What Milo stores
You’re considering putting a record of your baby into someone else’s app. Here is exactly what that means, in plain sentences.
What’s stored
What you log: feeds, nursing, pumping, nappies, weights, heights, supplements, and any notes you attach to them.
Your baby’s profile — name, birth date, sex and gestational age, which the growth curves need — plus anything you add to the emergency card, which can include medications, conditions, a home address and insurance details.
Daily photos, and comments on them.
Your email address, a display name if you set one, and which household you belong to.
Where it lives
A Postgres database and a Google Cloud Storage bucket, both in the United States. The app runs on Vercel. Sign-in codes are sent through Resend.
That’s the entire list. Nothing you log is sent anywhere else — no advertising network, no session recorder, and no analytics inside your family’s app. Nobody measures a night feed.
If you’re in the EU, this means your data is stored in the US. That’s lawful and ordinary, but you should know it rather than discover it.
This website, though
The public pages at milo.baby — the one you’re reading, the home page, the invite form — load Google Analytics, so we can see whether anyone finds Milo and which of these words worked. It is on by default. “Don’t count my visits”, at the bottom of every one of these pages, turns it off for good on this device, and reloads the page so that what is already running stops.
That tag exists on these pages only. It is never loaded on your family’s own address, and the code enforces that rather than trusting us to remember: those pages are not given the measurement ID at all.
Nothing about your baby is in that data. It knows a browser visited a marketing page — no household, no log, no name.
Who can read it
The people in your household, at the level you gave them. A grandparent invited to the gallery sees photos and nothing else — not the log, not the emergency card. That’s enforced by the database itself, not by hiding buttons.
Photos are served through signed links that expire in hours. They are not public URLs, so a link that leaks stops working.
Nobody outside your household. There is no admin screen that browses families.
What isn’t done with it
Not sold, not shared, not used to train anything. No ads. Your photos are not scanned or analysed.
No email beyond sign-in codes and the invite you asked for. There is no newsletter.
Taking it with you, or away
Export the whole log as CSV from Settings → Data, at any time, without asking.
Ask to delete your account and it goes — the household’s log with it if you’re the last person in it. Write to the address below.
Asking anything
Milo is built by one person for his own family, and now for a few others. Questions, deletions and complaints all go to the same place: hello@milo.baby.