile directly in the app.
Apple Health — revoke access anytime in Health / iOS Settings.

Depending on where you live, you may have additional rights (access, correction, deletion, portability, objection). To exercise any of them, contact support@milohealthjournal.com.

Children

Milo is not directed to children under 13, and we do not knowingly collect data from them. Onboarding requires confirming you are 13 or older. If you believe a child under 13 has used Milo, contact us and we will delete the account.

Changes to this policy

If we make a material change, we’ll update the date above and, where appropriate, notify you in the app. Continuing to use Milo after a change means you accept the updated policy.

Contact

Questions, requests, or concerns? Email support@milohealthjournal.com and a real person will get back to you.