Privacy Policy

1. Who is responsible

Milo is operated by Moritz Davinghausen and Clemens Kopetz, c/o Clemens Kopetz, Voltastrasse 9, 8044 Zurich, Switzerland. They are jointly responsible for the processing described here.

For any question about your data, or to exercise any of the rights in section 9, write to help@app-milo.com.

2. What we collect, and why

Your account

Email address, name, and — unless you sign in with Google or Apple — a password, which is stored only as a cryptographic hash and cannot be read back. Optionally a phone number, profile photo, short bio, and the town you are in.

We need this to give you an account and to let the other side see who they are dealing with. Without it there is no service.

Where you are

If you allow it, your approximate coordinates, so families can find sitters nearby and see roughly how far away someone is. Your exact position is never shown to another user; only a distance is.

During a sitting, a sitter's device sends its position when they confirm they have arrived. This is checked against the family's address and then kept only while the sitting runs.

Your children, if you are a family

First name, date of birth, and anything you choose to add: interests, allergies, special needs, dietary notes. Also your home address and any emergency contacts.

Allergies and special needs are health data about a child, which the law treats as particularly sensitive. We ask for it because a sitter who does not know cannot keep your child safe. It is yours to leave blank, and it is shown to a sitter only after you have accepted them for a specific booking — never to anyone browsing profiles.

Your work, if you are a sitter

Hourly rate, years of experience, languages, the age groups you take, how many children at once, whether you smoke or drive, and any qualifications you list — including a certificate document if you attach one, which families can open.

Bookings, messages and reviews

The dates, times and details of bookings; the messages you exchange once a booking is confirmed; and the reviews you write about each other.

Photo check-ins a family requests during a sitting are shown once and deleted from our servers immediately afterwards. They are never stored as part of a booking record.

Safety

Reports you make about another user, people you block, and any decision a moderator takes about an account, including the reason. We keep these to be able to act on repeat behaviour and to show that a decision was justified.

Technical

A device token if you allow notifications, and roughly when you last used the app. We do not use advertising identifiers, and Milo contains no third-party analytics or advertising trackers.

3. On what legal basis

• To perform the contract with you: your account, profiles, bookings, chat, payments.
• Your consent: location, notifications, and the health details you choose to add about a child. You can withdraw consent at any time, in the app or in your device settings.
• Our legitimate interest: keeping people safe on the platform — moderation, reports, blocks, fraud prevention — and defending legal claims.
• Legal obligation: accounting records for payments processed through the platform.

4. Who else sees your data

Other users see only what the app shows them. A sitter browsing sees your name, town, photo, and the age range of your children — never their names, health details or your address. Those appear only to the sitter you have accepted, for the booking you accepted them for.

We do not sell personal data, and we do not share it for advertising.

Service providers acting on our instructions

• Railway (hosting and database) — servers in the Netherlands, EU.
• Stripe — identity verification for sitters, and card payments. Card details go to Stripe directly and never reach Milo's servers.
• Daily — video calls. Calls are not recorded.
• Resend — the emails we send you.
• Apple and Google — push notifications, and sign-in if you use it.

Some of these are outside Switzerland and the EU. Where that is the case, transfers rest on the European Commission's standard contractual clauses or an equivalent safeguard.

5. How long we keep it

• Chats: deleted 30 days after the last booking you had with that person. Booking another sitting with them starts the 30 days again.
• Photo check-ins: deleted the moment they have been viewed.
• A sitter's position during a sitting: cleared when the sitting ends.
• Bookings and reviews: kept while your account exists, and after deletion in the anonymised form described below, because they are also the other person's record.
• Moderation records: kept while needed to act on repeat behaviour.

6. Deleting your account

You can delete your account from Settings. When you do, your name, email, phone, address, photos and bio are removed, and any children on your profile are deleted outright. Every session is revoked immediately.

Bookings and reviews are not deleted. They are detached from you and left in place because they are equally the other person's record of what happened, and removing them would rewrite their history as well as yours.

7. Children

Milo is for adults. You must be at least 18 to be paid through Milo, and sitters are age-checked as part of identity verification.

Children do not have accounts. Information about a child is entered by their parent or guardian, who decides how much to give and can change or remove it at any time.

8. Keeping it safe

Traffic is encrypted in transit. Passwords are stored only as hashes. Uploaded files sit on a private volume, and photo check-ins are held outside any publicly served directory and deleted after a single view.

Access to production data is limited to the two operators named in section 1.

No system is perfectly secure. If a breach ever put your rights at serious risk, we will tell you and the Federal Data Protection and Information Commissioner.

9. Your rights

Under the Swiss Federal Act on Data Protection, and the GDPR where it applies to you, you may:

• ask what we hold about you and get a copy;
• have inaccurate data corrected;
• have your data deleted;
• object to processing based on our legitimate interest;
• ask for your data in a portable form;
• withdraw a consent you gave, without affecting what was done before.

Write to help@app-milo.com. We will answer within 30 days.

You may also complain to the Federal Data Protection and Information Commissioner (edoeb.admin.ch), or to your local supervisory authority in the EU.

10. Changes

If we change how we handle your data in a way that matters, we will tell you in the app or by email before it takes effect. The version of this policy is shown at the top.