Revision 5.0 · Acceptance generation 5
Privacy Policy
Effective date: September 16, 2026
Controller: Rinat Akhmetov, an individual located in Ontario, Canada
Service name: Mila Baby Tracker is the name of the app and service, not a registered business.
Privacy Officer and email-only contact: Rinat Akhmetov at support@withmila.app
This Privacy Policy is the single Mila privacy policy for the app, website, account-backed Family service, and email support. Shared Care is a section of this Policy, not a second policy. Mila is operated for adults who record and coordinate a child’s care; children do not create Mila accounts.
1. What Mila does
- Core care tracking can remain local on one iPhone.
- Account and Family features use Sign in with Apple and store the information needed to sync private shared care.
- Mila does not sell personal information, use it for targeted or cross-context advertising, operate as a data broker, or use health-data geofencing.
- Mila does not automatically send baby care records to a third-party generative-AI service.
- System authentication, notification, camera, and microphone permissions are controlled by Apple and are separate from acknowledging this Policy.
2. Information, sources, purposes, locations, and retention
The table describes how revision 5.0 handles each category.
| Category and source | Purpose and storage | Recipients/location |
|---|---|---|
| Adult account data: display name, internal user ID, Apple sign-in subject, hashed verified email, sessions, device and app details. Provided by you, Apple, and your device. | Create and secure an account, restore Family care, manage access and sessions. Stored in the cloud for account-backed care; local mode does not require an account. | Mila and Amazon Web Services (“AWS”), United States; Apple for authentication. |
| Baby profile: name or nickname, born/due date, feeding mode, growth-chart setting, time zone and gestational settings. Entered by an authorized adult. | Provide care tracking, age context, summaries, reminders, and Family sync. Local on device unless Family is enabled. | Authorized Family members and AWS in the United States when synced. |
| Consumer health and care data: feeds and pumping, sleep, diapers and stool, foods and reactions, symptoms, medicines, temperature, growth, tummy time, bath, crying, spit-up, milestones, reminders, and notes. Entered by caregivers or generated from their requested actions. | Keep the care record, coordinate caregivers, provide requested summaries and reminders. Local unless Family is enabled. We process personal information to provide and personalise our products, improve our products, protect accounts, and fulfil the other purposes described in this Policy, as permitted by applicable law. | Authorized Family members and AWS in the United States when synced. |
| AI-assisted requests: text, images and other content you submit through an AI feature, and relevant information from your Mila records or saved library that the feature uses. | Provide the AI feature you choose to use. Recording care or enabling Family sync alone does not send your care history to OpenAI. | Mila and OpenAI. |
| Family and invitation data: Family name, membership and role, device access, invite token hash, expiry/use status, and join/audit events. | Authorize Shared Care, prevent misuse, synchronize changes, and notify current members. | Authorized Family members and AWS in the United States; Apple Push Notification service for minimal notifications. |
| Monitor information: device and session details, connection and activity information, and audio or video when you use monitoring features. Certain history and clips may be stored on your device. | Provide the monitoring features you choose to use, connect participating devices and support their operation. | Participating devices and Mila’s AWS infrastructure in the United States for connection services and media relay where needed. Google’s public STUN service may receive network information when Mila’s STUN service is not configured. Mila does not store live audio or video on its servers. Device backups may contain local monitoring history; local clips are excluded from backups. |
| Exports: selected profile and care data that you ask Mila to generate. | Create the requested download or shareable file. | Your selected recipients; AWS when a backend export is requested. |
| Diagnostics and operations: app version, operating-system details, crashes, hangs, allowlisted monitor/notification states, route template, status, timing, and coarse security/audit events. | Security, reliability, debugging, abuse prevention, and aggregate service health. | Mila, AWS/CloudWatch in the United States, and Sentry in the United States for configured app diagnostics. |
| Support data: sender address, message, attachments, and troubleshooting details you choose to send. | Answer support and privacy requests and recover failed mail delivery. | AWS SES/S3/Lambda in the United States and Mila’s Google support mailbox, which may be processed outside Canada. |
| Legal and deletion records: document generation/revision, language, immutable URLs and hashes, action ID, timestamps, app/flow version, purpose choices, and pseudonymous subject key. | Prove the notice and action, avoid repeated prompts, honour withdrawal/deletion, and resolve disputes. | Mila and AWS in the United States. |
| Confidentiality-incident records. | Assess, respond to, report, and prevent privacy/security incidents. | Mila and regulators or affected people when law requires. |
We retain personal information for the purposes described in this Policy. You may request deletion as described below. We may retain certain information after a request where required or otherwise permitted by law, including for legal, security and recordkeeping purposes.
3. Local-only and account-backed processing
In local mode, core profiles and care records stay in Mila’s protected storage on the iPhone, subject to device and operating-system backups you control. In account-backed Family mode, the information needed for the shared record is encrypted in transit and stored with Mila’s cloud provider in the United States.
4. Consumer health data and Shared Care
Care records may reveal sensitive information about a child’s health, routines and family. We process those records for the purposes described in this Policy, including improving our products. We do not sell personal information, use it for advertising or cross-context tracking, or supply it to data brokers.
When an Owner creates a Family or a person accepts an invitation, authorized members can see and act on the shared record according to their role. An Owner decides whom to invite and can remove members. A joining person receives the role in the invitation; invitations cannot create another Owner in this release.
You can leave a Family or withdraw from future Shared Care. This stops future access through your account but does not erase information already lawfully retained in the Family record or copied by another authorized recipient. Deleting one member’s account normally leaves the shared Family record with the remaining Owner or Owners. Deleting the sole Owner’s account deletes the Family after a clear warning and confirmation.
5. How Mila uses and discloses information
We process personal information to provide and personalise our products, improve our products, protect accounts, and fulfil the other purposes described in this Policy, as permitted by applicable law.
We disclose personal information to authorised Family members, our service providers, recipients you choose, and other parties in the circumstances described in this Policy. Section 11 addresses anonymous information.
Service providers may process information only for the contracted Mila purpose and must provide appropriate safeguards. Mila remains accountable for personal information transferred to a processor.
In connection with a proposed or completed merger, financing, reorganisation, sale of our business or assets, insolvency or similar transaction, we may disclose or transfer personal information to the parties involved, subject to applicable law.
We may also disclose personal information to comply with legal obligations, court orders or lawful requests, or where we believe in good faith that disclosure is appropriate to protect rights, property or safety, investigate suspected unlawful activity or enforce our Terms and other agreements, as permitted by law.
6. Your choices and requests
You can use local mode, decide whether to create or join a Family, manage Family access according to your role, control Apple system permissions, export supported records, correct profile information, and initiate local-data or account deletion.
You may contact support@withmila.app to request access, correction, export or deletion of personal information, ask about our practices or make a complaint. We may request information to verify your identity or authority before acting on a request. We handle requests in accordance with applicable law.
You may request account deletion through the app or contact us for assistance. Deletion does not require accepting new Terms. Certain information may remain where retention is required or permitted by law, or where it forms part of another authorised person’s Family record as described in section 4. Deletion from active systems does not necessarily remove copies in backups immediately.
7. Children and adult authority
Mila is intended exclusively for adults. Children must not use the products or create accounts. Information about a child must be provided and managed by a parent, guardian or another authorised adult. We do not knowingly collect personal information directly from children.
8. Safeguards and incidents
We take reasonable measures to protect personal information. Internet communications and electronic storage carry security risks, and safeguards may be overcome. We cannot guarantee that information will remain free from unauthorised access, interception, loss or misuse.
You are responsible for protecting your devices, account access and invitations, and for deciding what information to share. To the extent permitted by law, we are not responsible for disclosures you make yourself or direct others to make. Nothing in this Policy excludes rights or obligations that cannot lawfully be excluded.
9. Processing outside Québec and Canada
Mila’s principal cloud and support infrastructure is in the United States, and global delivery or provider personnel may process information in other places. Foreign courts, law-enforcement agencies, or regulators may obtain lawful access under their laws. When evaluating cross-border processing, Mila considers the sensitivity of the information and identified risks and relies on written terms with its service providers.
We may store de-identified copies of synchronized care activity with AWS in Canada. We treat these copies as personal information because individuals may still be indirectly identifiable.
10. Apple permissions and external sharing
Apple separately handles App Store distribution, Sign in with Apple, push delivery, device permissions, and system sharing under Apple’s terms. Choosing “Allow Notifications” opens an Apple system prompt; acknowledging this Policy does not grant notification, camera, microphone, or other device access. When you export or share information to a person, clinician, app, or service, that recipient’s practices apply after the transfer.
11. Anonymous information
Anonymous information is data without an association or link to your personal information. Anonymous information does not, by itself, permit the identification of individual persons. We may produce such information from data collected or generated through our products by creating a copy detached from your personal information.
Removing direct identifiers from care records does not by itself make them anonymous. The de-identified care copies described in section 9 are not covered by this section.
Subject to applicable law, we may use, retain and disclose anonymous information at our discretion, including to improve our products, conduct scientific studies and publish their results. We do not use or disclose personal information in that scientific work.
After your personal information is deleted, we may retain information derived from your use of our products as anonymous information that is no longer linked to your deleted personal information.
12. Changes, versions, and languages
We may revise this Policy. For material changes, we will give notice by publishing the revised Policy on our website or a notice in our products, or by emailing an address you have provided for notices. If you provide an email address, you are responsible for keeping it current. A notice sent to your latest supplied address remains effective even if the address is invalid or the message cannot be delivered.
Changes take effect immediately upon publication for new users. For existing users, they take effect five calendar days after we send an email notice or post a notice on our products or website, whichever occurs first. Continuing to use our products after that period constitutes acceptance of the changes. If you disagree, your sole recourse is to stop using our products and terminate your account, if any. Amendments are made through the procedure described in this section.
English, Canadian French, Russian, Spanish, Punjabi (Gurmukhi) and Simplified Chinese versions are intended to be equivalent. French is presented before a Québec user chooses another language; mandatory language and consumer protections remain unaffected.
13. Contact and complaints
Privacy Officer: Rinat Akhmetov, an individual located in Ontario, Canada. Contact is email only at support@withmila.app or through the English support page. You may also complain to the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec where applicable.