Privacy Policy

Introduction

Welcome to milktab. We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you visit our website, make a purchase, or use our services

1. Information We Collect

• Personal Information: Name, email address, mailing address, phone number, payment information, and any other information you provide when creating an account or making a purchase.
• Order Information: Details of products purchased, order date, shipping address, and transaction history.
• Technical Information: IP address, browser type, operating system, device information, and browsing behavior on our website.
• Communication Information: Records of your communication with us, including email correspondence, chat messages, and phone calls.
• Lactose Lookup: When an AI assistant such as Claude or ChatGPT uses our Lactose Lookup tools, we save what it sends them (food names, amounts and filters), the foods they matched, the time and the connecting app, for up to one year, to improve our food data and matching. The assistant sends only the details of the lookup, not your conversation, and we do not link it to an account, name or IP address.
• milktab App: If you use the milktab app, we store your account details (your email, or your Apple or Google sign-in), the answers you give during setup (such as your symptoms and goals), and the meals, meal photos and bathroom logs you add, so the app can show your history.
• App Photo Scans: Before your first scan, the app asks for your permission to send photos to the AI services below. When you scan a meal, the photo (or, for a barcode, the product's details) is sent to our server and then to an OpenAI model through OpenRouter, which identifies the foods and estimates their lactose and other triggers. Meal photos are saved to your account. When you scan a bowel movement for your bathroom log, the photo is sent to Google's Gemini model through Firebase AI Logic, which describes it; we save the description but not the photo. We send only the photo or product details and our instructions, never your name, email or other logs.
• App Usage and Crash Data: The app sends usage events (such as screens viewed and features used), device details and your account ID and name to Amplitude, our analytics provider. Versions before 1.0.20 also recorded a replay of the screens for a sample of sessions, which could show your meals and logs; current versions don't record replays. If the app crashes or hits an error, it sends a report with device details and your account ID, name and email to Sentry.
• App Advertising Measurement: Only if you tap "Allow" when the app asks to track your activity, the app turns on Meta's (Facebook's) SDK, which tells Meta that the app was installed and opened, and when you sign up and finish setup, along with your device's advertising identifier. This lets us see which of our ads brought you to milktab. Meta never receives your meals, symptoms, photos, logs, email or any other health data. If you tap "Ask App Not to Track", the Meta SDK is never started.

2. How We Use Your Information

• Order Processing: To process and fulfill your orders, including payment processing, shipping, and delivery
• Customer Service: To respond to your inquiries, provide support, and address any issues.
• Marketing: To send you promotional materials, newsletters, and other communications about our products, services, and special offers. You can opt-out of these communications at any time.
• Improvement of Services: To analyze and improve our website, products, and services, and to enhance your shopping experience.
• Security: To protect against and prevent fraud, unauthorized transactions, and other security issues.
• Advertising Measurement: To see which of our ads lead people to install the milktab app, only if you allow tracking. We never use your meals, symptoms, photos or other health data for advertising, and we never sell your information.

3. Sharing Your Information

• Service Providers: We may share your information with third-party service providers who perform services on our behalf, such as payment processing, shipping, and marketing.
• AI Providers: To analyze photo scans in the milktab app, we send meal photos and product details to OpenRouter, which passes them to OpenAI, and bathroom photos to Google (Gemini, through Firebase AI Logic). They process them to return the analysis, under their API terms.
• App Infrastructure: The milktab app stores your account, logs and meal photos with Google Firebase.
• Analytics and Crash Reporting: Amplitude receives app usage data (and session replays from versions before 1.0.20), and Sentry receives crash and error reports, as described above.
• Advertising Measurement: Meta receives app install, open, sign-up and setup events with your advertising identifier, only if you allow tracking in the app.
• Legal Requirements: We may disclose your information if required by law, regulation, or legal process, or to protect the rights, property, and safety of milktab, our customers, or others.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our assets, your information may be transferred to the new owner.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Your Rights

• Access: You have the right to request access to the personal information we hold about you.
• Correction: You have the right to request correction of any inaccurate or incomplete information.
• Deletion: You have the right to request the deletion of your personal information, subject to certain legal obligations. In the milktab app, Settings > Delete account permanently deletes your account, profile, meals, bathroom logs, stats, meal photos and sign-in right away. To have your app analytics and crash records deleted too, email us.
• Opt-Out: You have the right to opt-out of receiving marketing communications from us. To exercise any of these rights, please contact us using the information provided below.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities on our website. You can manage your cookie preferences through your browser settings. In the milktab app, the Meta SDK runs only if you allow tracking, and you can change that any time in your iPhone's Settings > Privacy & Security > Tracking.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website with a new effective date.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at contact@milktab.com. By using our website and services, you agree to the terms of this Privacy Policy.