Privacy policy

What we collect

Your account

• Your email address, which you sign in with using a one-time code.
• Your profile: full name, the name you prefer to be called, date of birth, gender, paddling side and paddling experience.
• Your weight and height, if you give them. These are used to balance boats.
• Your answers to the sign-up questions, such as your role on the team, how often you paddle, your goals and how you heard about Miluo. We use these to improve the app.

What you do with your teams

• The teams you belong to and your role on each (paddler or coach).
• Tasks sent to you and how you responded to them: done, going, or not going. Also the reminders sent to you about them.
• Practices you’re invited to.
• Waivers you sign: your drawn signature, your name, the terms you agreed to and when you signed.
• If you’re a coach, the tasks, practices and invite codes you create.

From your device

• A push notification token and your platform (iOS or Android), if you allow notifications, so we can send you reminders.
• Crash reports when the app crashes: device model, operating system and app version, and technical details of the error.

We don’t collect your location or contacts. We don’t use advertising identifiers or track you across other apps and websites.

Who can see your information

• Your teammates can see your profile, including your date of birth, because some races have age categories. They can’t see your weight or height.
• Your team’s coaches can also see your weight and height, your responses to their tasks, and the waivers you sign for their team.
• Nobody outside your teams can see you. There are no public profiles, and this website doesn’t show any account data.

These rules are enforced by the database itself, not only by the app.

Services we use

We don’t sell your information or share it with advertisers. We use these providers to run Miluo, and they only process data on our behalf:

• Supabase hosts our database and handles sign-in.
• Expo, Apple and Google deliver push notifications.
• Sentry receives crash reports.
• Vercel hosts this website.

These providers may process data outside your province or country, including in the United States.

Keeping it secure

Data travels between the app and our servers encrypted. On your phone, your sign-in session is stored encrypted, with its key kept in the device’s secure storage (Keychain on iOS, Keystore on Android).

Deleting your account

To delete your account, email contact@miluo.ca from the address you sign in with. Deleting your account removes your profile, weight and height, sign-up answers, team memberships, task responses and device tokens.

Some records belong to the team as well as to you, and they stay after you leave:

• Signed waivers keep the name you signed with and the date. They’re the club’s record that the waiver was signed.
• Tasks and practices you created as a coach remain, but no longer show who created them.

Age

You must be at least 13 to use Miluo. We ask for your date of birth at sign-up and don’t create accounts for anyone younger. If you believe a child under 13 has an account, contact us and we’ll delete it.

Changes

If we change what we collect or who can see it, we’ll update this page and the date at the top.

Contact

For questions, or to access or correct your information, email contact@miluo.ca.