Milo Privacy Policy
Updated October 1, 2026 · Effective October 1, 2026 · Applies to Milo
Milo is operated by Melvin Zaid, an individual based in California, United States ("we," "us," or "our"). We are responsible for the personal information described in this policy. Contact melzoogle@gmail.com for privacy questions or requests.
This policy covers Milo, its associated service pages, and communications with us about Milo. It describes features when available in your version. For earlier Peach app features, see the Peach privacy notice. This update does not automatically change the purposes for which previously collected Peach information may be used.
At a glance
- Milo uses AI to respond to what you share. Relevant content reaches our servers and AI providers; chats are not processed only on your device.
- We do not sell your personal information, use private chats for advertising, or share personal information for cross-context behavioral advertising.
- Memory, chat history, attached images, and generated journal reflections are related but distinct records. The scope of a deletion or forgetting action matters.
- You can use in-app privacy controls or email us to request access, correction, or deletion. Deleting the app is not account deletion, and deleting an account does not cancel an Apple subscription.
1. Information we collect
We collect information you provide, information created while you use Milo, and limited information from providers that help operate the service:
- Account and setup: account identifiers, sign-in information, email when supplied, display name, onboarding answers, character name and customization, preferences, time zone, and records of policy acceptance. A guest account can still have a server-side identifier and saved data. Linking an account supports recovery; a guest session may be difficult to recover if its local access is lost.
- Age information: setup uses a birthdate picker to calculate age on your device. The setup request sends birth year, age in years, and time zone, rather than the selected birth month and day. We store age-related records, including an age band and when the answer was recorded, and use them to apply Milo’s minimum age of 13 and the additional protections for users under 18. If you type a full birthdate into chat, it becomes submitted content. An age answer is not independent identity or age verification.
- Chats and images: messages, images you choose to attach, generated replies and image descriptions, conversation dates and identifiers, saved memories, summaries, corrections, and associated source references. We do not obtain access to all of your photos merely because you attach an image.
- Daily activities: goals and their schedules/completions, mood ratings, tags and optional notes, generated journal reflections, focus progress, calming-activity progress (including feelings you choose to name and optional notes), streaks, character traits, virtual currency balances and transaction history, inventory, room choices, gifts, and adventure progress.
- Sharing features: friend and invitation codes, requests, connections, blocks, shared-goal details and progress, and referral/reward records when you use those features.
- Purchases: subscription status, product, transaction and purchase identifiers, eligibility and entitlement information, and usage allowances. Apple processes App Store payments; we do not receive your full payment-card number through that integration.
- Notifications and device features: notification preferences, push tokens, time zone, reminder schedules, delivery status, and information needed for enabled widgets and Live Activities.
- Technical information: IP address and technical request information, app/device platform and version, installation and session identifiers or hashes, feature events, timestamps, usage counts, errors, and security records. A hash or account identifier may still identify you.
- Support and safety: messages you send us, report categories and examples you choose to share, automated safety markers, and privacy-request records needed to verify and handle a request.
Chats, mood notes, goals, and images can reveal health, relationship, sexual, or other sensitive information about you or someone else. Share only what is needed and what you have the right to provide. Do not upload someone else’s confidential information without an appropriate permission or other lawful basis.
2. How information is used
We use information to operate and personalize Milo; authenticate and recover accounts; generate responses, memories and journal reflections; provide activities, progress and sharing features; administer purchases and virtual items; deliver chosen reminders; respond to support and privacy requests; understand feature use and reliability; prevent abuse; apply safety measures; and meet legal obligations.
Milo may use relevant setup answers, goals, earlier conversations, memories and generated journal entries as context for a later response. Generated reflections and inferred memories may be inaccurate; they are not verified facts, diagnoses, or psychological assessments. Mood ratings and tags can inform chat when the mood-sharing setting is on. The current mood-to-chat feature does not include your private mood note. Turning sharing off stops that feature from supplying the mood context; it does not erase an earlier chat response.
We use first-party feature and reliability measurements. We do not use private chats, images, or mood notes to train general-purpose AI models. Personalizing a reply with your saved context is different from training a model. Authorized access may be needed for support you request, security, investigation, or legal compliance; this is not a promise that nobody can ever access your content.
3. AI processing, memory, and image storage
When you submit content for an AI feature, we send the content and relevant context to the AI providers below to generate a response, summarize information, or perform automated safety checks. Where offered, journal generation also processes earlier eligible conversations to produce a reflection. Safety checks are automated and can be wrong; they do not provide real-time human monitoring.
Milo can save memories and summaries so future chats have context. Use available memory controls to review, correct, or forget information. Forgetting changes future memory context; it does not necessarily delete the original visible message. Use the corresponding chat, image, journal, or account deletion control to remove that record, or contact us for help identifying all related records.
Milo stores original attached images in private server storage, together with metadata; it may also store a description and the response. Images are retained with your saved content until the relevant deletion action or another disclosed retention limit applies. This differs from older Peach screenshot processing. Provider and backup copies can follow separate retention rules.
Our AI requests disable optional stored completions. That setting is not a guarantee of zero retention by a provider. OpenAI’s commercial API data controls describe its default non-training treatment of API data and separate security or abuse-monitoring retention; consumer ChatGPT settings do not govern Milo. See OpenAI’s API data controls.
4. Providers and other recipients
- OpenAI: AI responses, summaries, journal generation, image understanding, and automated safety processing, depending on the feature.
- Vercel: hosted backend/web infrastructure and AI Gateway when used to route AI requests.
- Supabase: authentication, databases, private image storage, and first-party event storage. Test builds may use separately operated test infrastructure.
- Apple and RevenueCat: purchases, subscription administration and related account/transaction identifiers. The billing integration does not send them your chat content.
- Expo and platform notification services, including Apple: push tokens, notification payloads, and delivery metadata for remote notifications.
- Sentry, when enabled: limited operational error information through a reporting pathway designed to exclude chat text, images, request headers and attachments. Infrastructure providers may separately keep technical logs.
We may also disclose information to advisers and authorities where reasonably necessary and lawful to comply with a valid legal requirement, prevent misuse, protect people’s rights or safety, or establish or defend legal claims.
In a proposed or completed merger, financing, acquisition, restructuring, business sale or similar transaction, necessary information may be disclosed to counterparties and advisers under appropriate safeguards and transferred to a successor. Existing privacy commitments and applicable law continue to govern; a transaction is not permission to disregard them. We provide notice and obtain consent when required.
5. Information you choose to share
Using friend or Together features can disclose your display name, connection/request information, shared goal title, target, deadline, and progress to the other participant. Share codes only with intended recipients. These features do not give friends access to your private chats or mood notes. Removing a connection or blocking a person cannot retract copies they already saved.
If you export, copy, take a screenshot, or share information through another app, the recipient and that app handle the resulting copy under their own practices. Third-party websites linked from Milo have their own policies.
6. Retention and deletion
We keep account content while it is needed for your account and chosen features, until an applicable deletion action, or until it is no longer needed. We assess retention using the purpose, sensitivity, your requests, and legal, security, accounting and dispute needs. There is no single expiry period for all data.
- Chats, memories, images, mood records, goals, journals, and app progress have different controls. Deleting one item is not a request to delete all account information.
- Prepared privacy exports are designed to expire after 24 hours. Copies you download or share remain outside our control.
- Reports, technical events, notification records, and failed-request records are subject to maintenance and cleanup. They are distinct from saved chat history.
- Some transaction, fraud-prevention, legal and request-administration records may remain where needed and permitted or required by law.
- Deleting an account begins a tracked process. Provider cleanup, sign-in authorization revocation, image removal, and backup expiry may finish at different times. Failed or unverified steps require follow-up; starting deletion does not establish that every copy has already disappeared.
- Limited cleanup references and protected identifiers may be retained to finish a request and prevent deleted information from reappearing after recovery from a backup.
Use the account/data controls in Settings, or email melzoogle@gmail.com if you cannot access the app or need help with a request. Keep any request receipt. We handle requests within applicable legal time limits and explain permitted exceptions. Deleting the app does not delete your account. Account deletion or revocation of Apple sign-in does not cancel an Apple subscription.
7. Your choices and rights
You can change available preferences, turn off mood sharing with chat, review memory, disable notifications in the app or device settings, and control widgets or Live Activities on your device. Notification and widget content can be visible to someone who can see your screen; choose device preview settings accordingly.
Depending on where you live and which laws apply, you may have rights to know about our collection and disclosures, access or obtain a portable copy of information, correct it, request deletion, restrict or object to processing, withdraw consent, and appeal a denied request. You may complain to your local data-protection authority. Withdrawal does not undo lawful processing that already occurred.
Email us with your request and enough information to identify your account. Do not send your password or unnecessary identity documents. We may verify your identity and, for an authorized agent, their authority. We do not discriminate against you for exercising applicable rights. Some requests are limited by others’ rights or our legal obligations; we will explain applicable limits and available appeal options.
We do not sell personal information or share it for cross-context behavioral advertising, including as those terms are defined under applicable US state privacy laws. We do not use sensitive information to infer characteristics for advertising. There is no such sale or advertising sharing to opt out of under our current practices.
8. Website storage and tracking signals
Local storage and similar technologies support sessions, settings, security, and basic feature measurement. Our service pages do not use advertising trackers to follow you across unrelated sites. Browser “Do Not Track” signals do not change these practices; legally applicable privacy choices and opt-out signals remain respected. Blocking necessary storage can affect sign-in or other functionality.
9. International processing and legal grounds
We are based in the United States. Information can be processed in the United States and other countries where our providers operate, whose laws may differ from those where you live. Where required, transfers must use a lawful mechanism, such as applicable adequacy decisions or contractual safeguards. Contact us for information about the safeguards relevant to your data.
Where European, UK or similar laws require a legal basis, we rely on performing our contract for requested features, legitimate interests for proportionate security and service operation where not overridden by your rights, compliance with legal obligations, and consent where required. Sensitive-data processing requires an additional lawful condition where applicable, including explicit consent where required. This notice does not replace a consent choice that the law requires us to obtain.
10. Children and teens, security, and changes
Milo is intended for people aged 13 and older. It is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If setup indicates that a user is under 13, Milo does not continue, and if we learn that we have collected personal information from a child under 13, we will delete it. A parent or guardian who believes a child under 13 has used Milo can contact melzoogle@gmail.com so we can delete the account and its data.
Users aged 13 to 17 should use Milo with the permission of a parent or guardian. For an account that indicates an age under 18, Milo applies additional protections, such as age-appropriate conversation limits and turning off certain optional notifications by default. A parent or guardian with a question about a teen’s account, or a request to access or delete it, can contact melzoogle@gmail.com. A stated age is not proof of age.
We use safeguards designed to protect information, but no system is completely secure. Milo’s AI features require server-side processing and are not end-to-end encrypted against us or the AI providers processing them.
We will update the date above when this policy changes. For material changes, we will provide appropriate notice in the app, on these pages, or through available contact information, and obtain consent where required before applying a new use to previously collected information.