What we keep, and who sees it.

MilkSisters stores only what it needs to connect moms. This page says what that is, where it lives and how to get rid of it.

1. What we collect

You give us:

• Your email address and a password. We store the password scrambled, never as typed.
• Your name and, if you add one, a profile photo.
• Your listing: your town, your baby's age, whether you need milk or can give it, whether it's free or sold and at what price, a short note, whether you are in need right now, and the contact details you choose to add.
• Photos of lab results, if you upload them.
• Your alert settings.

The app records on its own:

• When you joined, and when you confirmed your email address.
• Alerts sent to you and whether you have read them.
• Your IP address, counted in memory for up to an hour, to cap repeated log-in attempts, sign-ups and password reset requests. It is not written to the database.
• A session cookie that keeps you logged in. There are no advertising or analytics cookies.

We never ask for your street address, and there is nowhere to enter it.

2. What we do with it

• Show your listing to other moms, which is why you made it.
• Send you the account emails you trigger: confirming your address, resetting your password.
• Show in-app alerts about moms in your town, if you turned them on, and tell moms in your town about you when your listing goes live or you mark that you are in need.
• Keep the app working and stop abuse.

We don't sell your data, share it with advertisers or use it to build profiles.

3. Who sees what

• Anyone browsing the feeds, including people without an account, sees listed listings: the name you entered, your profile photo, town, baby's age, note, whether milk is free or sold and the price, whether you are in need right now, when you joined, and whether lab results were shared.
• Only signed-in moms can open your page, and only there are your contact details and lab result photos shown. Lab result photos are served through the app to signed-in moms only, with a watermark, and have no public link.
• Your profile photo is on a plain link, so anyone who has that link can open it, signed in or not. If that worries you, leave the photo off.
• Your email address is never shown to other moms unless you add it as a contact detail yourself.
• An unlisted listing is not shown to anyone but you.

4. Where it lives

MilkSisters runs on servers and file storage rented from hosting providers, and sends email through an email provider. They store the data on our behalf and are not allowed to use it for anything else. Our providers are Fly.io (servers and database), Tigris (profile photos and lab results) and Resend (email).

5. How long we keep it

As long as you have an account. Delete your account from Settings and your account, listing, photos, lab results and notifications are removed straight away. Copies in our database snapshots disappear as those snapshots expire, within a week.

6. Your rights

Under the Philippine Data Privacy Act of 2012 you can see the data we hold about you, correct it, and have it deleted. Almost all of it you can see and change yourself on My listing and Settings. For anything else, email us. You can also complain to the National Privacy Commission.

7. Children

MilkSisters is for adults. The only thing we store about a child is the baby's age on the listing, which you enter.

8. Changes

We may change this policy. When we do, we update the date at the top of this page.

9. Contact

Questions about your data: hello@milksisters.app.