Privacy policy

Effective 7 September 2026

Milo & Friends is a voice companion for children, set up and supervised by a grown-up. This policy explains what the app and its service collect, why, and the choices parents have. It is written for the grown-up who creates the account.

In short

• No ads, no third-party tracking, no advertising identifiers and no analytics SDKs.
• The microphone is on only during a conversation, with an on-screen indicator, and we never save microphone recordings.
• Voice is processed live by OpenAI under a configuration with zero data retention; it is not used to train models.
• Parents can read short recaps, erase a child’s history and delete the whole account inside the app.

What we collect

• Grown-up account. A Sign in with Apple identifier. We do not request your name or email address from Apple. We record which version of our privacy notes you accepted and when.
• Child profiles. A first name or nickname, the daily time limit, bedtime, caption and transcript preferences, and any topics you choose to skip. We never ask for a last name, school, address, photos or contact details, and the characters are designed never to ask a child for them.
• Conversations. While a conversation runs, audio streams to OpenAI and the words are checked by our safety service. We keep a short recap of each conversation (friend, mode, length, and a check-in note if a topic was redirected) and daily usage such as minutes and conversation counts. Full transcripts are off by default; if a parent turns them on, text is kept for at most 24 hours.
• Purchases. Apple transaction identifiers and entitlement status, used to verify Milo & Friends Plus and extra-minute packs. Apple handles payment; we never see card details.
• Technical records. Timestamps, durations, error codes and model usage for each conversation, kept for reliability, safety and cost control. We do not collect location, contacts, photos or device advertising identifiers.

How we use it

To run conversations, enforce the limits a parent sets, check every request and reply for child safety, verify purchases, fill the family notebook, and keep the service reliable and free of abuse. We do not sell personal information, build advertising profiles, or share data with data brokers.

Children’s privacy

The app is made for children and requires a grown-up to create the account, pass the parent gate and set up each profile. We collect only what the service needs, there is no public sharing and no child-to-child communication, and participation is never conditioned on disclosing more information than necessary. Parents can review recaps in the family notebook, erase a child’s saved history, and delete the parent account at any time from the grown-up area.

Service providers

• Apple for Sign in with Apple, App Store purchases and Family Sharing.
• OpenAI for real-time voice and language processing, under an agreement configured for zero data retention.
• Cloudflare for hosting and encrypted storage of the service’s records.

Retention

Account and profile data stay while the account exists. Recaps stay until a parent erases them or deletes the account. Optional transcript text is removed within 24 hours. Purchase and technical records are kept as long as needed to honour purchases and our legal obligations. Audio is never retained by us.

Security

Connections use TLS with certificate pinning in the app, personal data is stored encrypted, and purchases and settings sit behind the parent gate.

Your choices

Erase a child’s history or delete the parent account from the grown-up area. Manage subscriptions in your Apple Account settings. Turn microphone access off in iOS Settings at any time.

Changes and contact

If this policy changes materially we update the date above and ask parents to review the notes again inside the app. Questions about privacy: email info@thinkdefinecreate.com.