Privacy

What we store

• Your account email and profile (name, time zone, units preferences).
• The child profiles you create, including names, dates of birth, growth-reference sex, vaccination schedule, and optional profile photos.
• The records you choose to add: growth measurements, feeds, sleep, diapers, notes, temperatures, medications, vaccinations, milestones, and symptom checks.
• Memories, photos, albums, and health-document attachments you upload.
• Questions, conversations, and confirmed entries created through the AI Coach or smart-entry features.
• Reports you generate and snapshots, expiry dates, revocation status, and view counts for share links you create.

How we use it

We use this information to provide the features you choose: organizing records, showing growth and routine trends, presenting age-relevant milestone and vaccination information, creating reports, answering Coach questions, and supporting secure sharing. We do not sell your information or use it for advertising or behavioral profiling.

Who can see it

Your records are private to the signed-in account that created them. Photos and documents are kept in private storage and opened through short-lived signed links. If you create a share link, anyone you give its secret URL to can view that selected snapshot until the link expires or you revoke it.

AI features

When you use the Coach, symptom guidance, label reading, or smart entry, the text or image you submit and the minimum relevant child-record context are processed to return the requested result. Coach conversations may be saved so you can revisit them. AI output is limited by safety rules, but it may be incomplete or wrong and is educational only — never a diagnosis, medication dose, treatment plan, or substitute for professional care.

Exports and sharing

You can download account data in JSON or CSV, export health summaries, print reports, and create selected share links. Share links contain a snapshot rather than live access, expire after 7 days, and can be revoked. Anyone holding the link can view its contents, so send it only to people you trust.

Analytics and reliability

We may use privacy-restricted product analytics, error monitoring, and uptime checks to understand whether features work and keep MileoKids reliable. Analytics is limited to fixed events and pseudonymous identifiers; free-text health entries, measurements, names, email addresses, page text, session recordings, and advertising profiles are excluded.

How it is protected

Data is encrypted in transit and at rest by our infrastructure provider. Access controls are enforced at the database level so accounts cannot read one another's private records. Uploaded files are stored privately and opened through short-lived signed links. Administrative actions and data exports are recorded for security and accountability.

How long we keep it

We keep your account and records while your account is active so the service works across sessions and devices. Deleted child profiles are held for the 30-day recovery period; other data is removed when you delete it or permanently erase your account, subject to the limited deletion record described above. Expired or revoked share links stop displaying their snapshots.

Your rights (GDPR)

You can access and download your account data at any time from Settings → Your data in portable JSON or CSV form. You can correct supported records in the app, delete individual records, revoke share links, and permanently erase your account. We process this data to provide the service you request and protect its operation; we do not sell it, share it with advertisers, or use it to profile your family.

Children's privacy (COPPA)

MileoKids is designed for parents and legal guardians aged 18 or older. It is not directed to children and is not intended for use by anyone under 13. We do not knowingly allow a child under 13 to create an account. Information about a child is collected only from the parent or guardian who chooses to record it, is used solely to provide the tracking features they asked for, and is never sold, shared with advertisers, or used for behavioral advertising. We run no advertising, retargeting, or third-party ad pixels anywhere in the app — including every signed-in page where a child's information appears. A parent or guardian may review, export, or permanently delete everything recorded about their child at any time from Settings → Your data. If you believe a child under 13 created an account without a guardian, contact us from that account and we will delete it.

Deletion

You can delete individual entries at any time. A deleted child profile remains recoverable for 30 days before permanent removal. Deleting your entire account from Settings → Your data permanently removes the login, child records, uploaded files, and AI conversations; a minimal accountability record of the deletion may remain without child records or account contact details.

About HIPAA

MileoKids is a personal, parent-facing tool. It is not a covered entity or a business associate, so it is not a HIPAA-compliant system and should not be used by clinics or providers to store patient records. We do apply many of the same safeguards — access control, encryption, audit logging, private storage, expiring and revocable share links, and minimum necessary data collection — but if you need HIPAA-covered handling, use your provider's own patient portal.

Educational, not medical

MileoKids is an educational organizational tool and not an FDA-cleared medical device. It does not diagnose or treat and cannot replace an in-person clinical assessment. Symptom guidance only helps organize reported information and suggests how soon to seek care. Always consult a qualified pediatrician, and in an emergency call 911 or your local emergency number.

Questions

Data export and account deletion are available today in Settings → Your data. For anything else — a specific request, a complaint, or a question about how your data is handled — reach out from your account and we will respond.