Privacy Policy

Milo (“Milo,” “we,” “us,” “our”) is an AI nutrition and fitness coach you use by messaging it on WhatsApp or Telegram. This policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have. Milo is operated from Australia and we handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using Milo, you agree to this policy.

Milo is built to coach you, not to advertise to you. We do not sell your personal information, and we do not use your health data for advertising.

Information we collect

We collect only what we need to coach you:

• Account details: your name, and the phone number or messaging ID associated with your WhatsApp or Telegram account. If you use the optional web dashboard, we also collect the email address you sign in with.
• The messages you send Milo: the text, voice notes, and any images you send to log food, workouts, weight, and habits, and any questions you ask.
• Health and fitness information: the nutrition, body-weight, body-composition, training, and habit data you choose to share so Milo can track your progress and guide you. See Sensitive information below.
• Payment information: if you subscribe, our payment processor (Stripe) collects and processes your payment details. Milo never sees or stores your full card number; we receive only limited information such as your subscription status and the last four digits.
• Usage and technical data: timestamps, message delivery status, diagnostic logs, and, on our website and dashboard, basic device and browser information needed to operate and secure the service.

We do not buy your data from third parties, and we do not collect information about you from other sources.

Sensitive information

Some of what you share with Milo, such as your body weight, body composition, and details of your eating or exercise, is “sensitive information” under Australian privacy law. We collect and use this information only to provide the coaching you have asked for. By choosing to share this information with Milo, you consent to us collecting and handling it for that purpose. You can stop sharing it at any time, and you can delete your account and data whenever you want (see Your rights and choices).

How we use your information

• To understand your messages and log your food, training, weight, and habits.
• To calculate your calorie and macro targets and coach you toward your goals.
• To remember your history, preferences, and patterns so your coaching improves over time.
• To send you replies, reminders, and check-ins in your chat.
• To show your history and charts on the optional web dashboard.
• To process your subscription, provide support, and prevent fraud and abuse.
• To operate, secure, debug, and improve the service.
• To comply with our legal obligations.

How Milo uses AI

Milo uses third-party large language model and speech providers to understand your messages and generate its responses. When you message Milo, the relevant content is sent to these providers solely to produce Milo’s reply:

• Anthropic (Claude) and Google (Gemini): to understand your text and images and generate coaching and logging responses.
• OpenAI (Whisper): as a fallback to transcribe voice notes into text.

These providers process your content on our behalf under their API and enterprise terms, which prohibit them from using your content to train their general public models. We may use de-identified or aggregated data to evaluate and improve Milo’s own systems (for example, to measure response quality or detect abuse). AI responses can be inaccurate or incomplete, and Milo’s estimates and guidance are general wellness information only, not medical advice.

Cookies and the website

Our website and dashboard use a small number of cookies and similar technologies that are necessary to operate the site, keep it secure, and keep you signed in, along with basic analytics to understand and improve how the site is used. You can control cookies through your browser settings, though some features may not work properly if you disable them.

Who we share your information with

We share your information only with the service providers that make Milo work, and only as needed to run the service. Our current providers include:

• Anthropic, Google, OpenAI: AI processing of your messages, images, and voice notes (see above).
• Meta (WhatsApp) and Telegram: to deliver messages to and from you on the platform you use.
• Supabase: secure database hosting for your account and logs.
• Vercel: application hosting and delivery.
• Stripe: to process subscription payments.

These providers may use your information only on our behalf and under contractual safeguards. We may also disclose information if required or authorised by law, or where reasonably necessary to protect the rights, safety, and security of Milo, our users, or others. We do not sell your personal information.

Where your information is stored

Your information is stored on reputable cloud infrastructure. Some of our providers store or process data on servers located outside Australia (for example, in the United States or the European Union). Where we disclose your information to an overseas provider, we take reasonable steps to ensure it is handled consistently with Australian privacy law.

Data retention

We keep your data for as long as your account is active so Milo can remember your history and coach you over time. If you deactivate your account, we keep your data for 30 days so you can return, and then permanently delete it. If you delete your account outright, we remove your personal data from our active systems promptly and from routine backups within a limited period afterwards. We may retain limited records for longer where we are required to (for example, billing and tax records, typically for up to seven years), or where necessary to resolve disputes or prevent fraud and abuse.

Your rights and choices

• Access and correction: you can ask Milo in chat to correct any logged item, view and edit your data on the dashboard, or contact us to request access to the personal information we hold about you.
• Deletion: you can deactivate or permanently delete your account and data at any time by messaging Milo (type delete my account) or by emailing us. You can also stop messaging Milo at any time.
• Complaints: if you have a privacy concern, please contact us first. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
• If you are located outside Australia, you may have additional rights under laws such as the GDPR (EU/UK) or CCPA (California). Contact us to exercise them.

Security

We take reasonable administrative, technical, and organisational steps to protect your personal information, including encryption in transit and at rest, access controls that limit staff access on a need-to-know basis, and monitoring. No system is perfectly secure, but if we became aware of a data breach likely to cause you serious harm, we would notify you and the OAIC as required under the Notifiable Data Breaches scheme.

Children

Milo is not intended for anyone under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will change the “last updated” date above, and we will let you know about significant changes in your chat or on our website.

Contact us

Questions, a privacy request, or want your data deleted? Email us at hello@himilo.app. Milo is operated by COACH MILO APP, Australia.