Consumer Health Data Privacy Policy

What this policy covers

MilBil helps with personal care; it is not a healthcare service. Even so, information about your appearance, routines or physical changes may reveal or allow an inference about your physical condition or status. This policy explains how we handle information that qualifies as consumer health data under applicable laws, including Washington’s My Health My Data Act and Nevada’s consumer health data law. The categories below depend on the features you use and the information you choose to share.

For questions or consumer health data requests, contact hello@milbil.com.

Information we may collect

Consumer health data may include concerns you share about skin, hair, lips, teeth, irritation, symptoms or physical changes; photos showing your body or appearance; check-ins and progress history; and how you respond to products or routines. Product-use information may also qualify when it is used to infer your physical status.

This includes observations, classifications and inferences MilBil creates from your submissions, whether through AI, machine learning, automated analysis or comparisons with earlier check-ins, and other information covered by applicable consumer health privacy laws.

We do not intentionally use personal-care photos for facial recognition to establish your identity or create biometric identity profiles. We do not intentionally collect genetic data through ordinary personal-care features. MilBil is not designed to collect medical, insurance, prescription or healthcare-provider treatment records.

Where the information comes from

We receive information you enter and photos or other content you intentionally submit. We may also use your earlier MilBil interactions and check-ins, observations generated by MilBil, device information needed for a requested feature, and results returned by processors working on our behalf. We do not buy consumer health profiles from data brokers.

Why we use it and when we ask for consent

We use relevant information to deliver the personal-care features you request: analyzing submissions, generating observations and recommendations, tailoring responses to your goals, understanding products and routines, comparing progress, and remembering context for future interactions. We may also use it to support you, troubleshoot features, protect the service, prevent abuse and meet legal obligations.

When applicable law requires affirmative consent for collection or sharing, we obtain that consent before proceeding, unless the processing is otherwise permitted by law, including processing necessary to provide a product or service you requested.

Storage and AI processing

MilBil may store consumer health data in its backend and process it through databases, cloud infrastructure, software, algorithms and AI systems. For an AI-powered feature, relevant information may be sent to AI infrastructure and model processors to produce your requested result. We seek to limit this processing to what is reasonably relevant to that feature.

Information may be connected to your account, history, progress or personalized memory and retained when reasonably necessary to deliver the functionality you requested.

What we share and who processes it

Depending on the request, processors may receive your personal-care submissions, relevant photos and information derived from them, product and routine information tied to personal-care concerns, progress history, and relevant inferences from your interactions. We disclose this information only as reasonably necessary to provide or operate the requested service, with legally sufficient consent or authorization, or when a disclosure is otherwise permitted or required by law.

Recipients may include cloud-hosting and database providers, AI infrastructure and routing providers, AI model providers, security and technical infrastructure providers, and other processors needed for requested functionality. MilBil uses or may use Supabase for backend services and OpenRouter and selected model providers for AI processing. Model providers may change as our infrastructure evolves.

MilBil currently has no affiliates that independently receive this data for their own purposes. We do not intentionally disclose consumer health data to advertising networks or data brokers for their independent advertising or profiling purposes.

No sale or third-party targeted advertising

MilBil does not sell consumer health data, use it for third-party targeted advertising, or make access to MilBil depend on your authorizing its sale. We do not intentionally share it with unrelated third parties to build advertising profiles. Any future transaction legally defined as a sale would require the separate authorization required by applicable law before it occurs.

We do not authorize third parties to collect consumer health data through MilBil over time and across unrelated websites or online services for their independent advertising or profiling. Providers may process information across their infrastructure as reasonably necessary to serve MilBil, maintain security, prevent abuse or meet legal obligations, subject to contractual and legal restrictions.

Location-enabled features

When you enable location access, MilBil may use it for features such as local weather or environmental conditions. We do not intentionally use location to determine whether you visited a healthcare facility or sought particular healthcare services, and we do not sell precise location information.

Your rights and how to make a request

Depending on applicable law, you may ask whether we collect, share or sell consumer health data about you; access or review that data; obtain information about recipients with whom it has been shared; correct inaccurate information; withdraw consent for future collection or sharing; request deletion; or appeal a decision about your request.

Email hello@milbil.com or use applicable privacy controls available in MilBil. We may take reasonable steps to verify your identity before providing access or making changes. You do not need to create a new account solely to exercise a privacy right. If you already have an account, we may ask you to authenticate through it when reasonable and permitted by law. We respond within the applicable legal period.

Withdrawing consent and deleting data

Where processing relies on consent, you can withdraw it for future collection or sharing by emailing hello@milbil.com or using applicable MilBil controls. Withdrawal does not undo processing that was lawful while your consent was valid. Features that need the affected information may become unavailable or less personalized.

Where a deletion right applies, we delete covered data from active records and notify processors, contractors or other recipients to delete it as required by law. Backup and archive deletion may follow normal backup and restoration cycles only to the extent the law permits. We may retain limited information when legally authorized or required.

Review, correction and appeals

To review or correct information where applicable law provides that right, contact hello@milbil.com. We may request information reasonably needed to authenticate your request. AI observations are historical outputs and may not be factual records. Where appropriate, we may correct account information or allow you to provide updated details while preserving the record of an earlier AI output.

If you have a legal right to appeal our decision, email hello@milbil.com with the subject “Consumer Health Data Appeal” and identify the request you want reconsidered. We review appeals and respond within the period required by applicable law.

Protecting your information

Access is limited to personnel and processors who reasonably need it to provide requested features, operate or secure MilBil, comply with law or carry out another authorized purpose. We use administrative, technical and organizational safeguards appropriate to the sensitivity of the information. No electronic system can guarantee absolute security.

Changes to this policy

We update this policy when our practices change. If a material change affects the categories we collect, our purposes or the categories of recipients, we provide additional disclosure and obtain additional consent where required by law before the new processing begins. The date above shows the latest revision. For privacy questions or any request described here, contact MilBil at hello@milbil.com.