MiloJulo Data Notice
Draft, version 1. Not yet reviewed by a lawyer. Last updated 26 October 2026.
What MiloJulo collects, why, who else sees it, and how to get rid of it. Plain language, because a notice nobody reads protects nobody.
What we collect
To let you in: your email address and your date of birth. We use the email to send a sign-in code and nothing else; we never sell it or send marketing. The date of birth proves you are 18 and gives the age on your profile. We keep the date, not just the age, because ages change.
Your profile, which other Members see: your name, two to four photos, your two prompt answers, your Modes, your interests, when you are usually free, and — if you fill them in — your profession, industry and career stage. In the dating Modes, your gender.
Your preferences, which nobody else sees: the genders, age range and distance you are willing to match within, and how far you want Discover to look.
Where you are, explained in its own section below.
What you do here: connection requests and their notes, your chats including photos, video and voice notes, Activities you post or join, Circles you join, who you have blocked, reports you make, and whether you told us you met someone.
Your device, if you allow notifications: a push token, so we can tell your phone that a message arrived.
We do not ask for your religion, caste, community, your employer, or your education, and there is no field to put them in.
Where you are
This is the part most apps are vague about, so: when you allow location, we take one point from your phone, move it 200 to 500 metres in a fixed random direction, and store only that moved point. We keep no history — each new reading replaces the last. No Member, and no part of the app, can read that point. It is used inside the database to work out distances, and what anyone sees is a rounded band: "under 2 km", "about 5 km". If you do not allow location, we use the centre of the area you chose instead.
The point is deleted the moment you delete your account.
Why we are allowed to
We process this to provide a service you asked for, and on the consent you gave when you joined. You can withdraw any of the three consents in Settings. Withdrawing hides your profile until you accept again, because we cannot run the service without it, and you can delete your account instead at any time.
Who else handles your data
| Who | What they hold | Where |
|---|---|---|
| Supabase | the database, accounts and sign-in | Mumbai, India |
| Cloudflare R2 | your photos and chat media | object storage, private, links expire in minutes |
| Resend | delivers your sign-in code email | — |
| Google Firebase (FCM) | delivers push notifications | — |
They act for us, under their terms. We do not sell your data to anyone, ever.
How long we keep things
| Thing | How long |
|---|---|
| Your profile and photos | until you delete your account |
| Chat media (photos, video, voice notes) | 90 days, then deleted automatically; the message stays |
| A file attached to a report | copied aside as evidence and kept 90 days from the report |
| Reports and moderation records | kept after an account goes, with the names and ids removed |
| Security logs | about a year |
Deleting your account
Delete it in Settings → Delete account, or on the deletion page on our website without installing the app. You disappear from Discover, chats, the board and Circles immediately. Within the hour, a job deletes your photos and chat media from storage and then the account itself; your profile, prompts, interests, connections, messages, Join Requests, Circle memberships and feedback go with it.
Two things survive on purpose: moderation records of reports (with your name and id removed), so a pattern of harm is not erased by deleting an account, and any evidence file attached to a report, for the 90 days above.
Your rights
Ask in the app for a copy of what we hold (Settings → Request a copy of my data) and we will send it to your email. Ask us to correct something, or to delete it, at support@milojulo.co.in. We answer within 30 days and never later than 90. If you are not satisfied, you can complain to the Data Protection Board of India.
Children
MiloJulo is 18+. We do not knowingly keep any data about anyone younger; tell us and we will delete the account.
If something goes wrong
If data is exposed, we will tell the people affected and the regulator without delay, and follow up with what happened, how far it reached and what we changed.
Changes
When this notice changes in a way that affects you, we publish a new version and ask you to read and accept it before you carry on.