Privacy Policy

1. Introduction

Mila (“we”, “our”, or “us”) operates the milabook.com website and platform (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, whether as a lash artist (“Artist”) or a client booking appointments (“Client”).

2. Information We Collect

Information you provide directly:

For Artists: name, email address, phone number, business name, business address, payment information (processed by Stripe), profile photos, and portfolio images.

For Clients: name, email address, phone number, appointment details, service preferences, and payment information (processed by Stripe).

Photos and images: profile and portfolio photos, and photos uploaded for lash consultations or saved to a Client's record — which may include photos of a Client's eyes and face. Consultation photos are also processed by our AI features (see Sections 7 and 8).

Device and push tokens: when you use our mobile app, we collect a device push-notification token so we can send you app notifications.

Information collected automatically:

We collect device information, browser type, IP address, pages visited, session duration, and usage data when you interact with our Service. This includes data collected via Google Analytics 4 (see Section 6). This data helps us understand how our Service is used and improve the platform experience.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process appointments, payments, and transactions
• Send appointment confirmations, reminders, and follow-up notifications via email and SMS
• Communicate with you about your account, updates, and support requests
• Improve and personalize the Service
• Comply with legal obligations

4. SMS/Text Messaging

By providing your phone number and booking an appointment through the Service, you consent to receive text messages related to your appointments, including booking confirmations, reminders, cancellation notices, and rebooking prompts.

Message frequency: Message frequency varies based on your appointment activity. You may receive up to 5 messages per appointment (confirmation, reminders, follow-up).

Message and data rates may apply. Your carrier's standard messaging rates apply.

Opt-out: You can opt out of text messages at any time by replying STOP to any message. After opting out, you will receive a confirmation message and no further texts.

Help: Reply HELP to any message for support information, or contact us at support@milabook.com.

Mobile opt-in data and consent records will never be shared with, sold to, or used by third parties or affiliates for marketing or promotional purposes.

5. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

We may share your information with:

• Service providers: Third-party services that help us operate the platform, including Stripe (payments), Twilio (SMS), SendGrid (email), Google Analytics (website analytics), Anthropic (AI features — see Section 7), Supabase (database, authentication, and photo/file storage), and Expo together with the Apple Push Notification service and Google Firebase Cloud Messaging (mobile push notifications). These providers only access information necessary to perform their services and are bound by their own privacy policies.
• Optional integrations you enable: If you connect Google Calendar, your appointment details (including client names and times) are synced to your Google account. If you use the Content Studio to schedule social media posts, your content is published to your connected social accounts via Buffer.
• Artists and Clients: When a Client books with an Artist, relevant booking and contact information is shared between both parties to facilitate the appointment.
• Legal requirements: We may disclose information if required by law, regulation, or legal process.

6. Analytics & Cookies

We use Google Analytics 4 (“GA4”) to collect anonymized information about how visitors use our website. GA4 uses cookies and similar tracking technologies to collect data such as pages visited, time spent on pages, referring URLs, device type, and general geographic location (country/city level).

This data is transmitted to and stored by Google on servers in the United States. Google may use this data in accordance with its own Privacy Policy. We do not use GA4 to collect personally identifiable information.

Opt out: You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on. You can also manage cookie preferences through your browser settings.

7. AI-Powered Features

Mila uses artificial intelligence provided by Anthropic (the Claude API) to power several features:

• Lash consultations: the photo provided for a consultation (which may show a Client's eyes and face) is sent to Anthropic to generate a lash-mapping analysis. The style preview images are rendered by our own image service, not by Anthropic (see Section 8).
• Mila assistant: to answer an Artist's questions about their own business, relevant business data — such as client names, appointment times, and payment summaries — is sent to Anthropic.
• Content and marketing tools: text you provide to generate captions, marketing emails, or onboarding content is sent to Anthropic.

Anthropic processes this data to return results to us and, under its commercial API terms, does not use it to train its models. See Anthropic's Privacy Policy. Consultation photos and the preview images made from them are deleted automatically 24 hours after the consultation (see Section 8).

8. Client Photos and Face Data

When an Artist offers a lash style consultation, they may take a photo of a Client's face with the Client's permission. This section explains exactly what happens to that photo.

What we collect. The consultation photo; brief technical measurements of the photo (facial landmark positions and eyelid coordinates) computed for a moment in our servers' memory to position a cosmetic lash preview on the image; and short written descriptions produced from the photo, such as eye shape and recommended lash styles.

How we use it. Only to check photo quality, show lash styles previewed on the Client's photo, and give the Artist written style recommendations. We do not use face data to identify anyone, do not use it for advertising, and do not use it to train artificial intelligence models.

Retention and deletion. Consultation photos and the preview images made from them are deleted automatically 24 hours after the consultation. The measurement data is never stored at all. The written descriptions stay on the client record the Artist keeps. Photos an Artist chooses to save to a Client's record, such as before and after photos, are kept until the Artist deletes them or deletes the record; deleting them removes the image files themselves. If an Artist closes their Mila account, all of their data, including photos, is permanently deleted after a 30-day recovery period (see Section 10).

Sharing. We share consultation photos only with the service providers that make the feature work: Anthropic, which analyzes the photo to produce the written descriptions and does not train its models on it; our own image-rendering service hosted on Railway, which keeps nothing after processing; and Supabase, which hosts our database and file storage. Each provider may use the data only to provide the service to us and is contractually required to protect it with confidentiality and security measures at least equal to those described in this policy. We never sell photos or face data, and we never share them with anyone else.

Your choices. A Client can decline to have a consultation photo taken, and can ask their Artist at any time to delete photos of them or their entire client record; deletion removes the actual files. If you have a concern you would rather not raise with your Artist, contact us at support@milabook.com and we will help.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Payment information is processed securely through Stripe; we do not store full card numbers on our servers (we retain only the card brand, last four digits, and Stripe reference identifiers).

10. Data Retention & Account Deletion

We retain your personal information for as long as your account is active or as needed to provide the Service. You can delete your account at any time — from the mobile app (Me → Delete account), the web dashboard (Settings → Account), or by emailing support@milabook.com. When you request deletion:

• Your account is locked immediately and any active Mila subscription is canceled.
• After a 30-day grace period (so you can recover the account if you change your mind), your account and associated personal data — clients, appointments, photos, consultations, messages, and settings — are permanently deleted.
• We retain a limited, anonymized record of payment and refund transactions (amounts and processor reference IDs, with no personal identifiers) for as long as required to meet tax, accounting, and legal obligations.

To recover an account within the grace period, contact us at support@milabook.com.

11. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to or restrict processing of your information
• Data portability

To exercise any of these rights, please contact us at support@milabook.com.

12. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
Email: support@milabook.com