Privacy Policy

Milo Wellness ("Milo", "we") is a general wellness app for people aged 16 and over, operated by Wraplet (contact: info@wraplet.app). This policy explains what information Milo collects, how it is used and shared, and the choices you have. It applies to the Milo Android app and its online services.

The short version: Milo works without an account and keeps most of your data on your phone. Your activities, routes, location, steps and moods are never sold and never shared with advertisers. Ads keep Milo free and are personalised only if you agree.

1. Information stored on your device

Most of what you do in Milo stays on your phone: missions and their history, walks (time, distance, steps and the GPS route), workouts, breathing and focus sessions, check-ins (mood and energy), your Milo character, world progress, coins and settings. Walk routes are kept only on your device and are never uploaded. You can export this information from You → Export my data, and it is removed when you reset your profile, clear the app's data or uninstall.

2. Information we collect

• Account information (optional). If you create an account, we process your email address, display name and sign-in identifiers through Google Firebase Authentication (email/password or Google sign-in). You can use Milo as a guest without an account.
• Cloud backup (signed-in users only). To back up and sync your progress, a copy of your Milo profile is stored on our servers: your settings, missions and their history, activity totals (for example a walk's date, title, distance, duration and step count), check-ins, world progress and coins. It does not include GPS routes or location history.
• Precise location (only while you track a walk). With your permission, Milo uses your device's GPS to measure distance and draw your route while a walk you started is in progress. To keep measuring when your screen is off, Android shows an ongoing "Milo is tracking your walk" notification; tracking stops as soon as you pause, finish or discard the walk. Milo does not request background location permission and never tracks your location at any other time. Location stays on your device.
• Physical activity (steps). With your permission, Milo reads your phone's step counter during walks to count steps. If you connect Health Connect, Milo reads only your daily step total (the "Steps" data type) to show daily progress. Milo does not write to Health Connect and does not read any other health data.
• Advertising data. See section 4.
• Crash reports and diagnostics. If the app crashes or an error occurs, Google Firebase Crashlytics receives a crash report: device model, operating system and app version, the error details, and a pseudonymous account or guest identifier. Crash reports never include your activities, routes, location or wellness entries. You can turn this off under You → Share crash reports.
• Technical information. Our servers (Cloudflare) process IP addresses and request details briefly to deliver the service, prevent abuse and keep it secure.
• Support messages. If you email us, we receive your email address and what you tell us.

3. How we use information

We use information to provide Milo's features (tracking, missions, rewards, world progress, share images), to back up and sync your account, to keep the service secure and prevent abuse, to fix crashes and improve reliability, to show ads as described below, and to answer support requests. We do not use your information to make decisions with legal or similarly significant effects about you.

4. Advertising

Milo is free and supported by ads, delivered through Unity LevelPlay (Unity Technologies) and the advertising networks it works with, including Google AdMob, ironSource Ads and Unity Ads. To show, limit and measure ads and to prevent ad fraud, these companies may receive your device's advertising ID, IP address, device model, operating system, language and basic information about the app and the ads you see or tap. When you first open Milo you choose between personalised ads and general (non-personalised) ads; you can change this at any time under You → Ad choices, and you can reset or delete your advertising ID in your Android settings. Ads appear on Milo's main screens, between activities and as optional reward videos, but never during walks, workouts, breathing or focus sessions. Your activities, routes, location, steps, check-ins and other wellness information are never shared with advertisers. Ad partners process data under their own privacy policies, including Unity's privacy policy and how Google uses information from apps that use its services.

5. Health Connect

Milo's use of information received from Health Connect adheres to the Health Connect Permissions policy, including its Limited Use requirements. Step data from Health Connect is used only to show your daily step progress inside Milo, stays on your device, is not used for advertising, is not sold, and is not transferred to anyone except as needed to provide this feature or as required by law. You can disconnect Milo at any time in Health Connect.

6. Maps

Walk maps are drawn on your device. Map images are downloaded from OpenFreeMap (based on OpenStreetMap data), which receives your IP address and the map area being displayed in order to send the map tiles. Your route itself is not sent.

7. Sharing

We do not sell your personal information. We share information only with service providers that run parts of Milo for us — Google Firebase (sign-in and crash reports), Cloudflare (hosting and cloud backup), Unity LevelPlay and its ad partners (ads, as in section 4) and OpenFreeMap (map tiles) — and when required by law or to protect the safety and rights of users and Wraplet. Images and captions you create in Share Studio are shared only when you choose to share them, to the app you pick.

8. Retention and deletion

On-device data stays until you delete it. Cloud account data is kept while your account exists. When you delete your account (You → Permanently delete account, or via the account deletion page), we delete your sign-in identity and cloud data; limited security logs and encrypted backups may persist for up to 30 days before they are overwritten. Crash reports are kept by Firebase Crashlytics for up to 90 days. Ad partners keep data according to their own policies.

9. Your rights and choices

You can use Milo without an account; export your data; change ad and crash-report choices; turn off notifications; revoke location, physical activity and Health Connect permissions in Android settings; and delete your account. Depending on where you live (for example the EEA, UK or California), you may also have rights to access, correct, delete or port your information, to object to or restrict certain processing, to opt out of personalised ads (choose "General ads only"), and to complain to your data protection authority. To exercise these rights, email info@wraplet.app; we respond within 30 days. Where the GDPR applies, we rely on providing the service you request (contract), our legitimate interests (security, crash fixing, non-personalised ads) and your consent (personalised ads, location, activity and Health Connect access).

10. Security and international transfers

Data is encrypted in transit (HTTPS) and access to our systems is restricted. Our providers may process information in countries other than yours; they use appropriate safeguards such as standard contractual clauses.

11. Children

Milo is intended for people aged 16 and over and is not directed to children. We do not knowingly collect information from children under 16; if you believe a child has used Milo, contact us and we will delete their information.

12. Wellness notice

Milo provides general wellness features. It is not a medical device and does not provide diagnosis, treatment or emergency services.

13. Changes and contact

We will update this policy when Milo changes and show the new effective date below; for significant changes we will also tell you in the app. Questions: info@wraplet.app.