Privacy Policy

1. Introduction

MilkVault ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and protected when you use the MilkVault app and website at milkvault.com.

By creating an account or using our Service, you agree to the collection and use of information as described in this policy.

          🔒 The short version: we collect only what's necessary to run the app. We do not sell your data, show you ads, or share your information with marketers.
        

2. What Information Do We Collect?

We collect information you provide directly when creating an account or using the app:

Account information: your first name and email address, used to create and identify your account.
Milk storage records: bag inventory entries including date pumped, ounces, freezer type, and optional notes.
Pumping session data: session start/end times, duration, side (left/right/both), ounces pumped, and optional notes.
App preferences: default freezer type, notification settings, and pumping reminder intervals.

We also collect limited technical information automatically:

Device and usage data: collected by Firebase (Google) as part of app authentication and database infrastructure. This may include device identifiers and basic usage telemetry.

We do not collect payment information, social media profiles, or any data unrelated to the core functionality of the app.

3. How Do We Use Your Information?

We use the information we collect solely to provide and improve MilkVault:

To create and manage your account
To store and display your milk inventory and pumping history
To send push notifications about bag expiry dates and pumping reminders (only if you enable these)
To remember your app preferences across sessions
To respond to support requests
To improve the app based on general, non-identifiable usage patterns

We do not use your information for advertising, marketing to third parties, or any purpose beyond operating the app.

4. Third-Party Services We Use

MilkVault is built on a small number of trusted third-party platforms. These providers process data only as necessary to provide their services to us:

Firebase / Google: We use Firebase Authentication to manage account login and Firebase Firestore to store your app data securely in the cloud. Google's privacy policy applies to their infrastructure. Your data is stored in Google's secure servers.
Apple (iOS): Push notifications are delivered through Apple's Push Notification service (APNs). Apple does not receive the content of your milk storage or pumping data.

We do not use advertising networks or any social media SDKs.

5. Analytics & Tag Manager

We use Google Analytics 4 (GA4) and Google Tag Manager (GTM) on the MilkVault marketing website (milkvault.com) to understand how visitors find and use the site. These tools are only present on the marketing website — they are not embedded in the iOS app.

GA4 and GTM may collect:

Pages visited and time spent on the site
General geographic location (country/city, derived from IP address — the full IP is not stored)
Device type, browser, and operating system
Referral source (e.g. how you arrived at the site)

This data is aggregated and anonymised — it does not identify you personally, and we do not link it to your MilkVault account. We use it solely to understand which parts of the marketing site are working well and to improve it.

Google Analytics is governed by Google's own privacy policy. You can opt out of GA tracking across all websites using Google's browser opt-out add-on, or by enabling "Do Not Track" in your browser settings.

6. Do We Share Your Information?

We do not sell, rent, or share your personal information with third parties for their own purposes. Your milk storage and pumping data is private to your account and is never shared with advertisers, marketers, or data brokers.

We may disclose information only in these limited circumstances:

Service providers: The Firebase and Apple services described above, which process data strictly to power the app.
Legal requirements: If required by law, court order, or to protect the rights and safety of our users.
Business transfer: If MilkVault is acquired or merges with another company, your information may transfer to the new owner, who will be bound by this Privacy Policy.

7. How Long Do We Keep Your Information?

We retain your data for as long as your account is active. If you delete your account, your personal information and app data will be removed from our active systems. Note that backup copies may persist for a short period before being fully purged.

You can request deletion of your data at any time by contacting us at [email protected].

8. How Do We Protect Your Information?

Your data is stored in Firebase Firestore, which is secured by Google's enterprise-grade infrastructure including encryption at rest and in transit. Account authentication is handled by Firebase Authentication, which uses industry-standard secure credential handling — we never store your raw password.

Access to your data is restricted to your account only. We do not have employees who routinely access individual user records.

While we take reasonable steps to protect your information, no system is completely immune to breaches. If you have concerns about your account security, please contact us immediately.

9. Your Rights

You have the right to:

Access: request a copy of the personal information we hold about you
Correction: update or correct your name via the app's Settings screen at any time
Deletion: request that we delete your account and associated data
Portability: request your data in a portable format
Opt out of notifications: disable push notifications at any time in app Settings or in your device's iOS Settings

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

MilkVault is intended for use by adults (nursing parents and caregivers). We do not knowingly collect personal information from anyone under the age of 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

11. California Residents (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Right to Know: you may request information about the categories of personal data we collect, the purposes for which we use it, and the categories of third parties we share it with.
Right to Delete: you may request deletion of your personal information, subject to certain exceptions.
Right to Non-Discrimination: we will not discriminate against you for exercising your privacy rights.
Right to Opt Out of Sale: we do not sell personal information. No opt-out is necessary, but you have this right.

To exercise these rights, contact us at [email protected]. We will respond within 45 days as required by law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you through the app or by email.

Continued use of MilkVault after changes are posted constitutes your acceptance of the updated policy.

On this page