Privacy Policy
Effective date: March 8, 2026
Last updated: March 24, 2026
Milo ("we," "us," or "our") operates the www.gomilo.app website and SMS service (the "Service"). This policy describes how we collect, use, and protect your information.
1. Information We Collect
Account information: name, email address, and Google profile data when you sign in via Google OAuth.
Phone number: when you register for SMS messaging. Phone numbers are stored using one-way cryptographic hashing and AES-256-GCM encryption.
Conversation data: messages you send to Milo via the web app or SMS, and Milo's responses.
Calendar data: event titles, times, and locations from your connected Google Calendar (read-only access).
Usage data: timestamps, session identifiers, and interaction metadata for service operation.
2. How We Use Your Information
To provide, maintain, and improve the Service.
To personalize Milo's responses based on your preferences and context.
To send and receive SMS messages on your behalf.
To display relevant calendar information in conversations.
3. Data Sharing
We do not sell or share mobile or personal data with third parties, affiliates, or partners for marketing or promotional purposes. We only share data with third parties when it is strictly necessary to deliver our service and only under binding agreements that ensure confidentiality. Under no circumstances will mobile data be shared or sold for advertising or promotional use.
We use the following service providers solely to operate the Service:
Anthropic (Claude) — for AI-generated responses.
OpenAI — for text-to-speech.
Twilio — for SMS message delivery.
Google — for authentication and calendar integration.
MongoDB Atlas — for encrypted data storage.
4. Data Security
We use industry-standard security measures including TLS encryption in transit, AES-256-GCM encryption at rest for sensitive fields, and secure secret management. Access is restricted to authenticated family members only.
5. Data Retention
Conversation history and account data are retained for as long as your account is active. You may request deletion of your data at any time by contacting us.
6. Your Rights
You may request access to, correction of, or deletion of your personal data by emailing support@gomilo.app.
7. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.
8. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated effective date.
9. SMS Messaging
If you opt in to Milo's SMS service, we collect your phone number to deliver text messages. Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP. For full details, visit our SMS Sign-Up page.
10. Contact Us
If you have questions about this privacy policy, contact us at support@gomilo.app.