Privacy Policy

Last updated: March 2026

Mila ("we", "us", "our") operates a personal AI assistant service delivered via WhatsApp. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our service.

1. Information We Collect

When you use Mila, we collect the following types of information:

• Phone number — Your WhatsApp phone number, used to identify your account and deliver the service.
• Conversation history — Text messages exchanged between you and your AI assistant, stored to maintain context across conversations.
• Voice messages — Audio recordings you send via WhatsApp, which are processed for speech-to-text conversion and then deleted from temporary storage.
• Contact information — Names and phone numbers of contacts you ask the assistant to message on your behalf.
• Usage metadata — Timestamps, message counts, and session information used for service operation and improvement.

2. How We Use Your Information

We use your information solely to provide and improve the Mila service:

• To deliver AI assistant responses tailored to your conversations.
• To maintain context and memory across your interactions.
• To process voice messages into text and generate voice replies.
• To relay messages to your contacts when requested.
• To monitor service performance and fix issues.

3. Third-Party Services

We use the following third-party services to operate Mila:

• Twilio — Provides the WhatsApp Business API for message delivery. Twilio processes your phone number and message content. Twilio Privacy Policy.
• Anthropic — Provides the AI language model (Claude) that powers the assistant. Conversation text is sent to Anthropic's API for processing. Anthropic Privacy Policy.
• Supabase — Hosts our PostgreSQL database. Your data is stored in Supabase's cloud infrastructure. Supabase Privacy Policy.

Your data is processed in servers located in the United States and the European Union. We do not sell or share your data with any other third parties for marketing or advertising purposes.

4. Data Retention

• Conversation history is retained for as long as your account is active, to provide continuity in your interactions with the assistant.
• Voice messages are processed in real-time and temporary audio files are deleted within 24 hours of processing.
• Account data is deleted within 30 days of an account deletion request.

5. Your Rights (GDPR)

If you are located in the European Economic Area or in Israel, you have the following rights regarding your personal data:

• Right of Access — You may request a copy of all personal data we hold about you.
• Right to Rectification — You may request correction of inaccurate data.
• Right to Erasure — You may request that we delete all your personal data. We will comply within 30 days.
• Right to Data Portability — You may request your data in a structured, machine-readable format.
• Right to Object — You may object to certain types of data processing.

To exercise any of these rights, contact us at the email address below.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including: encryption in transit (TLS), encrypted database connections, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

Mila is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete that information promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by sending a message through the service. Your continued use of Mila after changes are posted constitutes acceptance of the updated policy.

9. Contact Us