Privacy Policy

Your account

You sign in with Apple. Miso receives an anonymous identifier for your Apple ID and the email address Apple provides: your real email, or a private relay address if you choose Hide My Email. Miso never sees your Apple ID password. The email is only used to identify your account; Miso doesn't send you email.

What Miso stores on its server

These are kept so your partner's phone can show them.

You and your household

• Your first name, the emoji you pick, and a photo if you add one.
• Your household's name and its 6-character join code.
• Your phone's notification address (an Apple push token) and your notification settings, so hugs and check-offs reach you the way you chose.

What you add

• To-dos and when they're checked off; hugs, notes and nudges; meal plans and shopping lists.
• Fantasy settings, rules and weekly results.

Health, if you connect it

• From Apple Health, daily totals only: time asleep, bedtime and wake time, steps, active calories, exercise minutes and workouts, resting heart rate and heart rate variability.
• From Whoop or Oura, if you connect one: its daily scores, such as recovery or readiness, sleep score, and strain or activity.
• Never individual heart-rate readings, locations, or medical records.

Calendars, if you connect them

• Your events from about a month ago to four months ahead (title, time, location and calendar name), so your partner can see them. Calendars and events you hide aren't shared.
• If you add a work calendar link: only the start and end times of your meetings, so your partner knows when you're busy. Meeting titles aren't shared.

Money, if you connect your banks

• Through SimpleFIN Bridge: your accounts' names, institutions and balances, and transactions (date, amount, description and the category you or the app give it).
• Never your bank logins. You connect your banks on SimpleFIN's site; Miso only keeps SimpleFIN's read-only access link, on your phone.

What stays only on your phone

• Your Miso sign-in, and sign-ins for Google, Whoop, Oura and SimpleFIN, and your work calendar link. These are kept in the iPhone's Keychain.
• Weekly backups of your household's data, saved as a file on your iPhone (Files › On My iPhone › Miso). A backup only leaves your phone if you share it.
• Your own preferences, such as how Today is arranged.

Who can see your information

• Your partner, the other member of your household. A household holds two people; once your partner joins, the join code no longer lets anyone else in.
• No one else through the app. The server itself checks every request and only returns a household's data to its members.
• The developer can view stored data with Supabase's tools. It's only looked at to fix problems or when you ask.
• Service providers that run parts of Miso for the developer: Supabase hosts the server and database (on Amazon Web Services in the United States), and Apple provides Sign in with Apple, push notifications and the App Store. Apple sends the developer crash reports and basic device information if you've agreed to share analytics with app developers, and in the TestFlight version, any feedback or screenshots you choose to send. See Supabase's privacy policy and Apple's privacy policy.

Services Miso connects to

Only if you connect them, and always directly from your phone.

• Apple Health: read only. Miso never writes to Apple Health.
• Google Calendar: read-only access to your calendars (the calendar.readonly scope). Miso never creates, changes or deletes events. Events from Google are only used to show them in Miso to you and your partner, stored on Miso's server as described above, and deleted when you delete your account. Google data is never sold, used for advertising, used to train AI models, or shared with anyone else. Its use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Whoop and Oura: read access to your daily scores.
• SimpleFIN Bridge: read-only access to the bank accounts you choose there.
• Your work calendar link (from Outlook or Google): your phone downloads it to find your meetings.

Miso doesn't send your data to these services, apart from the requests needed to read from them. You can disconnect any of them in the app's Settings, and remove Miso's access in iPhone Settings › Health › Data Access & Devices, or in your Google, Whoop, Oura or SimpleFIN account.

What Miso doesn't do

• No advertising, analytics or tracking tools.
• No selling or renting your data, and no sharing it with data brokers or advertisers.
• Health information is never used for advertising or marketing.

Keeping and deleting your data

• Delete account (Settings › Account) deletes your account right away, along with your profile, health and calendar data, and hugs and notes to or from you. Shared things like to-dos, shopping lists, meals and money stay with your partner; if your partner has already left or deleted their account, everything in the household is deleted.
• Leave household removes you from it and keeps everything for your partner. Sign out keeps your account for next time.
• You can also email the developer at the address below to have your data deleted, within 30 days.
• Deleted data may remain in the server's routine backups for up to 30 days before it's gone for good.

Security

Everything travels to and from the server encrypted, and Supabase encrypts the database on its disks. Access is checked by the server for every request, and sign-ins are kept in the iPhone's Keychain. No system is perfectly secure, but if anything ever exposed your information, you'd be told promptly.

Children

Miso is meant for adults and isn't directed at children under 13.

Changes to this policy

If this policy changes, the date at the top will change, and the app's release notes will mention it.

Contact

Questions or deletion requests: azthedeveloper@gmail.com