Privacy Policy
Milvo is published by [DEVELOPER LEGAL NAME], [ADDRESS]. Questions about this policy go to help@milvocards.com.
The short version
Milvo has no user accounts and no servers. We do not collect, receive, store or sell any personal data about you. There is no analytics, no crash reporting, no advertising and no third-party tracking code in the app. Making a card works with the network switched off.
One optional feature reaches the internet: fetching the playlist title. What it sends, and to whom, is described in full below — because it is the only part of this document where the honest answer is longer than one line.
What the app handles, and where it stays
Everything in this table stays on your phone. None of it is transmitted to us — we operate no server that could receive it.
| What | Where it comes from | How long it is kept |
|---|---|---|
| The card's chip type, serial number and settings bytes | The card you hold against the phone | In memory, for the length of that tap |
| The link stored on your original card, including its token | Your own card | In memory only. It is never written to storage, and it is gone when the app closes |
| Your card history: playlist title, cover image and the date a card was made | The cards you make | On your device until you delete the card from the history or uninstall the app |
| Whether your free card is still available, and whether the unlock was purchased | Your use of the app and the app store | On your device; the purchase itself is held by the store, not by us |
Uninstalling the app removes everything in the list above from your device. Because none of it ever reaches us, there is no copy elsewhere for us to delete.
The one network request, and how to stop it
A card carries a link, not a name. To show the playlist title instead of a bare address, the app can open the public sharing page that the link points at.
- It is an ordinary HTTPS request to the address already stored on your card, and to the address of the cover image that page names.
- That address includes the card's token, so the request necessarily discloses it, together with your device's IP address, to the operator of that page.
- The recipient is Yoto Limited's infrastructure, not us. We never see the request, and we have no agreement or relationship with them.
- The response is used to display and store a title and cover image. Nothing about you is uploaded and nothing is sent anywhere else.
- The app has no other reason to use the network, apart from the purchase itself, which is handled by the app store.
How to revoke consent
The lookup is controlled by a switch inside the app, on the screen where you link the playlist. Turn it off and the app makes no network requests at all; cards are still made, just without a title. You can change your mind at any time, in the same place.
On Android, the app declares the INTERNET permission because Android grants it at install time and offers no way to ask for it later. The switch in the app is therefore the real control, not the permission list.
Purchases
The one-time unlock is sold and processed by the app store you installed from — Google Play or the App Store. Your payment details go to them and never pass through the app. We receive no name, no address and no card number: the store tells the app only whether the unlock is owned, so that "Restore purchase" can work on a new phone.
The stores process that transaction under their own privacy policies, as independent controllers of it.
Permissions the app asks for
- NFC — the entire point of the app: reading a card and writing a card.
- Internet — only for the optional title lookup described above, and for the purchase.
There is no access to contacts, location, photos, the microphone, the camera or the files on your device, and no advertising identifier is read.
Children
Milvo is a tool for adults. It is not directed at children, it is not published in any children's category of either store, and it contains nothing designed to appeal to them. We do not knowingly collect personal data from anyone, of any age — there is no mechanism in the app by which we could.
Your rights
Under the GDPR and comparable laws you have the right to access, correct, erase, restrict and port your personal data, and to complain to a supervisory authority. We hold no personal data about you, so in practice there is nothing for us to hand over or erase; data held on your own device is removed by deleting the card history or uninstalling the app.
If you believe we hold something about you regardless, write to help@milvocards.com and we will answer. In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO).
This website
These pages are static files. They set no cookies, run no analytics and have no forms that send anything anywhere. Fonts are loaded from Google Fonts, which means your browser's request for them reaches Google's servers; nothing else on the page contacts a third party.
The company hosting these files keeps ordinary server logs, as every web host does.
Changes to this policy
If what the app does with data changes, this page and the store data declarations change in the same release — they describe one behaviour and are never allowed to drift apart. The date at the top always reflects the current version.