Privacy Policy

Data we process

We process account details such as your name, email address, authentication identifiers, and profile settings. We also process the training and nutrition information you choose to record, including goals, plans, workouts, sets, food logs, recipes, and coaching conversations. Optional features may include food photos, voice memos, and transcripts. If you grant permission, Milo can read selected Apple Health data such as body measurements, activity summaries, steps, workouts, workout routes, and heart rate, and can write completed workouts to Apple Health. We also receive purchase and transaction identifiers from Apple or Stripe, plus device, diagnostic, and product-usage events.

Why we use it

We use this information to provide Milo, sync your account across web and iPhone, personalize training and nutrition guidance, process purchases, secure the service, provide support, understand reliability and usage, and meet legal obligations. Depending on the activity, our legal basis is performance of a contract, your consent, our legitimate interests in operating and improving the service, or compliance with law.

Apple Health

Apple Health is optional. Milo only reads or writes the categories you authorize, and you can change those permissions in Apple Health settings. Health data is used to support your training, progress, and nutrition experience; we do not use Apple Health data for advertising or sell it.

AI and transcription

AI features are optional and require separate, explicit permission before sharing data. Anthropic processes relevant profile, goals, health and fitness data (including synced Apple Health data), workouts, nutrition, recipes, feedback, coach messages, transcripts and food photos to generate plans, coaching and food recognition results. OpenAI processes voice audio through its Whisper transcription API; the transcript may then go to Anthropic for coaching. Our Anthropic organization has 30-day retention, with no separate workspace override; our workspace stores data in the US and uses global inference. OpenAI states that its audio transcription endpoint does not retain submitted audio or use it for model training. Milo uses a temporary server file for uploaded voice audio; transcripts and coaching records are part of your account data. You can decline or withdraw AI permission in Account & privacy and keep using manual tracking. Withdrawal stops future AI requests and does not undo earlier processing.

When data is shared

Nefkon uses service providers for hosting, storage, email, analytics, AI and transcription, and payment processing. Anthropic and OpenAI are the AI providers described above. We use PostHog for usage analytics linked to account identity, including email and name. GeoIP enrichment is active to derive location from an IP address; raw IP addresses are discarded. Session replay is disabled in the iOS app. Analytics event retention depends on the configured PostHog plan and settings. Apple processes App Store purchases and Stripe processes web checkout; payment card details are handled by those providers. We do not sell personal data. If you create a workout share link, anyone who has it can view the shared content until it expires.

Retention and deletion

We keep account data while your account is active and for as long as needed for security, dispute handling, legal obligations, and reliable backups. You can export your data or request account deletion from Account & privacy in Milo, or by emailing us. Deletion removes the account data we are not required to retain; limited backup or legal records may remain for the period required for those purposes.

Your choices and rights

You can access, export, correct, or delete your information, withdraw consent where processing is based on consent, and contact us about other rights available under applicable law. Cancellation is handled by the store where you made the purchase: Apple for App Store purchases and Stripe for web purchases.

Security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, and alteration. No internet service can guarantee absolute security, so please protect your password and contact us promptly if you suspect unauthorized access.

Changes to this policy

We may update this policy when Milo, our providers, or the law changes. The date at the top shows when the current version was published. If a change materially affects your rights, we will provide an appropriate notice.

Contact Nefkon

For privacy questions or requests, email info@milo-sports.app. You can also use the privacy controls in your Milo account to export your data, change consent, or request account deletion.

info@milo-sports.app Open account privacy controls