Privacy Policy

MiLuv is an iOS app built and operated by an individual developer (“I”, “me”). This policy explains what the app does with your information. It applies to the MiLuv iOS app and nothing else.

If you don't agree with this policy, please don't create an account — and if you already have one, you can delete it from Settings → Danger Zone → Delete account.

Account

• Email address — to identify your account and, if email confirmation is on, to verify it.
• Password — you set one; it's stored only as a salted hash by the authentication service. I never see it.
• Display name — the name you choose; visible to your connected partner.
• Partner nickname — optional; a private label for your partner, visible only to you.

Location

When you grant location permission, the app sends your location when you open it, when you tap “Update my location” in Settings, and — if you allow background updates — after you've moved about 200 m. Each time, the app sends your device's current latitude, longitude, and an accuracy value to the server. Only your single most recent position is stored — each update replaces the previous one. Your coordinates are readable only by you (enforced at the database level) and by the server process that computes distance.

Notifications

• Push token — an identifier issued by Apple for your device, stored so the server can send you proximity alerts and nudges. It carries no personal information on its own.

MiLuv Pro purchases

If you buy MiLuv Pro, Apple handles the payment. MiLuv receives Apple's signed record of the purchase and stores which plan you bought, when it expires (for monthly), and Apple's transaction ID, so Pro works for you and your linked partner. MiLuv never sees your payment details.

Calendar plans (Pro)

Plans you add to the shared Calendar — the type, title, date, repeat setting and optional note — are stored with your link and visible to both of you. Reminders are scheduled on each phone. Plans are deleted when you unlink or delete your account.

Time zone and weather (Pro)

MiLuv saves your phone's time zone (for example "Asia/Manila") so your partner can see your local time. With Pro, MiLuv also shows your partner the current weather where you are: the server rounds your latest position to about 11 km and asks Apple WeatherKit for the weather there. Only the temperature and conditions are shown — never your location.

Your photo (optional)

If you add a photo from the Home screen, you take it with the camera or pick it from your library, crop it to a circle, and MiLuv uploads that one cropped photo. It is stored privately: only you and your linked partner can see it, and it replaces your heart on the Home screen, the widget and share cards. MiLuv only accesses your camera or photo library when you choose to add a photo, and only uploads the photo you pick.

You can also add a picture together — one shared photo of the two of you, shown when you’re together. Either of you can add, change or remove it, and only the two of you can see it.

Your “since day one” date (optional)

If either of you sets the date you got together, MiLuv stores that one date with your link so both of you can see how long you’ve been together. It’s deleted when you unlink or delete your account.

Nudges

When you send your partner a nudge, you pick one of a few ready-made messages (such as “I miss you!”). The server sends it to your partner's device as a notification and does not store the message. It stores only the time you last sent a nudge, so it can limit nudges to one a minute.

If your partner uses the Nudge widget (MiLuv Pro), their phone keeps the latest nudge it received — your name, the message and when it arrived — on their device only, so the widget can show it. It's replaced by the next nudge, isn't shown after you unlink, and is removed when they sign out. It is never sent back to our servers.

Sharing a card

When you tap Share on the Home screen, MiLuv makes an image of the distance card on your phone and hands it to the iOS share sheet. MiLuv does not upload or keep the image. The card shows the name you choose for your partner, so think about whether they'd be happy for it to be posted.

Diagnostic data

MiLuv contains no analytics or advertising software and does not track you across other apps or websites. Apple and the push-delivery provider (Expo) collect limited technical data — such as crash logs and whether a notification was delivered — as part of running their services. I may later add crash reporting (for example, Sentry) to fix bugs; if I do, it would collect information like device model, OS version, and error details — never your location or the contents of your account.

They also see your display name, and any nudge you send them (your name and the message you picked), and your photo if you add one. When you unlink, the shared distance is deleted for both of you.

Your information is used only to make the app work:

• Your email and password sign you in.
• Your latest position and your partner's are used to calculate the distance between you, which is then shown on the home screen and the widget.
• That distance triggers a notification when you cross 1 km, 500 m, or arrive — sent to your device using your push token.
• When you send a nudge, it's delivered to your partner's device using their push token, and the time you sent it is used to limit nudges to one a minute.

I do not use your data for advertising, profiling, or any purpose beyond running MiLuv, and I do not sell or rent it to anyone.

MiLuv relies on a small number of service providers who process data on my behalf:

Each provider has its own privacy terms and processes data only to provide its service.

• Account data (email, name, nickname) — kept until you delete your account.
• Location — only your most recent position exists at any time; it's overwritten on every update and deleted immediately when you unlink from your partner or delete your account.
• Computed distance — deleted when either of you unlinks or deletes their account.
• Push token — removed when you sign out on a device or delete your account.
• Purchase records — kept while your account exists (needed to keep Pro working and for restores); deleted with your account.
• Calendar plans — deleted when either of you removes them, unlinks, or deletes their account.
• Picture together — kept until either of you removes it, unlinks, or deletes their account.
• Your photo — kept until you remove it (Home screen → + → Remove Photo) or delete your account. Your partner stops being able to see it as soon as either of you unlinks.
• Last-nudge time — a single timestamp, overwritten each time you send a nudge and deleted when you delete your account. Nudge messages are never stored on our servers.

• Turn off location — in iOS Settings, at any time. MiLuv still works; it just can't update the distance until you turn it back on.
• Unlink from your partner — Settings → Partner → Unlink partner. This deletes both people's stored locations and the shared distance.
• Delete your account — Settings → Danger Zone → Delete account. This permanently removes your account and all associated data, and ends your partner's connection.
• Ask what's held about you, or request deletion if you can't access the app — email me (below) and I'll respond within 30 days.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA — including access, correction, deletion, and the right to object. The controls above cover these; email me if you need anything else.

Data is encrypted in transit (HTTPS/TLS) and encrypted at rest by Supabase. Access to your location is restricted at the database level so that only you and the distance-calculating process can read it. No system is perfectly secure, but MiLuv is built to keep the amount of personal data it holds as small as possible.

MiLuv is not directed to children under 13 (or the minimum age required in your country), and I do not knowingly collect their personal information. If you believe a child has created an account, email me and I'll remove it.

MiLuv is operated from the Philippines. Your data is stored on Supabase infrastructure in the Southeast Asia region and may be processed by the providers listed in section 5 in the regions where they operate. By using MiLuv you consent to this processing.

If this policy changes, I'll update the “last updated” date at the top. For material changes I'll also let you know in the app before they take effect.

Questions, requests, or concerns about your privacy:

tania.dev.ph@gmail.com