Privacy Policy
Last updated September 28, 2026
This policy explains what Milo (the "Service", run by Resonate Media LLC) collects, why, who it's shared with, and your choices. We try to collect only what's needed to be a useful accountability buddy.
What we collect
- Your phone number or email (your account) and when you first texted.
- What you send: messages, photos (for example meals), and voice memos (turned into text).
- What the bot remembers about you: your name, goals, schedule, check-in times, notes about workouts and commitments, logged meals and estimated nutrition, and similar facts you share.
- Consumer health data you choose to share or connect: workouts, weight, nutrition, and, only if you connect Garmin or Apple Health, activity, heart rate, HRV, sleep, stress, body battery, steps, and similar metrics. For Garmin we store a login token, never your password.
- Payment status: if you subscribe, Stripe collects your payment details. We only receive and keep your Stripe customer ID and subscription status, never your card number.
- Basic technical logs (for example message timestamps and errors) to keep the Service running.
How we use it
Only to provide the Service to you: replying, remembering context, check-ins and reminders, tracking your meals and workouts, reacting to synced activities, billing, preventing abuse, and fixing problems. We do not use your data for advertising, we do not sell it, and we do not "share" it for cross-context behavioral advertising. We don't use it to make decisions with legal or similarly significant effects about you.
Consent for health data
Before storing health or fitness information about you, the Service asks for your consent. You can withdraw consent anytime by texting "delete my data" (which erases it) or by disconnecting Garmin or Apple Health.
Who processes it
We share data only with service providers that process it on our behalf to run the Service:
- OpenAI: generates replies, reads photos, transcribes voice memos, and runs web searches. Under OpenAI's API terms, data sent through the API is not used to train their models by default.
- Apple (iMessage) or our messaging provider: delivers texts.
- Stripe: processes payments.
- Garmin: only if you connect it, to read your data.
- Tailscale: provides the secure web links used for connecting accounts and checkout.
We may also disclose information if required by law, to protect someone's safety, or as part of a transfer of the Service (in which case this policy continues to apply).
Where it's stored and how it's protected
Your data is stored on the Service's computer in the United States, in a folder separate from every other user, protected by full-disk encryption and a private network. Other users can never see your data. Web links are one-time, expire, and use HTTPS. No system is perfectly secure; if a breach affects your personal information, we'll notify you as required by law.
How long we keep it
We keep your data while you use the Service. Converted copies of photos and voice memos are deleted after 30 days. If you don't text the Service for 12 months, your data is deleted. We may keep minimal billing records as required for taxes and accounting.
Your rights and choices
You can ask us to access (get a copy of), correct, or delete your data, or to stop processing it. Text "delete my data" to erase everything instantly, or contact us for anything else. We won't discriminate against you for using these rights. Depending on where you live (for example California, Washington, Nevada, Connecticut, Colorado, Virginia, and other US states), you may have additional rights, including the right to appeal if we deny a request; contact us to appeal. We'll respond within the time the law requires (generally 45 days).
Children
The Service is only for people 18 and older. We don't knowingly collect data from anyone under 18; if we learn we have, we delete it.
Changes
If we make material changes to this policy, we'll text you before they take effect.
Contact
Email contactresonatemedia@gmail.com or text the bot.