Privacy Policy

1. Introduction

This Privacy Policy explains how Black Eagle Group LLC ("MiloSnap," "we," "our," or "us") collects, uses, shares and protects information when you use the MiloSnap mobile app (the "Service").

MiloSnap is a baby memory book app for parents and guardians. You can keep monthly photos and notes, write journal entries, record milestones and growth, write time capsule letters, build albums and share a private family feed. You can use the app without an account; some features need one (see section 2.3).

2. Information We Collect

2.1 Information you enter about your child and family

The app stores what you choose to enter: your baby's name, date of birth and gender; photos and notes; journal entries; milestones; growth measurements (weight, height, head circumference); daily notes; and time capsule letters, including optional voice recordings. Without an account, this information stays on your device.

2.2 Account information

An account is optional. If you sign in with Apple, Google or email, we receive your email address and a user ID from that sign-in provider.

2.3 Information stored on our servers

Cloud backup and sync (signed-in users): your baby profiles, notes, journal entries, milestones, growth records, letters, daily notes and settings are copied to our servers so you can restore them. Photo backup is a Premium feature.
Family feed (signed-in users): posts, photos, reactions and comments you share with your family, and the list of family members and invites.
Time capsule letters sent by email: if you add recipient email addresses, we store the letter text, your baby's name, any voice recording, the opening date, the recipient addresses and a private link token so the letter can be delivered by email on the chosen date and opened on a web page.
Diagnostic and usage logs: app events and error reports, with the app version, platform, whether you have Premium, a random ID created by the app on first launch (not an advertising ID) and, if you are signed in, your user ID.
Push notification token (Firebase Cloud Messaging), so we can send notifications you have allowed.
Purchase records: subscription receipts and status from the App Store or Google Play, used to confirm Premium.

2.4 Camera, photos and microphone

The app asks for camera and photo library access so you can add photos, and for microphone access only if you record a voice message for a letter. You can change these permissions in your device settings at any time.

2.5 Advertising

The free version shows ads through Google AdMob. AdMob may collect device information, IP address, and, where available, your device's advertising identifier to show and measure ads. Premium subscribers do not see ads.

Version 2.8.7 and later: in the European Economic Area, the United Kingdom and Switzerland, we ask for your consent through Google's consent form (Google UMP) before any ad is requested; without consent, no ads are requested. On iOS we then ask for tracking permission; if you decline, ads are not personalised. In the regions where the consent form is shown, you can change your choice at any time in Settings → Ad privacy choices.
Earlier versions: no consent form was shown, and on iOS the app did not request tracking permission, so the advertising identifier (IDFA) was not shared.

3. How We Use Information

To provide the app's features: backup and restore, family feed, letter delivery and reminders, albums and exports.
To send emails you request or that are part of the service: sign-in codes, letter delivery, and letter reminders (currently twice a year, on 1 January and 1 July).
To send push notifications, such as monthly milestone reminders and family activity.
To confirm subscriptions and restore purchases.
To fix errors and understand how the app is used so we can improve it.
To show ads in the free version.
To comply with legal obligations.

We do not sell your personal information.

Legal bases (EEA, UK and Turkey)

Providing the features you use (backup, family feed, letter delivery, albums): performance of our contract with you.
Information about your child that you choose to enter or upload: your consent. You can withdraw it at any time by deleting the information or your account.
Ads in the free version: your consent where it is required (in version 2.8.7 and later, through Google's consent form in the EEA, UK and Switzerland, and Apple's tracking permission on iOS).
Diagnostic logs, security and fixing errors: our legitimate interest in running and improving the Service.
Keeping purchase records: our legal obligations.

You can also lodge a complaint with the data protection authority in your country.

4. Service Providers

Supabase — database, file storage, sign-in and server functions. Data is stored in Tokyo, Japan.
Resend — sending emails (sign-in codes, letter delivery and reminders, family notifications).
Firebase Cloud Messaging (Google) — push notifications.
Google AdMob — ads in the free version.
Sign in with Apple / Google Sign-In — optional sign-in.
Apple App Store / Google Play — payments and receipt validation.

We may also disclose information when required by law, to protect our rights, or as part of a merger or sale of company assets.

5. International Transfers

Our servers are located in Japan. If you use MiloSnap from another country, including the European Union, the United Kingdom or Turkey, your information is transferred to and stored in Japan. The European Commission and the United Kingdom have recognised Japan as providing an adequate level of data protection.

6. Children's Privacy

MiloSnap is meant for parents and guardians aged 18 or older. Children do not have accounts. The app stores information about a child only when a parent or guardian enters it, and that parent or guardian controls it. We do not knowingly collect personal information directly from children under 13.

7. Data Retention

On your device: kept until you delete it in the app or uninstall the app.
Account and cloud backup: kept while your account exists and deleted immediately when you delete your account in the app.
Letters sent by email: kept until the delivery date, then deleted automatically 2 years after delivery (text, recipient addresses and voice recording); recipients see this date in the delivery email. When you delete your account you can choose to delete them too; if you do not, they are still delivered (with any voice recording) but are no longer linked to you. You can ask us to delete them at any time.
Family feed: your posts and their photo files are deleted with your account.
Diagnostic and usage logs: deleted automatically after 90 days, and immediately for logs linked to your account when you delete it.
Purchase records: kept for accounting and legal purposes, unlinked from your account when you delete it.
Advertising data: handled by Google AdMob under Google's policies.

8. How to Delete Your Data

Signed-in users: Settings → Account → "Delete my account". Without an account: Settings → "Delete All Data" removes data stored on the device. Full instructions: Data Deletion.

9. Security

Data is encrypted in transit. Access to server data is restricted to the account it belongs to and to the family members you invite. No method of storage or transmission is completely secure, but we work to protect your information.

10. Your Rights

Depending on where you live (for example under the GDPR, UK GDPR, CCPA/CPRA or KVKK), you may have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent. You can opt out of personalised ads in your device settings. To exercise your rights, contact [email protected]. We respond within 30 days.

Turkey (KVKK): Veri sorumlusu: Black Eagle Group LLC. KVKK Madde 11 kapsamındaki haklarınız için [email protected] adresine başvurabilirsiniz.