Privacy Policy
We collect only what is needed to deliver letters through your MILUSU penguin. We do not sell your data, and we do not use analytics, ad pixels or trackers. Letter text and photos are deleted as soon as the recipient opens them.
1. Who we are and what this policy covers
This policy is issued by MILUSU INC., a Wyoming corporation ("MILUSU", "we", "us"). It covers the MILUSU web app at app.milusu.com, which opens when you tap the NFC tag in a MILUSU penguin, and, until our online store launches, the pre-sale page at milusu.com (together, the "Service"). Our online store will have its own privacy policy.
The NFC tag in every penguin holds the same link (milusu.com/open), which forwards to the web app. It does not identify the toy or you, and we do not collect tag IDs.
Purchases made on TikTok Shop, Amazon or other marketplaces are handled by those platforms under their own privacy policies.
2. Information we collect
| Category | What we collect |
|---|---|
| Account | Email address, display name, username, account creation date. If you sign in with Google: your Google account ID, email, email verification status and name. |
| Friends | Friend requests, your friends list and blocks. |
| Letters | Letter text (up to 1,000 characters), photo caption, sender, recipient, delivery status and dates. |
| Photos | One photo per letter. We re-encode it and remove EXIF metadata, including GPS location. |
| Gift links | A hashed version of the gift link only, never the link itself. |
| Sign-in and security | Hashed one-time sign-in codes, hashed session tokens, and a shortened hash of your IP address used to limit sign-in attempts. |
| Penguin messages | The numbers of the last 30 built-in penguin messages shown to you, so they do not repeat. |
| Website forms | Your name and email if you sign up for updates or contact us on milusu.com. |
We read your browser's User-Agent to detect in-app browsers such as TikTok or Instagram. We do not store it.
We do not collect precise location, contacts, payment card details or NFC tag IDs.
3. How we use information
- To create and secure your account and sign you in.
- To deliver letters and photos to the person you choose, and to show the sender that a letter was opened.
- To manage friends and blocks.
- To prevent abuse, such as limiting sign-in attempts.
- To answer your requests, send service emails such as sign-in codes, and send product updates if you signed up for them on milusu.com (you can unsubscribe at any time).
- To comply with law.
We do not use your data for advertising or profiling, and we do not use letter content to train AI models.
4. How letters and photos are handled
Only the recipient can view a letter and its photo in the app. We do not read letter content, except where needed to investigate abuse reported to us, protect security, or comply with law. When the recipient opens it, the text and photo are deleted from our database. If the display is not confirmed, they are deleted 24 hours after delivery.
The sender keeps a record that the letter was opened, without its content, for 30 days. Unopened letters are deleted after 365 days.
You are responsible for what you send. Do not include sensitive information you would not want the recipient to have.
5. Who we share information with
We share data only with service providers that help us run the Service, under contracts that limit their use of it:
| Provider | Purpose | Data involved |
|---|---|---|
| Vercel (USA) | Website and app hosting | Request data in platform logs: IP address, URL, User-Agent |
| Supabase (USA) | Database | All data stored by the Service |
| Resend (USA) | Sending emails | Your email address and the sign-in code email |
| Optional sign-in with Google | Standard OAuth sign-in data |
We may also disclose information if required by law, to protect rights and safety, or as part of a merger or sale of our business.
We do not sell personal information or share it for cross-context behavioral advertising, and we do not disclose it to third parties for their own direct marketing.
6. Cookies and Do Not Track
We use only cookies needed for the Service to work:
- A sign-in session cookie (up to 400 days, renewed when you visit).
- Temporary cookies during Google sign-in (a few minutes) and to prefill your profile name (1 hour).
We do not use advertising, analytics or third-party tracking cookies. Because we do not track you across websites, we do not change our practices in response to Do Not Track or Global Privacy Control signals. No third parties collect information about your online activity across sites through our Service.
7. How long we keep data
| Data | Retention |
|---|---|
| Letter text and photo | Deleted when opened, or 24 hours after delivery if display is not confirmed |
| "Opened" record for the sender | 30 days |
| Unopened letters | 365 days |
| Unused gift links | 180 days |
| Sign-in codes, sessions, rate-limit records | Deleted when they expire |
| Account, friends and blocks | Until you delete your account |
| Backups | Deleted data may remain in database backups for up to about 7 days |
We may keep information longer only when required by law, to resolve disputes, or to act on an abuse report.
8. Your choices and rights
- Delete your account: go to Settings and choose Delete account. This removes your account, sessions, friends, requests, blocks, letters, photos and gift links.
- Access or correct your data: email us at hello@milusu.com and we will respond within 45 days.
- California and other US state residents: depending on your state, you may have the right to know what personal information we hold, get a copy, correct it, delete it, and opt out of its sale or use for targeted advertising (we do neither). We will not discriminate against you for making a request.
We may need to verify your identity, usually by confirming the email on your account. If we deny your request, you may appeal by replying to our decision, and we will respond within 60 days.
9. Children
The Service is intended for people aged 13 and older and is not directed to children under 13. You must be at least 13 to create an account. If you are under 18, use the Service with a parent's or guardian's permission. We do not knowingly collect personal information from children under 13.
If we learn that a child under 13 has created an account, we will delete the account and its data. If you believe a child under 13 has given us information, contact us at hello@milusu.com.
10. Security
- All traffic uses HTTPS with HSTS.
- Sign-in codes, session tokens and gift links are stored only as hashes.
- Photos are stripped of EXIF and GPS data.
- Our database is not exposed to public access; only our server code can read it, and each letter is served only to its recipient.
- Data is encrypted at rest by our hosting and database providers.
No system is perfectly secure, but we work to protect your information and limit who can access it.
11. Where data is processed
Your data is stored and processed in the United States. Our team may access it from other countries to operate and support the Service, under the same protections described here.
12. Changes to this policy
We will post any changes on this page and update the "Last updated" date. If changes are significant, we will notify you by email or in the app before they take effect.
13. Contact us
MILUSU INC.
5830 E 2nd St, Ste 7000 #37611
Casper, WY 82609, USA
Email: hello@milusu.com (subject: Privacy request)