Last updated: October 12, 2026
The Milo Browser ("we," "us," or "our") is a parental control application that helps parents manage their children's web browsing experience. This Privacy Policy explains how we collect, use, and protect information when you use our web application, desktop application, and mobile application (collectively, the "Service").
We are committed to protecting your family's privacy. We collect only the minimum information necessary to provide our Service, and we never sell your data to third parties.
We process information you provide, information generated when your family uses Milo, and information from the providers that help us operate the Service:
Milo does not upload a complete history of every page your child visits to a browsing-history database. We do process the bookmarks, website requests, searches, screen-time totals, and technical information described above. The browser also holds information on the device needed to display pages and resume a browsing session.
We do not sell your personal information or use your child's activity for targeted advertising. Milo does not request precise GPS location. Websites opened inside Milo have their own data practices and may receive connection information and use cookies, just as they would in another browser. Approving a website does not make it subject to this policy.
The current Service uses the following providers and infrastructure:
We share information needed to deliver these functions and may disclose information when required by law or necessary to address fraud, abuse, or security incidents. Providers may process information in countries other than your own, including the United States.
Paddle collects payment details through its checkout and billing services. Milo does not store your full card number or card security code. We retain customer, subscription, price, and billing-event identifiers, plan and subscription status, billing-period dates, and cancellation or scheduled-plan-change information so we can manage your access and billing. Billing providers used for any earlier purchases may continue to retain those transaction records under their own policies.
For live subscriptions, we use Paddle Retain to support payment recovery. We provide your Paddle customer reference on signed-in parent pages so Paddle can show relevant billing prompts. Paddle's browser code also runs on public website pages to support links from recovery emails. Paddle processes this information under its privacy policy.
For refund eligibility and instructions, see our Refund Policy.
The website uses authentication and security cookies to keep you signed in and protect account actions. Browser storage also supports application state and preferences. The mobile app keeps session credentials in the operating system's secure storage and caches profiles, sites, favorites, settings, and screen-time data locally for synchronization and offline use.
Embedded web pages may keep their own cookies and cached content. Clearing cookies or app data can sign you out or remove locally stored information; it does not by itself delete your server account. Milo's own website and app do not use advertising cookies or a third-party marketing analytics SDK. We do collect operational diagnostics to troubleshoot errors, and our providers and websites you visit have their own cookie practices.
Our production application database and managed authentication are hosted on Neon. We use HTTPS for connections to Milo, authenticated server APIs, account-level authorization and database access controls, rate limiting, and protections against forged browser requests. Web sign-in uses secure, HTTP-only authentication cookies; mobile API requests use session credentials validated through Neon Auth.
Diagnostic logging is designed to redact sensitive information such as credentials. Access to administrative functions is restricted. These measures reduce risk, but no service can guarantee absolute security.
We retain account and profile data to provide the Service while your account is active. Deleted profiles are first marked as deleted for synchronization. The maintenance cleanup process makes those records eligible for permanent removal after 90 days without an update; removal is not immediate and depends on the cleanup process running.
You can delete your account in account settings once any subscription has ended and billing is resolved. We verify your password before removing your authentication account and associated application data. Contact support if you need help. See Delete Your Account for instructions. Deleting your account does not automatically request a refund.
Copies may remain temporarily in backups or operational logs until those records expire under the applicable retention settings. Billing providers may retain transaction records independently. We may retain information needed for legal obligations, dispute resolution, fraud prevention, or security. Removing your account from our active systems does not instantly erase every provider record or copy stored on a device.
Parents or guardians create and manage Milo accounts and child profiles. Children use those profiles rather than registering separate accounts. A child's use can generate favorites, website requests, search terms, screen-time totals, and technical information as described in this policy. We use this information to provide and secure the family's browsing service; we do not use it for targeted advertising.
Parents can manage profile settings and approved sites in the parent portal or parent settings in the app. Contact us to request access to, correction of, or deletion of your family's information, or to raise a concern about information a child has submitted. We may need to verify that you control the account before acting on a request. Additional privacy rights may apply depending on where you live.
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Where required, we will provide additional notice or obtain consent before making changes to how we process personal information.
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at help@themilobrowser.com.