← Back to oléyoga

Privacy Policy

Updated August 24, 2026

The oléyoga Privacy Policy describes how your personal data is collected, used, and shared when you use the oléyoga app, visit our website, or interact with our services.

The terms "user", "you", and "your" refer to any person using our services. The terms "oléyoga", "we", and "our" refer to Pixel Family S.L. (Tax ID B99489205, Calle Alameda 22, 28014 Madrid, Spain). Privacy email: privacy@milowy.com.

What counts as personal data at oléyoga?

We treat as "personal data" any information that identifies or can identify a person, or that we can link to them, regardless of where they live. This includes data that identifies you directly (such as your name or email) and data that can reasonably be used to do so (such as a device identifier).

Aggregated and anonymized data is not considered personal data for the purposes of this Policy.

This Policy covers the mobile app, the milowy.com/oleyoga website, and any communication with us. oléyoga may link to third-party services (Apple, Google) or integrate third-party tools; this Policy does not apply to how those third parties use data. We recommend reading their privacy policies.

What are your privacy rights?

We respect your right to know, access, rectify, transfer, restrict the processing of, and delete your personal data. If you choose to exercise these rights, you will not receive discriminatory treatment or a lower-quality service. You can withdraw your consent at any time.

To exercise your rights you can:

  • From the app: in Profile and settings you can change your name, goals, age range, notifications, language, or visual theme. From Account you can delete your account and all associated data.
  • By email: contact us at privacy@milowy.com for any access, rectification, portability, restriction, objection, or deletion request.

We will respond to all requests within a maximum of 30 days. In some cases we may need additional information to verify your identity, or to let you know we need more time.

There may be situations where we cannot fulfill your request — for example, if you ask us to delete data we are legally required to keep, or if the request would compromise the security of other users. In those cases we will explain why.

If you are not satisfied with our response, you can address your complaint to the Spanish Data Protection Agency (aepd.es) or to the data protection authority of your country of residence.

What personal data does oléyoga collect?

We believe you can have a great experience and great privacy at the same time: we only collect the data we need. The data we collect depends on how you interact with the app.

  • Account information: your email, name (optional), profile photo (optional, chosen by you), authentication method (email, Apple, or Google), sign-up date, and account status.
  • Personalization information: the wellbeing goals you select, your age range (which we infer as a life stage), your notification preferences, and your preferred language.
  • User content: the journaling entries you write and the content you save as favorites. Your entries may be shown in Progress so you can review your journey.
  • Journaling personalization metadata: which type of prompt we show you (editorial family, time of day, depth). It's used to reduce repetition, not to analyze the intimate content of what you write.
  • Health and wellbeing information: your mood logs (1–5 value, selected emotions, optional note) and the derived summaries you see in Progress. They are collected with your explicit consent, used exclusively to show you your emotional evolution and adapt recommendations, and are not shared with third parties for advertising purposes or used to produce medical diagnoses.
  • Activity information: the breathing and meditation sessions you complete, the intention (sankalpa) you select, your streaks, and monthly summaries of practice time.
  • Usage data: how you interact with feed content (reading time, actions, preferred content type). This data feeds the personalization algorithm.
  • Transaction information: your subscription status, managed by RevenueCat. We have no access to payment data or card information.
  • Technical and device information: device type, model, operating system, app version, time zone, IP address (processed to infer country/region, not stored directly), and anonymous identifiers.

What data does oléyoga NOT collect?

  • Your precise location (GPS) or continuous approximate location.
  • Your contacts, photos, videos, or device files (if you upload a profile photo, only the image you choose is processed).
  • Your browsing history outside the app.
  • Advertising identifiers (IDFA/GAID).
  • Financial data, card numbers, or banking information.
  • Biometric data.
  • Your exact date of birth.
  • The content of your journal is not accessible to the oléyoga team.

How does oléyoga use your personal data?

oléyoga uses your personal data to power its services, personalize your experience, communicate with you, ensure security, and comply with the law, always with a valid legal basis:

  • Powering our services: authentication, storing your journal, syncing your progress, calculating streaks and statistics (performance of contract, Art. 6.1.b GDPR).
  • Personalizing your experience: we adapt content to your goals, life stage, and time context. We do not build profiles to make decisions that significantly affect you without human review (Art. 6.1.b GDPR).
  • Processing of health data: your mood logs are used to show you your emotional evolution and adapt recommendations (explicit consent, Art. 9.2.a GDPR).
  • Communicating with you: transactional emails through Loops; marketing only if you consent, with the option to unsubscribe at any time.
  • Wellbeing push notifications: reminders in the windows you configure, which can be turned off at any time (consent, Art. 6.1.a GDPR).
  • Analysis and service improvement: aggregated, pseudonymized usage data through PostHog. We never analyze the content of your journal for analytics purposes (legitimate interest, Art. 6.1.f GDPR; you can object from settings).
  • Complying with the law: tax and regulatory obligations or court orders (Art. 6.1.c GDPR).

oléyoga does not use your data for third-party advertising or profile-based advertising of its own, and does not share it with data brokers.

We keep personal data only for as long as necessary: account data and content are deleted within 30 days of a deletion request; analytics are kept in aggregated form for a maximum of 24 months; and tax records for as long as required by law (a minimum of 5 years in Spain).

Who does oléyoga share your personal data with?

We may share personal data with service providers acting on our behalf and under our instructions. We do not share data with third parties for their own marketing purposes. We do not sell your personal data.

Our main providers are:

  • Supabase (EU): backend, database, and authentication.
  • Apple and Google (US): authentication ("Continue with Apple/Google") and payments. oléyoga is currently distributed on the Apple App Store only, so purchases are processed by Apple; payment data is managed exclusively by the store operator, never by us.
  • PostHog (EU): analytics with pseudonymized data; it does not receive the content of your journal.
  • RevenueCat (US): subscription management; it does not receive payment data.
  • Loops (US): transactional email; it does not receive the content of your journal.
  • Apple APNs / Google FCM (US): push notification delivery.

Artificial intelligence features

oléyoga may incorporate AI-based features in the future. When they become available: we will inform you clearly and ask for your consent when required; we will not use the content of your journal, mood logs, or personal reflections to train AI models; we will apply minimal data retention with external providers; and you will be able to turn AI features off from settings.

How does oléyoga protect your personal data?

If you find a security vulnerability, we would appreciate you reporting it to privacy@milowy.com.

  • Encryption in transit: all communications use HTTPS/TLS.
  • Encryption at rest: stored data is encrypted.
  • Secure authentication: magic links (no stored password) and trusted OAuth providers.
  • Row Level Security: each user can only access their own data.
  • Restricted access: the oléyoga team has no access to the content of your journal.
  • Continuous review of security measures.

Minors

oléyoga is not aimed at people under 16 and we do not knowingly collect their data. The lowest age range in onboarding is 16–24. If you believe a minor in your care has provided us with personal data, contact privacy@milowy.com.

Cookies and international transfers

The oléyoga app does not use cookies. The website may use strictly necessary and analytics cookies (PostHog), never advertising or cross-site tracking cookies.

Our main infrastructure is in the European Union. Some providers may process data in the US with appropriate safeguards: standard contractual clauses, adequacy decisions, or the EU-US Data Privacy Framework.

Privacy questions

If you have questions about this Policy or how we handle your data, write to us at privacy@milowy.com. Most inquiries receive a response within 7 days.

When a substantial change is made to this Policy, we will post a notice in the app and on the website at least 7 days in advance.