Plain language. No tricks.

Effective: June 28, 2026

Milo Buddy is published by Milo Buddy LLC. This page describes exactly what data the app collects, what stays on your device, what gets sent to our AI partner so Milo's responses feel personal, and what we never do with any of it.

1. Who we are

Milo Buddy LLC is a Maryland limited liability company. The app and this website are operated by Milo Buddy LLC.

• Email: hello@getmilobuddy.com
• Address: 7879 Maple Lawn Blvd, Fulton, MD 20759, USA

2. What the app stores on your device

During onboarding you (or, in the parent path, you the parent) tell Milo a few things so the app can adapt. All of this lives on your device using Apple's secure on-device storage. The only data that ever leaves your device is the small bundle described in section 3, sent when Milo's AI personalization is used. Milo does not have conversations with users: there is no chat or text box, so nothing you type to Milo is ever sent, because there is nothing to type.

• First name (or whatever you tell Milo to call you)
• Age or age bracket, if entered
• What kind of work you do (homework, work projects, studying, reading, etc.)
• Where focus tends to break down (getting started, staying with it, frustration, etc.)
• Things you love (interests like soccer, dinosaurs, music, coding, etc., used by Milo to personalize encouragement)
• Reward app or activity you chose
• Permission preferences (notifications on or off)
• Session history: task name, duration, on-task percentage, check-in results
• Streak counter, badges earned, personal best

3. What gets sent off device when Milo speaks back

Roughly one in three of Milo's check-in responses uses our AI partner (Anthropic's Claude Haiku model, via a serverless function on Vercel) to produce a personalized message. The other responses come from a curated library that runs entirely on your device.

When the AI version is used, this small bundle of context is sent:

• Your first name or nickname, exactly as you typed it during setup (this is what Milo uses to address you in messages)
• Your age or age bracket
• Your interest tags (e.g., "dinosaurs, soccer, art")
• Tags representing where focus tends to break down
• The name of the current task (e.g., "math homework", "writing my essay")
• Whether you reported on-task or off-task on this check-in
• Time elapsed in the session, current consecutive on-task count

What we never send:

• Your last name, email address, phone number, or any contact information
• Your location, IP-derived geolocation, or device identifiers
• Your contacts, photos, or camera footage
• The actual content of what you're working on (we send the task name only, not what you wrote)
• Anything from the rest of your device

Anthropic's data handling practices for API requests are documented in their privacy and trust policies. We do not train models on user data, and Anthropic does not use inputs sent through its standard API to train its models. We use the standard Claude API and do not opt into data-sharing programs.

Retention. We do not store the context bundle on our servers after Milo's reply is generated; it exists only in memory for the moment it takes to produce the response. Anthropic's API retains inputs only for a limited period for safety and abuse-monitoring purposes, as described in their policies, and not for training. The data the app keeps on your device stays there until you delete it (see section 7).

4. Children's privacy and COPPA compliance

Milo Buddy supports a parent-for-kid setup path explicitly designed for children. We comply with the Children's Online Privacy Protection Act (COPPA) for users under 13.

• For the kid-setup path, the parent completes onboarding on a parent-controlled device.
• Settings access is gated behind a math problem that is solvable by a parent but typically not by the target age range.
• For children under 13, we never send the child's name or exact age off the device. When the AI personalization is used, only an age range (for example "8-9"), interests, and the current task name are sent. The child's name stays on the device, and the app adds it to Milo's message locally, so Milo can still greet the child by name without the name ever leaving the phone. The on-device encouragement library, which uses the name freely, also runs entirely on the device.
• The same data minimization rules apply throughout: only what is needed to operate the app, no more.
• Parents can request data deletion at any time by tapping Settings, then "Reset All Data," or by deleting the app entirely.
• We do not knowingly collect more personal information from a child than what the parent provides during setup.

5. Push notifications

If you enable notifications, the app uses Apple's Push Notification Service (APNs) to deliver check-in reminders and gentle nudges. APNs handles delivery only; the message content is generated by the app itself, and no personal data is shared with Apple beyond what is required for notification routing. You can disable notifications at any time in iOS Settings.

6. What we do not do

• We do not run third-party advertising. The app contains zero ads.
• We do not embed analytics SDKs. No Google Analytics, no Mixpanel, no Segment, no Firebase Analytics.
• We do not sell, rent, or share data with marketing partners.
• We do not build cross-app or cross-device profiles of you.
• We do not use your data to train AI models.

7. Your rights and how to delete your data

Because the app stores nearly everything on your device, you have direct control:

• To delete all app data, open the app and go to Settings, then tap "Reset All Data." This wipes everything immediately.
• To stop the AI feature from sending any context off device, you can disable the app's network access in iOS Settings under Wi-Fi and Cellular.
• For specific privacy questions or requests, email hello@getmilobuddy.com and we will respond within a reasonable timeframe.

If you're a California resident, the California Consumer Privacy Act (CCPA) gives you specific rights including the right to know what's collected and the right to deletion. The mechanisms above satisfy these rights. We do not sell personal information.

If you're in the EU or UK, the General Data Protection Regulation (GDPR) gives you similar rights including access, rectification, erasure, restriction, and portability. Contact hello@getmilobuddy.com to exercise these rights.

8. Security

The app uses Apple's standard on-device storage which is encrypted at rest. The HTTPS connection between the app and our serverless function uses TLS 1.2 or higher. We do not store the AI request bundles on our servers after the response is returned; they exist only in memory long enough to generate Milo's reply.

9. Changes to this policy

If we update this policy, we will change the effective date at the top and post the new version at this URL. Material changes (e.g., a new data flow, a new third-party processor) will also be communicated in the app the next time you open it. Continued use of the app after a material change indicates acceptance of the revised policy.

10. Contact

Questions, requests, or concerns? Email hello@getmilobuddy.com. We read every message.