Privacy Policy

Effective September 15, 2026 · Version 2026-09-15

Milkloft is built local-first: the app has no accounts, no servers of ours, no analytics, and no tracking. This Privacy Policy explains what that means in practice, what little information we do receive (only if you write to us or use the website), and the rights you have over it. It covers the Milkloft app for iPhone and iPad, its widgets and Live Activities, and the milkloft.com website.

The short version: nothing you log in the app ever reaches us. It stays on your device and, if you enable it, in your own iCloud. If you share your stash, the people you invite see it too, through Apple’s iCloud, and we still see nothing. The website counts visits in aggregate and lets you join a waitlist by email. That is all.

1. Who is responsible

Open Cloud LLC (“Open Cloud”, “we”, “us”) is the controller of the personal data described in this policy. You can reach us at [email protected]. Our registered address is published with the app’s listing in the App Store.

2. The app: what we collect

Nothing. The app does not ask you to create an account, does not contain analytics or advertising software, does not track you across apps or websites, and makes no network requests to us or to any third party other than Apple’s iCloud and App Store services described below. The app’s App Store privacy label is “Data Not Collected”, and its privacy manifest declares no tracking and no collected data. We have no technical means to read your data, and we never receive it.

3. The app: where your data lives

Everything you enter in Milkloft is stored on your device: milk containers and their amounts, dates, locations, statuses and notes; your storage rules and settings; planner and outing settings; chapters; and the details about your baby described in Section 4.

On your device. The app keeps its data in its own storage on your iPhone or iPad, protected by the device’s encryption and your passcode. A small part (for example, the “use first” answer and whether Pro is unlocked) is shared with the app’s widgets through an app group on the same device. The app also writes periodic automatic backup snapshots inside its own storage.
In your iCloud. If you are signed in to iCloud and iCloud is enabled for Milkloft, the app syncs its data through the private iCloud database (CloudKit) tied to your Apple Account, so your other devices see the same stash. That database is operated by Apple, under Apple’s iCloud terms and privacy policy; we cannot access it, read it, or restore it for you. Turning off iCloud for Milkloft stops the sync; you can delete the synced copy from your iCloud settings.
In a shared stash. If you share your stash, the people you invite see the data you record in it, including the details about your baby kept with it, and you see what they record. Everyone in it can see who else is in it, by the name iCloud shows for each Apple Account, and the app may note who made a change. The stash stays in your private iCloud database; Apple operates the access through iCloud, under its own terms, and we still see nothing. When you stop sharing, the people you invited lose access to it; when you remove someone or someone leaves, only their access ends. Your copy is not deleted in any of these cases. If someone shares their stash with you, the same applies the other way: its owner and the others in it see what you record there.
In your device backups. If you back up your device with iCloud Backup or to a computer, Milkloft’s data is included in that backup like any other app’s, under Apple’s terms.
Deleting the app removes its data from that device. It does not remove the copy in your iCloud or in your device backups; you control those through your Apple settings.

Milkloft lets you enter an optional name, a date of birth, and a weight for your baby so the app can estimate intake and plan your stash. The milk you log, and the details about your baby, may be considered health-related information under some laws. We want to be clear about it: we never receive, see, or process any of it. It is stored and synced exactly as described in Section 3, under your control. You can edit or delete it at any time in the app, and it leaves your Apple ecosystem only if you export it yourself (Section 7). Milkloft is not a medical device and provides no medical advice, and we are not a healthcare provider.

5. Permissions the app asks for

Notifications. Optional. Used only to schedule local reminders on your device (for example, milk approaching its estimated date). Nothing is sent from a server.
Camera. Optional. Used only to scan the QR labels Milkloft prints for your bags, on the device. No image is stored, uploaded, or analyzed for any other purpose.
The app does not request your location, contacts, photos, microphone, Health data, or permission to track you, and it never will without updating this policy first.

6. Purchases

Milkloft Pro is bought through Apple’s App Store using your Apple Account. Apple processes the payment and holds your payment details; we never receive them. The app verifies your purchase with Apple’s StoreKit service and stores on your device the fact that Pro is unlocked (and whether it came through Family Sharing). Apple may give us aggregated statistics about downloads and sales that do not identify you, and it shares crash reports and usage statistics with developers only from people who opted in to that in their iOS settings. Refunds are handled by Apple under its policies.

The app can produce a caregiver handoff sheet (PDF), CSV exports, a full JSON backup, and QR labels. They are generated on your device and go only where you send them: the Files app, iCloud Drive, AirDrop, Mail, a printer, or any app you share them with. Once you share one, it is outside the app and outside this policy; the recipient and the service you used are responsible for what happens to it.

A backup or export made inside a shared stash copies that stash, including what other people recorded in it. If someone shared their stash with you, a backup you export there contains another person’s data and, like any other export, what happens to it once you share it is outside the app and outside this policy. Restoring it later replaces your own stash with an independent copy of that data; it does not change theirs.

8. If you write to us

If you email [email protected], or use the feedback option in the app (which opens your own mail app with a message for you to review and send), we receive your email address, your name if your mail app includes it, and whatever you write. The feedback option adds a short diagnostics footer that you can see before sending: the app version and build, the iOS version, the device model, your language and region, the screen you wrote from, and whether Pro is unlocked. It never includes your milk records or your baby’s details.

We use this information only to answer you, fix problems, and improve the app. The legal basis is our legitimate interest in providing support, or the performance of our agreement with you where your request concerns your purchase or license. We keep support correspondence for up to two years after the last message, unless you ask us to delete it earlier or we need it to establish, exercise, or defend a legal claim. Email travels through your email provider and ours under their own policies.

9. The website: milkloft.com

The website is a static site. It has no login and no forms other than the waitlist. It uses the following services:

Hosting and delivery: Cloudflare, Inc. (San Francisco, United States) serves the site through its global network. Like any host, it processes standard technical request data (IP address, browser and device type, the pages requested, referring page, and timestamps) to deliver the pages, protect the site from abuse, and produce aggregate traffic logs. Cloudflare acts as our processor, keeps these logs for a limited time, and is certified under the EU-U.S. Data Privacy Framework and its UK extension. Legal basis: our legitimate interest in running a secure and reliable website.
Visit statistics: Google Analytics 4, provided by Google LLC (United States) and, for visitors in the European Economic Area, the United Kingdom, and Switzerland, Google Ireland Limited. We use it only to count visits and see which pages and languages are read, in aggregate. We have turned off Google Signals and ad personalization, and the data is not used for advertising. Google Analytics 4 does not store visitors’ IP addresses; it uses them briefly to derive a coarse location and then discards them. If your browser sends a Do Not Track signal, the analytics script is not loaded at all. Google is certified under the EU-U.S. Data Privacy Framework. Google processes this data under its own terms; see Google’s privacy policy and “How Google uses information from sites or apps that use our services” at policies.google.com. Legal basis: your consent where the law requires it for analytics cookies, and otherwise our legitimate interest in understanding how the site is used. See Section 10 for the cookies involved and how to opt out.
Waitlist: if you enter your email address to be told when the app launches, it is sent to EmailOctopus, a service of Three Hearts Digital Ltd (London, United Kingdom), which stores it on our behalf on servers in Ireland (European Economic Area). Together with your address, the sign-up date and the technical data of the request (such as IP address) are recorded. We use the list only to announce the launch and send a small number of related messages; we do not sell it, rent it, or use it for anything else. Legal basis: your consent, which you can withdraw at any time using the unsubscribe link in any message or by writing to [email protected]. We delete the list within twelve months after the app launches, and your address as soon as you unsubscribe.
Links: the site links to third-party websites, such as the organizations that publish storage guidelines and Apple. Their privacy practices are their own.

No advertising networks, social media plug-ins, embedded videos, or other trackers are used.

10. Cookies

The app uses no cookies. The website sets cookies only for Google Analytics 4, and only if your browser does not send Do Not Track:

_ga: distinguishes one visitor from another so visits can be counted; lasts up to two years.
_ga_ followed by our property identifier: keeps the state of the current visit; lasts up to two years.

No other cookies are set by us. Cloudflare may set strictly necessary cookies for security purposes when it needs to distinguish legitimate traffic from abuse. You can refuse or delete cookies in your browser settings, enable Do Not Track, or install Google’s opt-out browser add-on (tools.google.com/dlpage/gaoptout); the site works the same without them.

11. Legal bases and where data is processed

We are a company in the United States. The only personal data we process ourselves is support correspondence (Section 8) and the waitlist (Section 9). If you are in the European Economic Area, the United Kingdom, Switzerland, or another country with data transfer rules, that data may be processed in the United States (by us and by Cloudflare and Google), in the United Kingdom and Ireland (by EmailOctopus), and wherever our email providers operate. We rely on the EU-U.S. Data Privacy Framework and its UK and Swiss extensions where the recipient is certified, on the European Commission’s and United Kingdom’s standard contractual clauses otherwise, and on the adequacy decisions that cover transfers between the European Economic Area and the United Kingdom.

We make no decisions about you by automated means and do not profile you.

12. How long we keep information

Your app data: as long as you keep it; it is on your device and your iCloud, not with us.
Support correspondence: up to two years after the last message, or earlier on request.
Waitlist: until you unsubscribe, and at most twelve months after the app launches.
Website logs: retained by Cloudflare for a limited period under its policies; we keep only aggregate statistics.
Analytics: Google keeps the underlying data for the retention period set in our account and we keep aggregate reports.

13. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to delete it, to receive a copy in a portable format, to restrict or object to its processing, to withdraw a consent you gave, and not to be discriminated against for exercising these rights. These rights are granted, among others, by the EU and UK General Data Protection Regulations, Brazil’s Lei Geral de Proteção de Dados, Argentina’s Ley 25.326, Mexico’s federal data protection law, and the California Consumer Privacy Act.

To exercise them, write to [email protected] from the address concerned, or tell us how to verify that the request is yours. We answer within the time the applicable law sets (thirty days, or forty-five days in California, extendable where the law allows) and never charge for a reasonable request. You may use an authorized agent where the law provides for it; we will ask for proof of the authorization.

For the data inside the app, you exercise these rights yourself: edit or delete anything in the app, export it with the backup and export tools, disable iCloud sync or delete the app’s iCloud data in your Apple settings, and delete the app. We cannot do any of this for you because we do not have the data.

You also have the right to complain to a supervisory authority: in the European Economic Area, the data protection authority of your country; in the United Kingdom, the Information Commissioner’s Office; in Brazil, the Autoridade Nacional de Proteção de Dados; in Argentina, the Agencia de Acceso a la Información Pública; in Mexico, the competent federal authority for personal data protection. We would appreciate the chance to address your concern first.

14. Notice for California residents

In the twelve months before the date of this policy, the only categories of personal information we collected are identifiers (an email address, and a name if your mail app includes it) and the contents of support messages, all provided directly by you, and internet activity information collected on the website through Google Analytics as described in Section 9. We use them for the purposes described in Sections 8 and 9. We do not sell personal information, do not share it for cross-context behavioral advertising, and do not collect sensitive personal information. We have no financial incentive programs. You have the rights to know, delete, correct, and opt out described in Section 13, and the right not to be discriminated against for exercising them. The site honors browser Do Not Track signals and treats them as an opt-out of analytics.

15. Children

Milkloft is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children. The information about your baby that you enter in the app is entered and stored by you, on your own device and iCloud, or in a shared stash (see Section 3), and never reaches us. If you believe a child has sent us personal information, write to [email protected] and we will delete it.

16. Security

Your app data is protected by iOS device encryption, your passcode or biometrics, and the encryption Apple applies to iCloud. The app has no server and no accounts, which removes the most common ways data is exposed. Email and waitlist data are protected by the security measures of the providers named above. No method of storage or transmission is completely secure, so we cannot guarantee absolute security; if we ever learn of a breach affecting your data, we will notify you and the authorities as the law requires.

17. Changes to this policy

We may update this policy. Each version carries a version date, and changes take effect when published at milkloft.com/privacy; the app presents them to you with its next update, asking for your acceptance again if the change is material and notifying you once if it is minor. If we ever intended to collect data from the app, we would update this policy, the App Store privacy label, and the app’s privacy manifest before doing so.

18. Contact

Open Cloud LLC, [email protected]. We answer in English and Spanish.