Privacy Policy
Effective September 21, 2026 · Last updated September 25, 2026
This explains what the Milo Coffee Company app and website collect, why we collect it, who else sees it, and how to get it deleted. We have tried to write it in plain English rather than legal boilerplate.
Milo Coffee Company LLC ("Milo", "we", "us") runs a mobile coffee cart in coastal North Carolina, the Milo app, and this website.
The short version. We collect what we need to run your account, answer your booking requests, and keep track of your rewards stamps. We never sell your information, and we do not use advertising trackers. Card numbers never reach us — they go straight to Stripe.
What we collect
| What | When | Why |
|---|---|---|
| Email address and password | When you create an account | To sign you in. Passwords are stored scrambled and cannot be read by us. |
| Your name, and your phone number if you give one | At sign-up, or when you edit your profile | So we know who we are talking to. |
| Event details — contact name, email, phone, the address of the event, date and time, guest count, and any notes you add | When you request a booking | To quote your event, turn up at the right place, and reach you if plans change. |
| Your stamp count and any free drinks owed | When staff scan your code at the cart | To run the rewards card. |
| Deposit amount and whether it was paid or refunded | When you pay a deposit | To know an event is held. We never see or store your card number — see below. |
| Page visited, the site or link you arrived from, your country, and whether you were on a phone or a computer | When you visit this website | To know roughly how many people find us, and whether our Instagram link is working. No cookies and no IP addresses are stored, so this cannot be traced back to you. |
Card payments
Deposits are handled by Stripe. When you pay, your card details go directly to Stripe and never pass through our app or our database. We receive only the amount, whether it succeeded, and a reference number. Stripe also records how its payment screen is used, to run and improve its payment service. Stripe handles all of that under its own privacy policy.
The camera
The app can use a phone camera in one place: so our staff can scan a customer's rewards code at the cart. It reads the code and nothing else — no photo is taken, saved, or sent anywhere. If you are a customer, the app never asks for your camera.
Who else handles your information
We keep the list of companies involved as short as we can. Each one only receives what it needs to do its job:
- Supabase — stores accounts, bookings, and rewards.
- Stripe — processes deposits and refunds.
- Google — delivers our emails, since we send from a business Gmail address.
- Cloudflare — serves this website and holds the anonymous visit counts.
- Apple — distributes the app.
We do not sell your personal information, and we never have. We do not share it for advertising. We would only hand it to anyone else if the law required it.
How long we keep it
Account details and rewards stay while your account is open. Booking records are kept for up to seven years after the event, because they are business records we may need for tax and accounting. Website visit counts hold nothing that identifies a person and are kept as long as they are useful.
Deleting your account
You can delete your account yourself, at any time, from inside the app: Account → Delete account. It takes effect immediately.
Deleting your account removes your sign-in, your profile, your rewards stamps and any free drinks you haven't used, and your booking history.
Two exceptions. If you have an event still coming up, you'll be asked to cancel it first — any deposit you paid is refunded automatically when you do. And where you paid a deposit, we keep a basic record of that payment — the date, the amount and the name on it — because it is a business record we need for tax. Your phone number, email address and the event address are erased from it. Payment records held by Stripe are subject to Stripe's own retention rules.
If you can't get into the app, email milocoffeecompany@gmail.com from the address on the account and we'll delete it for you within 30 days.
Your choices
- See what we hold. Email us and we will tell you.
- Correct it. Your name and phone can be changed in the app under Account. For anything else, email us.
- Delete it. In the app under Account → Delete account, as above.
Depending on where you live you may have additional rights under laws such as the CCPA or GDPR. Email us and we will honor them.
Children
The Milo app is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has created an account, email us and we will remove it.
Changes to this policy
If we change how we handle your information, we will update this page and change the date at the top. Significant changes will be notified in the app.
Contact
Questions about any of this, or about your information, go to milocoffeecompany@gmail.com and a person will answer.