Effective date: 1 August 2026 Last updated: 3 October 2026
Milli does not collect your data. There is no Milli server, no analytics, no advertising, no tracking, and no third-party SDKs. Everything you enter stays on your device, and — only if you turn on iCloud sync — in your own private iCloud account, which we cannot access.
Milli (“the app”) is developed by IVAN CAYABYAB (“we”, “us”).
For any question about this policy or your privacy, contact us at ivnsjdev@gmail.com.
Milli is a personal finance app. The information you enter is stored on your device in a local database. We never receive it.
| What you enter | Where it lives | Do we see it? |
|---|---|---|
| Transactions, amounts, notes, dates | On your device | No |
| Accounts and ledgers | On your device | No |
| Categories and budgets | On your device | No |
| Recurring payments and reminders | On your device | No |
| Salary benchmark figures you enter | On your device | No |
| Profile picture | On your device | No |
| App settings and preferences | On your device | No |
| Words Milli learns from your chat corrections | On your device | No |
| Transactions you enter on Apple Watch | On your Apple Watch, then on your iPhone | No |
We do not collect, transmit, sell, rent, or share any of it, because the app has no capability to send it anywhere. Milli makes no network requests to any server operated by us or by any third party.
Milli’s Smart Chat lets you log a transaction by typing it in plain language — “coffee 4.50”, or “groceries 62 yesterday” — and Milli works out the amount, category and date for you.
All of this happens on your device. Milli uses Apple’s on-device intelligence and the on-device text features built into iOS, with a simple rule-based reader as a fallback when those are not available. There is no AI server: your message is read on the device and is never sent to us or to any third party.
When you pick or correct the category for a note, Milli remembers that word so the same note files itself next time. These learned word-to-category associations are stored on your device only, alongside the rest of your data, and are never transmitted. You can review them, and remove any of them, in the app. Milli does not use what you type, or anything else you enter, to train any machine-learning model.
If you enable iCloud sync, Milli uses Apple’s CloudKit to copy your data to the private database of your own iCloud account, so it can appear on your other devices signed in with the same Apple Account.
You can turn iCloud sync off at any time in the app’s settings, or disable it system-wide in Settings → your name → iCloud on your device.
Milli includes an Apple Watch app, available as part of the premium features, for viewing today’s figures and adding transactions from your wrist.
How the data gets there. The watch app has no database, no account, and no network access of its own. Everything it shows arrives directly from your paired iPhone over Apple’s WatchConnectivity, the system link between an iPhone and the Apple Watch paired with it. That link is device-to-device, handled by iOS and watchOS; it does not pass through any server of ours, and no Milli data is sent to us at any point.
What travels over the link. Only what the watch screen needs: your accounts and their names, icons, colours and currencies; today’s transactions and today’s net figure for those accounts; your category names and icons; your language and number-format preferences; and whether the premium features are unlocked. Your full transaction history, notes, budgets and profile picture stay on the iPhone. In the other direction, a transaction you enter on the watch travels to the iPhone as an amount, a category and an account, and is saved into your ledger there.
What the watch keeps. The watch stores the most recent snapshot it received, plus any transaction you have entered that the iPhone has not confirmed yet, in the watch app’s own private storage on the watch itself. This is what lets the app open on real numbers, and lets you record spending, when your iPhone is out of range. Anything entered while the two are apart is held on the watch until the iPhone is reachable again, then delivered to it.
To remove the watch’s copy, uninstall Milli from the watch — on the watch, press and hold the app icon and remove it, or on the iPhone open the Watch app, select Milli, and turn off Show App on Apple Watch. Unpairing the watch erases its apps and their data as well.
If you enable the app lock, Milli asks iOS to authenticate you. Your biometric data is handled entirely by Apple’s Secure Enclave and is never shared with the app — iOS tells Milli only whether authentication succeeded or failed. If you set an app passcode, it is stored on your device only.
Milli asks for camera or photo library access only when you choose to set a profile picture. The image is stored on your device (and in your own iCloud, if sync is enabled). Milli does not upload photos anywhere and does not access your library in the background.
If you enable reminders for recurring payments, Milli schedules local notifications on your device. These are generated on-device by iOS. No push server is involved and no reminder content leaves your device.
Milli offers a one-time in-app purchase to unlock premium features. The purchase is processed entirely by Apple through the App Store. We never receive your payment details, card number, or billing address. Milli only asks Apple whether the current Apple Account owns the purchase, so it knows whether to unlock the premium features. The Apple Watch app cannot ask the App Store on its own, so the iPhone tells it over the same private link whether the purchase is unlocked — a single yes-or-no value, with no payment information in it. Purchases are governed by the Apple Media Services Terms and Conditions.
Milli lets you export a backup file of your data. Once you export it, that file is under your control and this policy no longer protects it — wherever you save or send it (Files, iCloud Drive, email, another app) is governed by that service’s terms. Treat a backup file as you would a bank statement.
Milli’s home screen widgets read a small amount of your data from a private storage area shared between the app and its own widget extension on your device. Nothing in that shared area is transmitted off the device.
To be explicit, Milli does not:
Milli’s App Store privacy label reflects this: Data Not Collected.
If you email us for support, we receive your email address, your message, and any device, app-version, screenshot, or other information you choose to include. We use it only to respond, investigate the issue, and improve Milli. Do not send us your ledger, statements, or other financial records — we do not need them to answer a support question.
Where the GDPR or UK GDPR applies, we handle support mail on the basis of our legitimate interest in answering the people who write to us and in fixing the problems they report. There is no other processing to find a basis for, because Milli sends us nothing on its own.
Support email is optional and happens outside Milli. It is processed by your email provider and by Google, which hosts our support mailbox, under the Google Privacy Policy. Google’s mail servers are located in the United States, so a support message you send us is processed there. We keep support messages for up to 24 months, and longer only where a legal, security, or record-keeping obligation requires it. You may ask us to delete your support correspondence by emailing the address below.
Milli sends us nothing, so we hold none of your financial data and have nothing to retain or delete. The one exception is support mail you choose to send us, covered above.
Deleting the app does not automatically remove data already synced to your iCloud account; use the step above for that. Deleting the iPhone app also removes its Apple Watch companion.
Depending on where you live, you may have rights under the GDPR, UK GDPR, CCPA/CPRA, or similar laws — including the right to access, correct, export, or delete your personal data, and the right not to be discriminated against for exercising them.
Milli is designed so you exercise these rights directly: your data is on your own device and in your own iCloud account, under your control at all times. We hold no copy, so we cannot produce, amend, or erase one on your behalf. We do not sell or share personal information, and we have never done so.
If you believe we have not met our obligations, you may contact us at the address above, and you have the right to lodge a complaint with your local data protection authority.
Milli is not directed at children and does not knowingly collect any information from anyone, including children under 13 (or the equivalent minimum age in your country). Since the app collects no data at all, no such information can be transmitted to us.
If this policy changes, we will update this page and revise the “Last updated” date above. Material changes will also be noted in the app’s release notes. We encourage you to review this page periodically.
Questions, concerns, or requests:
ivnsjdev@gmail.com