Milo is a reading journal: the sentences you keep from books, the books you read, and — if you choose — sending one of those sentences to a stranger as a letter.
Last updated: 29 September 2026
In short: no ad networks, no tracking SDKs, nothing sold. We never use location services — you pick your city from a list. The sentences you save are yours alone: they go nowhere unless you send one as a letter or ask what a word in it means.
The controller of your personal data is Muratcan Yusufoğlu, an independent developer. You can reach us at myapps.feature@gmail.com about anything in this policy, and that address is the point of contact for any data-subject request.
| Data | When it is created | Who can see it |
|---|---|---|
| Account — an anonymous user id | The first time you open the app, without asking you for anything | You only |
| Email address (optional) | Only if you choose to attach one | You only |
| Quotes — the text, your note, the page photo | When you save a sentence | You only, unless you choose to share |
| Word notebook — words you keep from your quotes, with their meanings | When you keep a word | You only |
| Word look-ups — a record that you asked what a word means | When you ask | No one; it only counts the free daily allowance, and is deleted after two days |
| Library — books, shelves, progress, ratings, moods | When you add a book | You only |
| Postal identity — pen name, city name and the coordinates of that city | When you set up Milo Post | People you correspond with |
| Letters — the quote, book, author, your note, origin and destination city | When you send one | The recipient |
| Correspondence state — hearts, pen-pals, blocks, reports, invites | When you take that action | You, and us where safety requires it |
| Notification preferences | When you change settings | You only |
| Subscription status — free or Pro | When you subscribe | You only |
| Usage events — which screen opened, whether an action succeeded, device model, OS and app version | While you use the app | Us, in aggregate |
| Crash reports — the error and its technical stack | If the app closes unexpectedly | Us |
Usage events and crash reports are stored against a random device number the app generates on your device. It is never joined to your account, your email or your pen name. The point is to see which features work and where we crash — not who you are. Crash reports are scrubbed before they are sent so they do not carry the sentences you have saved.
Milo never uses your device's location services and never asks for location permission. The latitude and longitude stored with Milo Post are the coordinates of the city you picked from a list — not of you.
When you photograph a page, the text is recognised on the phone itself. The photo is not sent anywhere in order to be read.
Where the GDPR applies, our bases under Article 6 are:
We do not sell your data and we do not give it to anyone for advertising. The providers we use to run the service:
| Who | What for | What they receive |
|---|---|---|
| Supabase | Database, authentication, file storage | Everything listed above |
| Google Books and Open Library | Book search | Only the words you type into the search box. Never your quotes, identity or account. |
| Apple / Google | Subscription payments | They take the payment; your card details never reach us. |
| RevenueCat | Tracking whether a subscription is active | Purchase status and a user identifier |
| Expo (notification delivery), then Apple or Google | Telling you a letter has arrived while the app is closed | A notification address for your device and the single line you see on the lock screen. Never the letter, the quote inside it, or who sent it. |
| Google Cloud Translation (EU region) | Translating a letter written in a language you do not read | Only the note, and only the quote if you ask for it, of a letter addressed to you. Never who sent it, and never a quote you kept for yourself. Processed in the European Union and not used to train anything. |
| fal.ai, which passes the request through OpenRouter to Google (Gemini) | Explaining a word you tap in one of your quotes | Only that word and the sentence it is in, and only when you ask. Never your account, your name or your other quotes. Handled in the United States — see section 5. |
We will also disclose data where a court or competent authority properly requires it, to the extent the law demands.
Milo's servers are in Frankfurt, Germany — inside the European Union.
A transfer is unavoidable for the app to work at all: syncing a library across your devices, and delivering a letter to another reader, both require a shared server.
Notifications are one exception, and they are unavoidable for everyone. A notification reaches a phone only through Apple’s or Google’s own network, which is outside the EEA for both of them. What travels is the device’s notification address and the one line shown on the lock screen — never the letter itself. Turning notifications off in your device settings ends this entirely.
Looking up a word is the other, and it happens only when you ask. When you tap a word in one of your quotes to see what it means, that word and the sentence it is in go to fal.ai, which passes them through OpenRouter to Google’s Gemini model to write the explanation. All three are companies in the United States. Nothing that identifies you goes with them — not your account, your name or your other quotes. If you never look a word up, nothing is sent.
Under the GDPR you may ask us to give you a copy of your data (Art. 15), correct it (Art. 16), delete it (Art. 17), restrict how we use it (Art. 18), hand it over in a portable form (Art. 20), or object to processing we base on legitimate interests (Art. 21). Where we rely on consent, you may withdraw it at any time without affecting what we did before.
You can delete your account yourself, at any time, from Profile → Account in the app or from this page. For anything else, write to myapps.feature@gmail.com and we will answer within one month.
If you think we have handled your data badly, you may complain to your local data protection authority. You do not have to speak to us first, though we would rather you did.
You may ask what personal information we collect, why, and who receives it; ask us to delete it; ask us to correct it; and you will not be treated differently for asking. We do not sell or share personal information as those terms are used in the CCPA/CPRA, and we do not use it for cross-context behavioural advertising. Use the same address above.
For users in Türkiye, Muratcan Yusufoğlu is the data controller under Law No. 6698, and processing in Germany is a transfer abroad under Article 9 — as is looking up a word, which sends that word and its sentence to the United States when you ask (section 5). By using the app you consent to those transfers; you can withdraw consent by deleting your account, and a word you never look up is never sent. Article 11 of the Law gives you a specific list of rights — they are set out in full in the Turkish version of this policy, which is the authoritative text for Turkish users.
Milo is not intended for children. Because it lets you exchange letters with people you do not know, it should not be used by anyone below the age rating shown in the store, and we do not knowingly collect data from children. If you believe a child has given us data, write to myapps.feature@gmail.com and we will remove it.
If we update this policy we will change the date at the top, and we will say so inside the app when the change is a significant one.