Milk & Moon — Privacy Policy
Effective September 17, 2026
1. Introduction
This policy explains what Milk & Moon collects, why, who else sees it, and how to get rid of it. It covers the Milk & Moon mobile app and milkandmoon.io. The App is operated by Milk and Moon LLC.
The short version: we collect what the App needs to work, we do not sell it, we do not use it for advertising, and you can delete it yourself from inside the App.
2. Data We Collect
We collect only what the App's features require:
Account credentials — your email address or phone number, used to sign you in.
Baby profile information you enter: date of birth, sex, and initial weight.
Your baby's name, which is encrypted on your device before it syncs. The key is derived on your device, so the name reaches our servers only as ciphertext and we cannot read it.
Feeding session logs — timestamps, duration, and type.
Diaper change logs — timestamps and type.
Weight entries — date and measurement.
App preferences, such as colour theme and weight units.
Device identifiers, used to sync your data between your devices and to deliver notifications.
Care team details you enter when inviting someone: their name and phone number.
Feature usage events — see section 6.
Voice recordings and transcripts, only if you use Luna — see section 4.
We do not collect location data, contacts, photos, or advertising identifiers.
3. How We Use Your Data
Your data is used to:
Provide and sync the App's tracking and charting features across your devices.
Run Care Orbit, so caregivers you invite can log entries for your baby.
Send the notifications you turn on, such as daily tips and feed reminders.
Process your subscription and confirm your access.
Answer your support requests.
Diagnose faults and improve the App.
We do not sell your personal data. We do not use it for advertising, and we do not share it with advertisers or data brokers.
4. Luna, the Voice Assistant
Luna is optional and is not enabled in the current release. This section describes how it behaves when it is available. If you never use Luna, no audio and no transcripts leave your device.
What stays on your device:
Wake-word detection. When "Hey, Luna" listening is on, speech near your device is analysed on the device itself to decide whether you said the wake phrase. Audio that does not contain it is discarded locally and never uploaded.
Your baby's name. Names are replaced with anonymous labels before any text is sent for interpretation.
Recognised crisis and emergency phrasing, which is answered with a fixed pre-recorded message on the device and is not transmitted.
What is sent when you speak a command:
The recording of that command goes through our servers to a speech-to-text provider to be transcribed.
The resulting text goes through our servers to an AI provider to work out what you asked for.
Some of Luna's spoken replies are pre-recorded and bundled with the App; others are generated by a text-to-speech provider.
These requests are sent from our servers and do not include your name, email address, account ID, or your baby's name. A recording of your voice can identify you, so we do not describe voice audio as anonymous. Section 5 names the providers.
You can turn "Hey, Luna" listening off at any time in Settings, and the App works fully without Luna.
5. Service Providers
We share data with a small number of providers strictly to operate the App. They process it on our behalf and may not use it for their own purposes:
Supabase — account authentication, database hosting, and sync.
RevenueCat, with the Apple App Store and Google Play — subscription purchases and billing status.
Firebase Cloud Messaging (Google) — delivers push notifications.
ElevenLabs — converts Luna voice commands to text and generates Luna's spoken replies. Used only if Luna is enabled and you use it.
Anthropic (Claude) — interprets what a Luna command is asking for. Used only if Luna is enabled and you use it.
We may also disclose data where the law requires it, or to protect someone's safety or our legal rights.
6. Analytics & App Improvement
We collect feature usage events — which screens you visit, which education articles you open, which features you use — to understand how the App is used and improve it. These events record what was done and on which device, and while you are signed in they are associated with your account. They never include your baby's name, your feeding, diaper or weight values, or anything you say to Luna.
You can opt out at any time in Settings → Privacy → Share anonymous usage data.
When you delete your account, these usage events are deleted along with it.
7. Data Retention
Active account data is retained for as long as your account exists.
When you delete your account, the following are removed immediately and permanently: your account record and sign-in credentials, your contact details, your device identifiers, your app settings, your care team invitations, and your usage events.
Your feeding, diaper, weight and baby profile records are detached from your account at the same moment — the link between those records and your identity is removed. The detached records are kept for up to seven years so we can study infant feeding and growth patterns, then permanently purged. They carry no name, email address, device identifier or account ID, and your baby's name remains ciphertext we hold no key for.
If you would rather those records were erased outright than detached and kept, email milkandmoonapp@gmail.com and we will delete them.
8. Deleting Your Account and Your Data
Delete your account at any time from Settings → Account → Delete Account. No email to us is required and no waiting period applies. Deletion signs you out everywhere, erases the local copy on the device you are using, and applies section 7 on our servers.
Your subscription is held by Apple or Google, not by us. Deleting your account does not cancel it — cancel in your store account first, or billing continues.
Your subscription record is also held by RevenueCat, our billing provider. To have that record deleted as well, email us and we will request its removal.
9. Data Security
Your data is encrypted in transit using TLS and encrypted at rest. Data on your device is held in an encrypted SQLite database. Our cloud infrastructure applies row-level security so each account can reach only its own records, and your baby's name is encrypted on your device with a key we never receive.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.
10. Your Rights
Depending on where you live, you may have the right to:
Access the personal data we hold about you and receive a copy.
Correct inaccurate data — most of it is editable in the App.
Delete your account and personal data, from Settings → Account → Delete Account.
Object to or restrict certain processing, including opting out of usage analytics in Settings.
Withdraw consent at any time, including by deleting your account.
Port your data — the App exports your records to PDF, CSV and Excel.
Complain to your local data protection authority.
We do not sell personal information or share it for cross-context behavioural advertising, as those terms are defined under California law. We will not discriminate against you for exercising any of these rights.
To exercise a right, email milkandmoonapp@gmail.com. We will respond within 30 days.
11. Children's Privacy
The App is intended for parents and caregivers aged 18 and over. We do not knowingly collect personal information from children under 13. Information about a baby is entered by a caregiver and is treated as that caregiver's data, held under their account and deleted with it.
If you believe a child has created an account, email us and we will remove it.
12. International Transfers
We operate from the United States, and our providers process data there and in other countries. If you use the App from outside the United States, your data will be transferred to and processed in the United States, where privacy laws may differ from your own. Where required, we rely on Standard Contractual Clauses or an equivalent safeguard for those transfers.
13. Changes to This Policy
We may update this policy from time to time. Significant changes will be announced with an in-app notice before they take effect, and the effective date above will change. Continuing to use the App after a change takes effect means you accept the updated policy.
14. Contact
Questions about this policy or your data?
Email: milkandmoonapp@gmail.com
Web: milkandmoon.io