The Short Version
Miko has no user accounts and no remote database. Your shelf, routine, notes, and answers about your skin are stored in an encrypted local database on your phone and nowhere else. We could not identify you if we were asked to.
Two things leave your device when you ask for them:
- A photograph of a product label: Sent over encrypted TLS to parse ingredients, processed in memory, and never retained.
- Your skin profile and the active formula: Sent to generate conversational answers in Ask Miko.
What leaves automatically: Scoped telemetry recording the set-up funnel screens you reach and the subscription plan tapped (screen names and plan IDs only—never your clinical answers, no IDFA, and no location tracking).
Your life-state status (pregnancy, breastfeeding, isotretinoin, or post-procedure) NEVER leaves your phone in any flow.
1. Who We Are
Miko is developed and operated as an independent private utility. For the purposes of the UK GDPR and EU GDPR, we act as the data controller for the narrow, ephemeral transmissions described in §4.
2. There Is No Account
Miko has no sign-up, no login, and no server-side record of your identity. We do not ask for your name, email address, phone number, or social accounts, and our infrastructure contains no user table.
This is architectural rather than a policy preference: there is simply no central server to store your profile.
3. What Is Stored Locally on Your Device
All personal configuration lives in a local SQLite database on your device and is never transmitted to our servers:
| Category | Data Stored Locally |
|---|---|
| Your Shelf | Products added, date added, container volume, finished status. |
| Your Scans | Photographed label extracts and extracted INCI ingredient lists. |
| Your Routine | 7-day AM/PM schedule, slot order, and custom application times. |
| Skin Profile | Skin type, concerns, sensitivities, observed reactions, climate, age bracket, shaving habits. |
| Life-State | Pregnancy, lactation, oral isotretinoin, post-procedure status. |
| Ask Miko Chats | Historical chat messages with the formulation assistant. |
| Cached Reads | Locally cached evaluations allowing immediate offline access. |
4. What Leaves Your Device
Outbound network transmissions are strictly constrained to necessary ephemeral computations:
4a. Label Photographs (OCR Extraction)
When you photograph an ingredient list, the image is transmitted over TLS 1.3 to our OCR processing service. It is processed entirely in volatile memory to parse the INCI text and discarded immediately. It is not linked to your identity or stored on disk.
4b. Ask Miko Consultations
When initiating a query in Ask Miko, your query text and relevant formula context are transmitted to generate an answer. No personal identifying information is attached. Crucially, your life-state status is pre-filtered locally and never transmitted.
4c. Subscription Processing (RevenueCat & Apple StoreKit)
In-app purchases are handled through Apple StoreKit and verified via RevenueCat using an anonymous App User ID. We do not transmit or collect your name, credit card details, or email address.
4d. Setup Funnel Telemetry (Mixpanel)
To measure onboarding drop-off, Miko emits telemetry strictly confined to a four-key runtime allowlist: screen_name, step_index, total_steps, and plan_id.
User answers (such as selected skin type or sensitivities), location data, and device fingerprints are strictly forbidden by architectural test assertions. Autocapture and session replays are disabled.
5. Zero Advertising Tracking
Miko does not integrate advertising SDKs, does not access the iOS Advertising Identifier (IDFA), does not engage in cross-app tracking, and never sells personal data to data brokers.
6. Life-State Privacy Firewall
Gestational and medical status answers (such as pregnancy, breastfeeding, oral retinoid use, or clinical procedures) are governed by an air-gapped local firewall. Conflict checks against contraindications are computed entirely within your phone's SQLite engine without contacting external servers.
7. Retention & Data Erasure
Because your personal profile exists solely within your device's local database, you retain direct, unconditional control over its retention:
- Data Deletion: Deleting the Miko app immediately and permanently wipes the local SQLite database from your device.
- Data Export: You can export your product shelf and routine at any time directly through in-app settings.
8. Your Rights
Under GDPR, UK GDPR, and CCPA, users hold rights of access, correction, and erasure. Because Miko holds no server-side records or identifiers linked to you, these rights are exercised directly through your device by managing or clearing your local app data.
9. Medical Disclaimer
Miko is not a medical device and does not provide medical care or individualized prescriptions. Nothing in this policy suggests that Miko maintains a regulated health record. Please refer to our Terms of Use for complete clinical notices.
10. Contact
For questions regarding our privacy architecture, please contact us at privacy@mikocare.pro.