Effective date: 1 August 2026 Last updated: 9 August 2026
Milli does not collect your data. There is no Milli server, no analytics, no advertising, no tracking, and no third-party SDKs. Everything you enter stays on your device, and — only if you turn on iCloud sync — in your own private iCloud account, which we cannot access.
Milli (“the app”) is developed by IVAN CAYABYAB (“we”, “us”).
For any question about this policy or your privacy, contact us at milli.app.support@gmail.com.
Milli is a personal finance app. The information you enter is stored on your device in a local database. We never receive it.
| What you enter | Where it lives | Do we see it? |
|---|---|---|
| Transactions, amounts, notes, dates | On your device | No |
| Accounts and ledgers | On your device | No |
| Categories and budgets | On your device | No |
| Recurring payments and reminders | On your device | No |
| Salary benchmark figures you enter | On your device | No |
| Profile picture | On your device | No |
| App settings and preferences | On your device | No |
| Transactions you enter on Apple Watch | On your Apple Watch, then on your iPhone | No |
We do not collect, transmit, sell, rent, or share any of it, because the app has no capability to send it anywhere. Milli makes no network requests to any server operated by us or by any third party.
If you enable iCloud sync, Milli uses Apple’s CloudKit to copy your data to the private database of your own iCloud account, so it can appear on your other devices signed in with the same Apple Account.
You can turn iCloud sync off at any time in the app’s settings, or disable it system-wide in Settings → [your name] → iCloud on your device.
Milli includes an Apple Watch app, available as part of the premium features, for viewing today’s figures and adding transactions from your wrist.
How the data gets there. The watch app has no database, no account, and no network access of its own. Everything it shows arrives directly from your paired iPhone over Apple’s WatchConnectivity, the system link between an iPhone and the Apple Watch paired with it. That link is device-to-device, handled by iOS and watchOS; it does not pass through any server of ours, and no Milli data is sent to us at any point.
What travels over the link. Only what the watch screen needs: your accounts and their names, icons, colours and currencies; today’s transactions and today’s net figure for those accounts; your category names and icons; your language and number-format preferences; and whether the premium features are unlocked. Your full transaction history, notes, budgets and profile picture stay on the iPhone. In the other direction, a transaction you enter on the watch travels to the iPhone as an amount, a category and an account, and is saved into your ledger there.
What the watch keeps. The watch stores the most recent snapshot it received, plus any transaction you have entered that the iPhone has not confirmed yet, in the watch app’s own private storage on the watch itself. This is what lets the app open on real numbers, and lets you record spending, when your iPhone is out of range. Anything entered while the two are apart is held on the watch until the iPhone is reachable again, then delivered to it.
To remove the watch’s copy, uninstall Milli from the watch — on the watch, press and hold the app icon and remove it, or on the iPhone open the Watch app, select Milli, and turn off Show App on Apple Watch. Unpairing the watch erases its apps and their data as well.
If you enable the app lock, Milli asks iOS to authenticate you. Your biometric data is handled entirely by Apple’s Secure Enclave and is never shared with the app — iOS tells Milli only whether authentication succeeded or failed. If you set an app passcode, it is stored on your device only.
Milli asks for camera or photo library access only when you choose to set a profile picture. The image is stored on your device (and in your own iCloud, if sync is enabled). Milli does not upload photos anywhere and does not access your library in the background.
If you enable reminders for recurring payments, Milli schedules local notifications on your device. These are generated on-device by iOS. No push server is involved and no reminder content leaves your device.
Milli offers a one-time in-app purchase to unlock premium features. The purchase is processed entirely by Apple through the App Store. We never receive your payment details, card number, or billing address. Milli only asks Apple whether the current Apple Account owns the purchase, so it knows whether to unlock the premium features. The Apple Watch app cannot ask the App Store on its own, so the iPhone tells it over the same private link whether the purchase is unlocked — a single yes-or-no value, with no payment information in it. Purchases are governed by the Apple Media Services Terms and Conditions.
Milli lets you export a backup file of your data. Once you export it, that file is under your control and this policy no longer protects it — wherever you save or send it (Files, iCloud Drive, email, another app) is governed by that service’s terms. Treat a backup file as you would a bank statement.
Milli’s home screen widgets read a small amount of your data from a private storage area shared between the app and its own widget extension on your device. Nothing in that shared area is transmitted off the device.
To be explicit, Milli does not:
Milli’s App Store privacy label reflects this: Data Not Collected.
Because we hold none of your data, there is nothing for us to retain or delete.
Deleting the app does not automatically remove data already synced to your iCloud account; use the step above for that. Deleting the iPhone app also removes its Apple Watch companion.
Depending on where you live, you may have rights under the GDPR, UK GDPR, CCPA/CPRA, or similar laws — including the right to access, correct, export, or delete your personal data, and the right not to be discriminated against for exercising them.
Milli is designed so you exercise these rights directly: your data is on your own device and in your own iCloud account, under your control at all times. We hold no copy, so we cannot produce, amend, or erase one on your behalf. We do not sell or share personal information, and we have never done so.
If you believe we have not met our obligations, you may contact us at the address above, and you have the right to lodge a complaint with your local data protection authority.
Milli is not directed at children and does not knowingly collect any information from anyone, including children under 13 (or the equivalent minimum age in your country). Since the app collects no data at all, no such information can be transmitted to us.
If this policy changes, we will update this page and revise the “Last updated” date above. Material changes will also be noted in the app’s release notes. We encourage you to review this page periodically.
Questions, concerns, or requests:
milli.app.support@gmail.com