Privacy policy — Milo 输入法

Milo 输入法 ("we") takes your privacy seriously. This policy explains how we collect, use and protect your information.

Voice hotwords and dictionary contributions: From Android 1.7.106, signing in automatically contributes existing personal hotwords carried by new recordings, which may include names, as shared dictionary candidates for manual review. No separate switch or confirmation is required. Signing out or changing accounts invalidates the previous account’s contribution session. Earlier clients with a contribution switch retain their existing setting; the older string-based voice protocol keeps its existing behavior. All paths aggregate only word entries and a pseudonymous source digest, not the original hotword context or transcript body. We do not mine new words from transcripts or write contributions directly into the dictionary.

1. Information we collect

Text typed on the ordinary keyboard, common words and words you create are processed on your device. We do not upload these contents simply because you type. When you choose to use speech recognition, expression rewriting, structured organization or sync, the relevant data is handled as described below.

The limited information we may collect includes:

Contact form information: If you send feedback through the website contact form, we collect the username and email address you voluntarily provide. We use this information only to reply to your feedback and for no other purpose.
Server logs: The server hosting the website may record access logs, including visit times, IP addresses and pages visited. These logs are used for website maintenance and security monitoring.
Accounts and top-ups: When you choose to sign in with Google, we use the account identifier verified by Google to assign credits to your account. For top-up cards, we retain only the SHA-256 digest of the UUID card number, the plan, amount, redeeming account and time. Top-up and credit records are used for billing verification. We do not obtain your Xianyu account, chats or payment credentials.

2. How we use information

Contact information (username and email) that you provide is used only to:

Reply to your feedback and questions
At your request, identify your Google account, sync cloud settings and verify top-up credits
Send you product updates if you consent

We do not use your personal information for:

Advertising or marketing
Sale of personal information, or sharing beyond what is needed to provide a service you requested
User profiling or behavior analysis

3. Data storage

Data you submit through the contact form is stored on servers we control until you ask for it to be deleted or we stop providing the service. We take reasonable security measures to protect this data.

4. WebDAV sync — your data remains yours

Milo 输入法 supports WebDAV sync. You can sync your user dictionary and settings to your own WebDAV server, such as Nutstore, Nextcloud or Synology.

The WebDAV address, username and password are stored on your device. If you choose to enable cloud settings sync, these settings are also uploaded to the Milo server with your settings
Synced user data (dictionary snapshots) is sent only to the WebDAV server you specify and is not uploaded to the Milo server. WebDAV login settings backed up through cloud settings sync may contain the credentials needed to connect to that server
After uninstalling or changing devices, you can restore synced common and custom words through WebDAV if the backup is complete and the server is accessible.
You can clear the sync cache and WebDAV settings in the app at any time.

5. Voice input

Voice input requires microphone permission and an internet connection. Audio is sent to speech recognition nodes according to the current service configuration. Text for expression rewriting and structured organization that you choose is sent through the Milo server to Alibaba Cloud for processing. The Milo server does not persist audio, source transcription text or ordinary rewritten text. Account, authorization, usage, deductions and top-up records are used to verify credits.

Long-form recordings save the original transcript by default and are not rewritten automatically. Recognized text, drafts you edit and organized results are stored in the app's private storage on your device. You can view, copy, export or delete them. The app does not save recorded audio.

When you start Structured Organization from a Miaoji document's details, the selected draft is sent only after you actively confirm. To avoid charging twice on network retries, the result of each organization step is temporarily stored with AES-GCM encryption for recovery within 24 hours; the source transcription is not written to the server database. Results cease to be available after expiry. While the service is running, expired ciphertext is cleared every minute; results that expire while it is stopped are cleared on its next startup. Afterward, only billing and duplicate-charge prevention evidence without the document body is retained. Drafts already saved or exported on your device are unaffected by this server-side temporary storage period.

Recovery for ordinary keyboard voice input: If the connection fails or the transcript has not yet been delivered, the recording is kept temporarily in the app's private storage on your device for a manual retry. On successful delivery, the corresponding audio is cleared after the current input field confirms receipt of the text. Long-form recordings retain written records, not audio as a saved record.

Assistant tasks (AppFunctions): On devices that support this feature, compatible assistants can request role-based voice input or a templated recording. You review and explicitly confirm the task in Milo before its recording, organization or sharing proceeds. The assistant receives only text delivered for this task and cannot browse all your records. Audio is sent to speech recognition nodes; text for role rewriting or template organization is sent through the Milo server for cloud processing and uses in-app character credits. Unlike ordinary keyboard rewriting, the result of an assistant role rewrite is temporarily stored on the Milo server with AES-GCM encryption for 24 hours so the same request can be recovered after a retry. After expiry the result is unavailable and its ciphertext is cleared, while billing and duplicate-charge prevention evidence without the body remains. Results already saved on your device are not affected by this server-side period.

6. Third-party services

Milo 输入法 does not integrate third-party analytics, statistics, advertising or tracking services. The app does not access external networks except in these cases:

A WebDAV server you configure for dictionary sync
Speech recognition nodes and Alibaba Cloud services for speech recognition, expression rewriting and structured organization that you choose to use
Contacting us when you choose to submit the contact form
Accessing the Milo 输入法 server when you choose to sign in, sync settings, check credits or redeem a top-up card; accessing the relevant Google services when you sign in with Google or pay
Opening a Xianyu product or shop page when you tap “Buy on Xianyu” in the website edition; later shopping and payment are handled by Xianyu under its rules and privacy policy, not by Milo 输入法

7. Permissions

Milo 输入法 requests these permissions for the following purposes:

Network: Sync, speech recognition, rewriting, structured organization and account services that you choose to use
Storage: Reading and writing user dictionaries and settings files
Microphone: Voice input and long-form recordings. Recording status is shown after recording starts, and a long-form recording can be ended from its persistent notification. Long-lived provider keys remain only on the server; temporary credentials are used only in app memory

8. Your rights

You have these rights:

To be informed: Learn how we handle your information
To delete: Uninstalling the app removes local data in the app’s private storage; it does not delete synced cloud settings, documents you exported or files on your own WebDAV server. You can request deletion of contact form data by email
To decline: Decline WebDAV sync and voice input without affecting core keyboard functions
To transfer data: Export and move dictionary data through WebDAV sync; export drafts and organized results from long-form recording details

Delete your Milo account and cloud data

To request deletion of a Milo account created with Google sign-in, use the website contact form. Fill in the required name field and enter that Google account’s email address in the email field and begin the message with “Delete my Milo account”; say that you want the account and cloud data deleted. Do not send passwords, sign-in tokens or WebDAV credentials. Submitting the form starts a request; it does not delete the account immediately. We will contact you to verify ownership before handling the request manually.

After verification, the account deletion process removes identity details, sign-in sessions, Milo cloud configuration, personal-hotword contributions, and templates and votes you published. Any remaining character allowance is set to zero and is not restored if you register again. De-identified records needed for consumed services, purchase verification, billing and duplicate prevention are retained; the current system has no single automatic deletion deadline for them. Historical aggregate TSV backups contain no account digest but may still contain word entries until removed under the existing policy that keeps at most 30 exports. Uninstall the app to remove its private data on your device. Delete exported files and dictionary files on your own WebDAV server yourself. Deleting your Milo account does not delete your Google account.

9. Changes to this policy

We may update this privacy policy from time to time. The updated policy will be published on this page. We will announce material changes on the website or in the app.

10. Contact us

If you have questions or suggestions about this privacy policy, please contact us through:

Website contact form: /en/contact
Email: fay@fay.wang

We commit to replying to your inquiries within a reasonable time.