Privacy Policy

Last updated: September 15, 2026

Quick Summary

  • MILO does not operate a cloud account system and does not store your conversations on our servers.
  • Your API keys are stored locally on your device in iOS Keychain.
  • When you use a cloud AI provider, MILO sends your prompt and relevant conversation context directly from your device to the provider you selected.
  • MILO asks for in-app permission before sending prompts or conversation context to third-party AI providers.
  • Optional web search is off by default. If you turn it on, MILO sends only the search query to Brave, Tavily, or TinyFish.
  • Apple Intelligence runs on device and does not send your prompt to a third-party AI service.
  • Optional web search sends the model-generated query to the selected search engine (Brave, Tavily, or TinyFish), then returns results to your chosen AI provider.
  • Optional Calendar and Location/ETA context packs add event or location details to the prompt sent to your chosen AI provider.

1. Information MILO Collects or Stores

1.1 Information you provide in the app

  • Prompts and messages: the text you type or dictate to MILO.
  • Conversation history: prior messages saved locally so you can continue and review conversations.
  • Provider settings: selected provider, selected model, temperature, token limits, and similar app settings.
  • API keys: keys you enter for providers such as Google Gemini, Mistral AI, OpenRouter, Anthropic Claude, OpenAI, or Groq, and optional search-engine keys for Brave, Tavily, or TinyFish.
  • AI data sharing permission: whether you agreed to send prompts and conversation context to third-party AI providers.
  • Context pack preferences (optional): Calendar and Location/ETA packs you enable in Settings → CarPlay Settings. These packs are off by default.
  • Search engine API keys (optional): keys for Brave, Tavily, or TinyFish, stored locally in iOS Keychain when you enable web search.

1.2 Information collected automatically

  • App diagnostics: Apple may provide crash logs and diagnostics if you choose to share them with developers through iOS settings.
  • Website analytics: askmilo.pro uses Plausible Analytics for aggregate, cookie-free website statistics such as page views, referrers, device type, and approximate country. Plausible does not store IP addresses or use cross-site tracking cookies.

MILO does not collect contacts, photos, health data, advertising identifiers, or payment information. MILO does not track your location in the background. Optional Location/ETA context (approximate coordinates) and the next calendar event (title, time, location) are sent to your chosen AI provider only when you enable those context packs (see section 4.2).

2. How Information Is Collected

  • Directly from you: when you type, dictate, configure settings, add API keys, or contact support.
  • Locally on your device: conversations and settings are saved using iOS local storage technologies such as SwiftData and UserDefaults.
  • Through iOS Keychain: API keys are stored using Apple's secure Keychain.
  • Through provider API calls: when you allow AI data sharing and use a cloud provider, MILO sends your prompt and necessary context directly to that provider's API.
  • Through optional search-engine API calls: when web search is enabled, MILO sends the model-generated query to Brave, Tavily, or TinyFish.

3. How MILO Uses Information

  • To generate AI responses in chat, Siri, and CarPlay workflows.
  • To continue conversations with relevant context.
  • To save and display conversation history on your device.
  • To connect to the AI provider and model you select.
  • To securely authenticate provider API requests using your API key.
  • To run an optional web search when you enable Settings → Tools → Web search and the model requests it.
  • To enrich a CarPlay question with calendar or approximate location context when you enable those packs.
  • To troubleshoot issues if you voluntarily contact support or share diagnostics.
  • To understand aggregate website usage and improve public documentation.

4. Third-Party AI Sharing

What is sent: when you use a cloud AI provider, MILO sends the message or prompt you enter, relevant conversation context/history for follow-up replies, selected provider/model information needed to route the request, and for Siri or CarPlay the dictated/transcribed prompt. If you enable Calendar or Location/ETA context packs, MILO also includes the next calendar event (title, time, location) and/or approximate location/ETA coordinates in that prompt.

Who receives it: depending on the provider/model you choose, data may be sent directly from your device to Google Gemini, Mistral AI, OpenRouter, Anthropic Claude, OpenAI, or Groq. OpenRouter may route your request to the model provider selected inside OpenRouter.

Web search (optional): when you enable Settings → Tools → Web search and store a search-engine API key, your AI provider may ask MILO to run a search mid-answer. MILO then sends only the search query the model generates to the selected search engine — not your conversation, identity, or other provider keys. The engine returns web results that are sent to your AI provider so it can finish the answer. Search queries are subject to the selected vendor's privacy policy (see section 4.1).

Why it is sent: only to generate AI responses and provide MILO's assistant features.

Permission: MILO asks for explicit in-app permission before sending prompts or conversation context to third-party AI providers. If you decline or revoke permission, cloud AI requests are blocked until you agree again.

Provider protections: MILO supports established third-party AI providers with published privacy and security practices. These providers are expected to provide the same or equal protection for the data they process under their own privacy policies and terms. You should review the policy of the provider you choose because their retention and training settings may vary.

4.1 Optional web search

When you enable Settings → Tools → Web search and store an API key for Brave, Tavily, or TinyFish:

  • Your AI provider may ask MILO to run a web search mid-answer (tool use).
  • MILO sends only the search query the model generates to the selected search engine — not your conversation, your identity, or your other provider API keys.
  • The search engine returns titles, URLs, and snippets that are sent to your AI provider so it can finish the answer. Answers that used a search cite their sources as tappable links.

Web search is off by default and stays off until you store a key for the selected engine and turn the toggle on. Removing the key disables the tool. Search queries are subject to the selected vendor's privacy policy:

4.2 Optional CarPlay context packs

If you enable context packs in Settings → CarPlay Settings:

  • Calendar: MILO may read your next event (title, time, location) and add it to the current question sent to your chosen AI provider.
  • Location/ETA: MILO may use your approximate coordinates for the current question only. This is not stored as a location history.

Each pack is opt-in, disabled by default, and requires the matching iOS permission. Denying permission leaves the rest of the app working.

5. Local Storage, Retention, and Deletion

  • Conversation history: stored locally on your device until you delete conversations or uninstall the app.
  • API keys: stored in iOS Keychain until you delete them in MILO settings or remove app data from your device.
  • Settings and consent: stored locally until changed or reset.
  • Provider retention: third-party AI providers may retain API request data according to their own policies and your provider account settings.

6. Your Choices

  • Review or revoke AI Data Sharing permission in MILO Settings → AI Data Sharing.
  • Use on-device Apple Intelligence when available to avoid sending prompts to third-party AI services.
  • Keep web search off, or remove the search-engine API key (Brave, Tavily, or TinyFish) and turn off Settings → Tools → Web search so search queries are not sent.
  • Turn off Calendar or Location/ETA context packs in Settings → CarPlay Settings so event and location details are not added to prompts.
  • Delete API keys in MILO Settings → Providers.
  • Delete conversation history in the app's History screens.
  • Disable speech recognition permissions in iOS Settings if you do not want to dictate prompts.
  • Contact us to request support records be deleted if you emailed us directly.

7. Children's Privacy

MILO is not directed to children under 13. We do not knowingly collect personal information from children under 13. The App Store age rating for this version is 12+ because cloud AI replies are not filtered for children and may include mature themes.

8. International Users and Legal Bases

Where GDPR or similar laws apply, our legal bases include your consent for AI data sharing, performance of the service you request, legitimate interests in app support and security, and legal compliance.

You may request access, correction, deletion, restriction, portability, or withdrawal of consent by contacting us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes are posted on this page with a new "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or MILO's data practices, contact [email protected] or see Support.