Privacy Policy

⚠️ Draft — this text has not been reviewed by a lawyer and is not final.

PLACEHOLDER — awaiting legal review. Milo is used by children, so we keep the amount we store small and we do not sell or share it. What we store: the parent's email address, the child's display name and age band, their answers to the placement check, and which chapters they have played. If you used the free check before making an account, we also store the email address you gave us there. We do not store a child's date of birth, only their age band. The camera: some chapters let a child answer by holding up their hand. That runs entirely on the device. No image or video ever leaves the browser, and nothing from the camera is stored. To make that work, your browser downloads a hand-tracking model the first time you use one of those chapters. That download comes from Google (storage.googleapis.com) and jsDelivr (cdn.jsdelivr.net), who will see your device's IP address as they would for any file you download. They receive nothing about your child and nothing from the camera. Who else sees the data: Supabase hosts our database and Vercel serves the site, both as processors acting on our instructions. We do not sell or share your child's data, and there is no advertising or behavioural tracking anywhere in the app. How long we keep it: your child's profile and progress are kept until you delete them. Diagnostic and gameplay analytics are deleted automatically after 90 days, as are crash reports. An email given to the free check before an account exists is kept for up to 24 months. Your choices: you can download a copy of everything we hold about your child, or delete it permanently, from the parent dashboard at any time. Deleting a child's profile removes their progress, sessions, placement results and analytics. If you gave us an email for the free check and never made an account, write to us and we will delete it. This wording has not been reviewed by a lawyer yet and is not the final policy.