Privacy Policy

What the app handles, and where it stays

Everything in this table stays on your phone. None of it is transmitted to us — we operate no server that could receive it.

Uninstalling the app removes everything in the list above from your device. Because none of it ever reaches us, there is no copy elsewhere for us to delete.

The one network request, and how to stop it

A card carries a link, not a name. In versions that include the title lookup, the app can open the public sharing page that the link points at, to show the playlist title instead of a bare address. The current iOS version does not include this lookup and sends nothing; everything below applies to the versions that do.

• It is an ordinary HTTPS request to the address already stored on your card, and to the address of the cover image that page names.
• That address includes the card's token, so the request necessarily discloses it, together with your device's IP address, to the operator of that page.
• The recipient is Yoto Limited's infrastructure, not us. We never see the request, and we have no agreement or relationship with them.
• The response is used to display a title and cover image while you make the card. Nothing about you is uploaded and nothing is sent anywhere else. The request identifies itself only as "Milvo" and its version — not your phone model or system version.
• The same lookup can also run when you check a card that already carries a playlist, which is a free feature with no limit — so it is not confined to making a card. It also runs when the card you are about to write to turns out to carry a playlist already, so the app can tell you what you would be overwriting.
• The app has no other reason to use the network, apart from the purchase itself, which is handled by the app store.

On Android, the app does not request the INTERNET permission. The only network use is the purchase itself, handled by Google Play.

When you write to us

The help screen can draft an email to help@milvocards.com for you. The app does not send it: it opens your own email app with the message filled in, and you decide whether to send it and what to remove first. The draft contains the app version, your phone's system version and model, the last thing the app did and its result, the card's chip family and serial number, and the card's link with the token hidden — the token never leaves the phone. Anything you send us stays in our mailbox for as long as it takes to answer you; we do not add it to any list or pass it on.

The Android beta is joined through a Google Group and the Google Play testing page, not through this website: nothing is sent from these pages when you click those links. Google handles your sign-in and the test under its own privacy policy. As the group's owner we can see the Google account address of everyone who joins, use it only to run the test, and remove all members when the test ends. Members cannot see each other. If you write to us about the beta, the paragraph above applies to your message.

Purchases

The one-time unlock is sold and processed by the app store you installed from — Google Play or the App Store. Your payment details go to them and never pass through the app. We receive no name, no address and no card number: the store tells the app only whether the unlock is owned, so that "Restore purchase" can work on a new phone.

The stores process that transaction under their own privacy policies, as independent controllers of it.

Permissions the app asks for

• NFC — the entire point of the app: reading a card and writing a card.
• Internet — only for the optional title lookup described above, and for the purchase.

There is no access to contacts, location, photos, the microphone, the camera or the files on your device, and no advertising identifier is read.

Children

Milvo is a tool for adults. It is not directed at children, it is not published in any children's category of either store, and it contains nothing designed to appeal to them. We do not knowingly collect personal data from anyone, of any age — there is no mechanism in the app by which we could.

Your rights

Under the GDPR and comparable laws you have the right to access, correct, erase, restrict and port your personal data, and to complain to a supervisory authority. We hold no personal data about you, so in practice there is nothing for us to hand over or erase; data held on your own device is removed by deleting the card history or uninstalling the app.

If you believe we hold something about you regardless, write to help@milvocards.com and we will answer. In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO).

This website

These pages are static files. They set no cookies, run no analytics and have no forms that send anything anywhere. Fonts are loaded from Google Fonts, which means your browser's request for them reaches Google's servers; nothing else on the page contacts a third party.

The company hosting these files keeps ordinary server logs, as every web host does.

The app's “where to buy the right cards” button opens milvocards.com/buy in your browser. That page picks a shop for your country from the language and region your browser reports, for example pl-PL. This happens inside your browser: nothing is sent anywhere to work it out, and nothing is stored. The app itself sends nothing — it only opens the page. Some of the shops we link to may pay us a small commission if you buy something; the price you pay is the same, and the shop's own privacy policy applies once you are on its site.

Changes to this policy

If what the app does with data changes, this page and the store data declarations change in the same release — they describe one behaviour and are never allowed to drift apart. The date at the top always reflects the current version.