Last updated: March 5, 2026
Millo ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle your information when you use our iOS and watchOS mobile application (the "App").
Millo is designed with privacy in mind. We do not collect any personal information. Optionally, with your explicit consent, we collect anonymous usage and crash data to improve the app.
The App stores the following data locally on your device:
Only if you explicitly accept when prompted, the App collects anonymous usage events such as:
This data contains no personal information, no recipe content, and no identifiable data. You can change your preference at any time in the app's Settings.
If you choose to enable iCloud sync, your data (recipes, meal plans, and shopping lists) will be synchronised across your devices using Apple's iCloud service. This data is:
You can disable iCloud sync at any time through your device settings.
If you use the Apple Watch companion app, your shopping list data is synchronised between your iPhone and Apple Watch using the WatchConnectivity framework. This data transfer:
The App includes a fidelity card manager that lets you store your loyalty cards digitally. All card data (card name, card number, barcode, and display colour) is stored exclusively on your device and, if you have iCloud enabled, in your personal iCloud account.
The App integrates with Apple's App Intents framework to offer Siri Shortcuts. The following actions are available:
Voice interactions are processed entirely by Apple's Siri infrastructure and are subject to Apple's Privacy Policy. The App only receives the final structured parameters (card name or ingredient name) from Siri; no audio or voice data is ever accessible to us.
The App allows you to export and share recipes using our custom .millo file format. When you choose to share or export data:
Millo does not use any advertising or tracking services. With your consent, the App integrates with the following Firebase services provided by Google:
Used to collect anonymous usage statistics when you opt in. Data is processed by Google LLC and subject to Google's Privacy Policy. Collection is fully disabled if you decline or withdraw consent.
Used to automatically collect crash reports when the app encounters an unexpected error. This helps us identify and fix stability issues quickly. Crash reports contain technical device information (OS version, app version, stack trace) but no personal data or app content. Crashlytics is also disabled if you decline or withdraw consent.
Both services are enabled only after you explicitly accept the in-app consent prompt. You can opt out at any time via Settings → Analytics & Crash Reports.
We take data security seriously:
Millo does not knowingly collect any information from children. The App is suitable for all ages as it stores all data locally and does not collect personal information.
Since all your data is stored locally on your device, you have complete control over your information:
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this policy. Continued use of the App after any changes constitutes acceptance of the updated Privacy Policy.
If you have any questions about this Privacy Policy, please contact us: