Myllo Privacy Policy
Last updated: October 28, 2026
This policy explains what information Myllo collects, why, who we share it with, and the choices you have. Myllo is provided by HexaKrown LLC ("HexaKrown", "we", "us"). Myllo is available to people 18 and older in the United States, Canada, Australia, New Zealand, the United Kingdom, Singapore, Hong Kong, Macau and Taiwan.
In short
- You talk to an AI. To reply, Myllo sends what you write, the photos you choose, and (on voice calls) your voice to AI services.
- We use your information to run Myllo for you and keep it safe. We don't sell your personal information and we don't show ads.
- You can delete your account, your memories and your health data from inside the app.
1. Information we collect
Account. Your email address, your password (stored by our login provider in protected form), a display name and a profile picture if you set them, and an invite code. If you sign in with Apple or Google, we receive your email address (Apple may give us a private relay address if you choose to hide yours) and your name from them, and nothing else from your Apple or Google account. When you delete your account, we also ask Apple to end the connection between your Apple ID and Myllo.
What you share with Myllo. Your messages; pictures you choose to send; and during voice calls, your voice and the text of what is said. Myllo also keeps short notes about things you tell it so it can remember them (see "What Myllo remembers" below).
Your reactions to Myllo's replies. If you tap the heart, laugh or thumbs-down under one of Myllo's replies, we save which one you chose together with the text of that reply, so our team can see what is working and what is not. It is tied to your account, and you can take a reaction back by tapping it again.
Things you save in the app. To-dos and shared tasks; journal entries; tarot readings; meditation and focus sessions; and, if you use the cycle log, the dates and feelings you record. Cycle information is health information (see section 5).
Friends. Your friends list; cards you send and receive, including card photos and notes; shared tasks; and who you have blocked or reported. When you report a card that has a photo, we keep a copy of that photo with the report so it can still be reviewed if the sender deletes it.
Device and usage. Your push-notification token if you allow notifications; your app version and device type; crash reports; and usage events (for example, that you sent a message or opened the journal, never what it said) tied to a random user ID rather than your name or email. Our servers also see your IP address when you connect.
What we don't ask for. We don't ask for your precise location, your contacts or your advertising ID.
2. How we use information
- To provide Myllo: reply to you, remember what matters to you, run your to-dos, journal, cycle log, tarot, timers, voice and friends features, and send notifications you've allowed.
- To keep Myllo safe: check pictures for harmful content, apply safety features, limit abuse and daily usage, and review reports.
- To keep Myllo working and improve it: fix bugs, measure which features are used, and review a limited number of records when something goes wrong.
- To follow the law and protect our rights.
3. AI service providers
Myllo can't work without AI services. These companies receive the information described below only to provide their service to us:
| Provider | What it receives | Why |
|---|---|---|
| OpenRouter and the AI model companies it routes requests to | Your messages, relevant saved context (such as memories, to-dos, journal entries and, if you use it, cycle information), and pictures you send | To write Myllo's replies, summaries and journal pages |
| OpenAI | Pictures you send | To check them for harmful content before they are used |
| ElevenLabs | Your voice during a call, and the words Myllo speaks | To turn speech into text and text into speech |
| Exa | Web search queries Myllo writes when it looks something up | To search the web |
You agree to this when you create your account (or when the app asks, if your account is older). Each provider has its own privacy terms.
4. Other service providers
We also use: Supabase (database, login and file storage), Fly.io (servers), Sentry (crash reports), PostHog (usage analytics), and Apple and Expo (push notifications). They process information on our behalf under their own terms.
5. Health information
If you use the cycle log, you give Myllo information about your menstrual cycle and how you feel. We treat it as health information:
- We use it to show you your own cycle, and, when you chat, Myllo may use it as context so its replies fit where you are in your cycle. That means relevant parts of it are sent to the AI providers in section 3 for that reply.
- We don't sell it and don't use it for advertising.
- You can delete it at any time: Settings → Delete my health & memory data.
6. What Myllo remembers
Myllo extracts short notes from your conversations (for example, "has an exam on Friday") so it can follow up later, and keeps your recent conversation as context. Your chat is also saved on our servers so you can read it again on a new phone or after you sign back in. You can delete all of it with Settings → Delete my health & memory data.
7. When we share information
- With your friends: cards, photos, notes and shared-task progress you choose to send them.
- With service providers listed above.
- For legal reasons: to comply with law, respond to valid legal requests, enforce our Terms, or protect people's safety.
- In a business transfer: if HexaKrown is sold or merged, your information may transfer to the new owner, who must honour this policy.
- We don't sell personal information or share it for advertising.
8. How long we keep information
| Information | How long |
|---|---|
| Account, messages, memories, journal, cycle log, tasks, friends and cards | Until you delete them or your account |
| Pictures you send in chat | Up to 30 days, then deleted automatically |
| Diagnostic records of conversations (used to fix problems) | Until you delete your account |
| Your heart, laugh or thumbs-down on a reply (and the reply's text) | Until you take it back or delete your account |
| Reports you make (and the copy of a reported card's photo) | Until we finish reviewing them, then 30 more days |
| Blocks | Until you unblock the person or delete your account |
| Crash reports | 90 days |
| Usage events | 12 months |
9. Your choices and rights
- Delete your account: in the app. This removes your profile, messages, memories, saved items, pictures, and the cards and card photos you sent. Friends keep their own copy of tasks you shared with them, with their own progress.
- Delete memories and health data: Settings → Delete my health & memory data.
- Notifications: turn them off in your phone's Settings.
- Access, copy, correct or delete your information: email support@evernear-ai.com. We'll answer within 45 days. Depending on where you live, you may have additional rights, including to know what we collect, to get a copy, to correct or delete it, to object to or restrict how we use it, to withdraw a consent you gave us, and to appeal a decision. For example: in the US, under the laws of California, Colorado, Connecticut, Virginia and other states; in Canada, under PIPEDA and provincial laws such as Quebec's Law 25; in the UK, under the UK GDPR and the Data Protection Act 2018; in Australia, under the Privacy Act 1988; in New Zealand, under the Privacy Act 2020; in Singapore, under the Personal Data Protection Act 2012; and in Hong Kong, Macau and Taiwan, under their personal-data protection laws. You will not be treated differently for using these rights.
- Complaints: please write to us first and we will try to put things right. You can also complain to your local privacy regulator, for example the Office of the Privacy Commissioner of Canada, the UK Information Commissioner's Office, the Office of the Australian Information Commissioner, New Zealand's Office of the Privacy Commissioner, Singapore's Personal Data Protection Commission, or the Office of the Privacy Commissioner for Personal Data in Hong Kong.
10. Children
Myllo is not for anyone under 18, and we don't knowingly collect personal information from people under 18. By creating an account you confirm that you are 18 or older. If you believe a person under 18 has an account, tell us at support@evernear-ai.com and we will close the account and delete the information we hold about them.
11. Security
We use encryption in transit and access controls, and limit who can see data. No system is perfectly secure, so we can't guarantee absolute security.
12. Where information is processed
Myllo is run from the United States. Whatever country you are in, your information is sent to and processed in the United States, and by the providers above, who may process it in other countries too. The laws there may differ from the laws where you live. We use contracts with those providers that require them to protect it, and where the law requires a transfer mechanism (for example for people in the UK) we use one. By creating an account you ask us to provide Myllo to you this way. If you are in the UK, we process your information to provide Myllo to you under our Terms (contract), to keep Myllo safe and working (our legitimate interests), and, for health information such as the cycle log and for the AI processing in section 3, with your explicit consent, which you can withdraw at any time by deleting that information or your account.
If you are in Singapore, you can reach our data protection officer at support@evernear-ai.com.
13. Changes
If we change this policy in an important way, we'll tell you in the app before it applies.
14. Contact
HexaKrown LLC, 2810 N Church St, Num 437734, Wilmington, DE 19802. Email: support@evernear-ai.com.