Privacy policy · Naya & Milo

This is a translation. The French version is the reference and prevails in case of any difference.

What you tell Naya is personal. This page explains, plainly, what the app collects, why, where it is hosted, how long we keep it, and how you stay in control.

In short

Without an account, your journal stays on your phone.
With an account, and only once you say yes, your journal is backed up on servers in the European Union (Ireland), so you can get it back on another phone.
AI only if you say yes. Naya only replies with AI (OpenAI) after you agree, and only what the reply needs is sent. Never your name, your email or your whole journal.
Our usage statistics never contain health data: not what you write, your symptoms, your treatments or your cycle. You can turn them off in the app.
No advertising, no selling, no tracking.
You can delete everything from the app.

1. Who is responsible for your data

The controller is Riad Mahi, a sole trader, 74 allée des Ifs, 73220 Aiton, France (“we”). For any question about your data: support@nayamilo.app.

Data protection officer: no DPO appointed. For any question about your data: support@nayamilo.app.

2. What Naya & Milo is, and is not

Naya & Milo is a wellness app: a journal that helps you see your own patterns and prepare your appointments. It is not a medical device. It does not diagnose and does not replace a health professional. In an emergency, call your local emergency number (112 in the European Union).

3. What we collect, feature by feature

Your journal, on your phone

Everything you log is first saved on your phone: pain and where it hurts, mood, energy, sleep, cycle and symptoms, treatments and doses, side effects, appointments and questions for your doctor, your care team, your good moments and their photos, your conversations with Naya, and what you said about yourself in the welcome (first name, conditions you follow, work pattern, life around you). Some private sections (intimacy, substances) are off by default.

If what you write suggests you may be in danger, the app spots it on your phone, with keywords, and shows help numbers for your country. Nothing is sent and no one is alerted.

A technical session, without an email

When you talk to Naya with AI, buy Premium or write to us, the app opens an anonymous session with our host. It holds no name and no email: just a random technical identifier. It does not back up your journal.

Your account and backup (optional)

You can create an account with your email address. You sign in with a code or a link sent by email, with no password.

Before the first backup, the app asks for your explicit consent, once: it says what is backed up and where, with “Back up” and “Keep it on this phone”. Nothing is backed up without your yes, and your answer is recorded (date, version, platform) on your phone and on our server. Once you said yes and are signed in, backup is automatic: your journal is copied to our servers a few seconds after each change. This includes everything listed above except your first name, which stays on your phone: your conversations with Naya, your moment photos and the data read from Apple Health or Health Connect are included, as are your language and time zone.

This data is encrypted in transit (HTTPS) and stored with our host in the European Union. It is not end-to-end encrypted: our server can read it, which is what lets us restore it on a new phone. Each account can only reach its own data, and our admin tools never show the content of your journal.

You can withdraw your consent at any time: Profile → Account & backup → Back up this journal. The backup stops, and the app offers to delete the copy on our servers (your account stays). Signing out also stops the backup. Deleting your account erases it (section 8).

Naya’s AI replies (with your consent)

During the welcome, Naya asks whether she may think with OpenAI. The “I agree” box is never ticked in advance, and “Not now” counts as a no. Without your consent, nothing is sent to the AI: Naya guides you with questions and replies prepared in advance, and your journal works as usual.

Once you said yes, for each reply, summary or report, your phone sends our server:

your question and the current conversation;
the app’s language and your phone’s region (a country code such as “FR”), so Naya answers in your language and gives the help numbers for your country;
a few useful elements: patterns computed on your phone, facts Naya has kept, a few lines of your profile (tone, conditions you follow, job and work pattern, your notes);
if you track them and they help: recent totals (alcohol, coffee, cycle…);
today’s weather, reduced to the change in air pressure and the high temperature, never the place.

Never sent: your first name, your email, your identifier, your photos, your whole journal.

Our server adds Naya’s instructions and passes the request on to OpenAI, without your identifier. It keeps neither your question nor the reply: only the day’s number of requests and “tokens” is counted, for quotas. At OpenAI, the request is processed with the “store: false” option: the reply is not kept for later use, and data sent through the API is not used to train its models. After a conversation, the AI may also draw short “kept facts” from it (for example “ginger tea helps on period days”), which you can see, edit and forget in your profile.

Your answer is recorded (date, version, platform) on your phone and on our server. You can withdraw it at any time: Profile → About you → Naya’s replies. Withdrawing applies from then on, not to requests already made.

Apple Health (iPhone) and Health Connect (Android)

If you connect them, the app only reads (it never writes): sleep, steps, heart rate variability, resting heart rate, period days, workouts and mindful minutes. These values are added to your days so they can be compared with what you log. With an account, they are backed up with your journal. They are never used for advertising or profiling, and never sold. You can remove access at any time in the Health or Health Connect settings.

Weather

If you turn on weather as a factor, the app uses your approximate location (reduced accuracy, rounded to about 10 km) or the town you type, and asks Open-Meteo for the weather. This rough place stays on your phone: it is not backed up on our servers and not sent to the AI.

Usage statistics

To understand what helps and improve the app, it sends short events: app opened, welcome step, evening check-in done, feature opened, Premium screen shown, purchase, and so on. Each carries the platform, app version, language, date and your technical identifier. Never a value, a level, a note, a symptom, a medication, a period date or anything you typed. There is no third-party analytics tool, no crash-reporting tool and no advertising identifier.

These statistics are on by default and you can turn them off at any time: Profile → Your data → Share anonymous usage. From then on, no event is sent, and those still waiting on your phone are deleted. Your “Tell us” messages are not affected. They rely on our legitimate interest (section 4).

Premium and purchases

Purchases are made and paid with Apple or Google: we never see your card. RevenueCat checks your purchases and tells us about your subscription (product, store, trial or not, end date, renewal, price). RevenueCat knows your technical identifier, not your email.

Inviting someone

If you invite someone, we keep your invite code and the link between your account and theirs, to give you both your free Premium days.

Your “Tell us” messages

When you write to us from the app, we receive your message, its kind (idea, problem, thanks…), the screen you sent it from, the platform and the app version, linked to your technical identifier.

Notifications

Most reminders are scheduled on your phone. With an account, we save your device’s notification token, language, time zone and app version, to send you for example a reminder the day before an appointment, through Apple’s or Google’s notification service.

Emails

We only send the sign-in emails you ask for. No newsletter, no marketing.

This website

nayamilo.app only sets one preference cookie (lang), when you switch language. No advertising or audience measurement cookie. Our web host keeps technical logs (IP address, date, page requested) for security.

4. Why we are allowed to do this (legal bases)

Your explicit consent (GDPR Article 9(2)(a)) for your health data: sending it to the AI, reading Apple Health or Health Connect, and backing up your journal with your account (asked once before the first backup, and recorded).
Performing our contract with you (Article 6(1)(b)) for your account, the backup, Premium, invitations and notifications.
Our legitimate interest (Article 6(1)(f)) for usage statistics without health data, security, fighting abuse and handling your messages.
Our legal obligations (Article 6(1)(c)) to keep records of sales.

5. Who processes your data for us, and where

Supabase (Supabase, Inc.): hosting of the database, accounts, photos, sign-in emails and our server functions, in its eu-west-1 (Ireland) region, on Amazon Web Services infrastructure.
OpenAI (OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, Ireland): Naya’s replies, with your consent, under OpenAI’s Data Processing Addendum. Requests are sent with storage turned off on OpenAI’s side (“store: false”), and any processing outside the European Union is covered by the standard contractual clauses or the EU–US Data Privacy Framework.
RevenueCat (RevenueCat, Inc., United States): checking purchases.
Apple and Google: the stores and payments, Apple Health and Health Connect, and sending notifications (Apple Push Notification service, Firebase Cloud Messaging).
Open-Meteo: the weather, from an approximate place.
Vercel (Vercel Inc., United States): hosting this website.

Each acts only on our instructions, under a contract. When data may be transferred outside the European Union (to the United States in particular), the transfer relies on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

6. What we don’t do

No advertising, in the app or elsewhere, and no advertising identifier.
No selling or renting of your data, no sharing with data brokers or insurers.
No tracking across apps or websites.
No training of AI models on your journal.
No automated decision with legal effects on you.

7. How long we keep your data

Journal on your phone: until you delete the app.
Account, backed-up journal, photos, messages, statistics, consents: until you delete your account. An account left unused for 3 years is deleted, after an email to let you know.
Anonymous technical session: 3 years without use.
AI questions and replies: not kept by our server.
Sales records: 10 years (French accounting rules), detached from your account when you delete it.
Invitations: detached from the accounts when they are deleted, so our counts stay right.
Our hosts’ technical logs and database backups: 30 days at most.

8. Your rights, and how to use them

You can access your data, correct it, erase it, get a copy of it, restrict or object to its use, and withdraw your consent at any time.

In the app:

Delete your account: Profile → Account & backup → Delete account, then confirm with “Delete my account”. Your account, backed-up journal, photos and everything linked to your account are erased from our servers. The journal on your phone stays; delete the app to erase it too. Step by step: delete your account.
Stop the AI: Profile → About you → Naya’s replies.
Stop the backup, and delete the copy on our servers: Profile → Account & backup → Back up this journal.
Stop usage statistics: Profile → Your data → Share anonymous usage.
Forget a kept fact: Profile → About you.
Export: Profile → Your data → Export everything (a text summary of your recent weeks, to share wherever you like).
Apple Health, Health Connect, location: in your phone’s settings.

By email: write to support@nayamilo.app from your account’s address, for example to get a full copy of your data or to delete your account without the app. We answer within one month.

You can also complain to the French data protection authority, the CNIL (cnil.fr), or to the authority in your country.

9. Minimum age

Naya & Milo is not meant for anyone under 15. During the welcome, the app asks you to confirm you are 15 or older; if you are younger, it stops there and keeps nothing you said. In France, you can consent to the processing of your data yourself from 15. In countries that set this age at 16 (for example Germany, the Netherlands or Ireland), you need a parent’s consent until you are 16. If you think a younger child has given us data, write to us and we will delete it.

10. Security

Encrypted connections (HTTPS) between the app, our servers and our providers.
Access rules in the database: each account only sees its own data, and photos are kept in private storage.
The OpenAI access key stays on our server, never in the app.
Only team members who need it can reach the admin area, and it never shows the content of journals.

No system is perfect. If a breach affects your data, we will tell you, and the CNIL, where the law requires it.

11. Changes

If this policy changes, we update the date at the top of the page. For an important change, we tell you in the app before it applies. If what is sent to the AI changes, we ask for your consent again.

12. Contact

Riad Mahi (EI), 74 allée des Ifs, 73220 Aiton, France, support@nayamilo.app. See also the terms of use and the legal notice.