Legal
Last Updated: October 15, 2026 · Original Effective Date: April 26, 2026
🔒 The short version: Camera guidance and Scene Analyzer run on your device, without uploading your photos for cloud analysis. Account backup, subscription verification, usage analytics and crash diagnostics use the services described below. We do not sell your personal data.
On this page
Miles Studios London ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how MILES FLOW ("the App") collects, uses, stores, and protects your information.
Features and privacy controls can differ between iPhone, Android and app versions. The October 15, 2026 update corrects descriptions of existing cloud account, subscription and diagnostic processing; it does not enable new data collection or change your device permissions.
The App accesses your camera and photo library through your device's permission and photo-selection controls. Camera guidance and scene analysis occur locally using on-device camera and vision frameworks. We do not upload your camera feed or pose photos for cloud analysis or include your gallery photos in Firebase progress backups. If you explicitly export, share or send a photo to support, the service or recipient you choose receives it.
Where a location-based feature is available, device location access is controlled by your operating system's permission settings. Android 1.10.0 does not request precise or coarse device-location permission. Separately, Google Analytics can derive an approximate region from a masked IP address when the App connects to its services; this is different from GPS access.
Firebase Analytics receives app interactions such as sessions, feature use, paywall views, purchase/restore events and photo-save events. These events do not contain the captured photos. Firebase Crashlytics receives crash reports, error details and diagnostic context to help us investigate reliability problems. These services use app-instance or installation identifiers and device/app information; the data is pseudonymous, not guaranteed to be anonymous. iPhone versions with an analytics setting let you control usage analytics in the App. Android 1.10.0 does not currently expose a separate in-app analytics toggle; contact us for privacy requests. Turning off usage analytics does not necessarily turn off account, subscription or crash processing.
The App's service providers process device model, operating system and app versions, app-instance/installation identifiers, connection information and relevant error details for analytics, compatibility, support and security. These identifiers can distinguish an installation and may be associated with other account or service records; they are not a name or payment-card number, but should not be described as fully anonymous.
Firebase Authentication manages account sign-in. If you choose Apple or Google sign-in, the provider may supply your name, email or Apple relay email, provider identity and a Firebase user identifier. The App does not receive your Apple or Google password. Guest mode can also create a temporary anonymous Firebase account with a unique identifier; it is not a promise that no identifier is created. Restoring a linked cloud account requires signing in to that same account.
Camera settings and local photo tools use device storage. When the App synchronises account data, Firebase Cloud Firestore stores records under the account's user identifier, including profile/quiz information, usage and practice counters, pose mastery, XP and awards, lesson progress, favorites and saved pose sets. Linked accounts use this backup to restore progress across devices. Account-deletion requests also store an account reference, request time, source and status. Uninstalling the App does not delete these cloud records.
If you enable a public pose profile, its published badge count and mastered pose codes can be read by others. If you create a share code, people with the code can retrieve the shared set. Private account progress is not made public merely by signing in. If you contact support, we receive the message, contact information and any attachments you choose to send, for handling that request.
MILES FLOW uses your device's standard camera (front and back) to provide real-time posing guidance, Scene Analyzer recommendations, and photo capture. The app uses on-device camera and vision frameworks to help with pose guidance, lighting, scene type, people count, and framing.
🛡️ Camera guidance and Scene Analyzer happen on-device. No image, video, or face data leaves your phone for cloud analysis. You can revoke camera access at any time in your device privacy settings.
We use collected information to provide and improve the App's features, analyze App performance and fix bugs, provide customer support, ensure App security, and comply with legal obligations.
We do NOT:
MILES FLOW is designed privacy-first:
Saving a photo to your phone is different from uploading it for analysis. Miles Flow does not perform cloud photo analysis. Device photo-library backup and services you explicitly share to are governed by your choices and those services' policies.
Settings, cached progress and local photo tools use private app storage and platform storage services. Authentication SDKs manage their session credentials; iPhone features also use Keychain where implemented. Cloud account data is stored in the shared Firebase project used by iPhone and Android. Service connections use transport encryption and access controls, but no system can guarantee absolute security.
Cloud account records are retained to provide the account and restore its progress until a verified deletion request is fulfilled or another applicable retention requirement applies. Deletion is handled manually, not instantly. We respond to privacy requests within 30 days and explain verification delays and any records that must be retained for financial, security or legal reasons. Request/support records are kept only as needed for handling the request and relevant retention obligations.
Uninstalling does not remove cloud backups, cancel a subscription, erase photos in your device library or guarantee removal of every operating-system backup or offline copy on another device. Use the account-deletion process below for cloud account removal. We will handle any reportable data incident in accordance with applicable requirements.
Payments are processed by the App Store or Google Play. Miles Flow does not receive your full payment-card number or bank-account details. RevenueCat processes purchase/subscription records, product and transaction identifiers, entitlement state and relevant device/app information to validate subscriptions, unlock features and support restoration. The App associates RevenueCat identity with the Firebase account when linked. Purchase and subscription events are also used for app analytics. This is service-provider processing, not a claim that purchase records never leave the store. We do not sell your purchase data.
Deleting a Miles Flow account does not cancel an Apple/Google subscription or create a refund. Subscription management, store transaction retention and applicable RevenueCat deletion handling are separate from Firebase account deletion.
The App integrates with a small number of third-party services:
We do not share your personal information with third parties except as described in this policy or as required by law.
Depending on your location, you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to or withdraw consent for processing. Contact the monitored mailbox info@milesflow.app. We respond within 30 days and verify ownership before erasing account data. Never send a password, sign-in code or payment-card number.
Delete your account: Follow the Miles Flow account-deletion process. Android versions offering Settings > Account > Delete Account > Send request create a private request and show a receipt only after server acknowledgement. The receipt is not confirmation that deletion has finished. iPhone users, older Android versions and people without the App can email us through that page without reinstalling or subscribing.
After verification, manual fulfilment removes the login and associated Firebase profile/progress, awards, favorites, saved sets and owned share codes for that account. Where applicable, service-provider requests and legitimately retained records are handled separately. The same linked cloud account is used across iPhone and Android, so deletion affects both platforms. Gallery photos, Apple/Google identities and store subscriptions are not removed. Older app versions and other devices can retain offline copies; cloud deletion is not a remote wipe of every device.
You can revoke camera, photo-library and location permissions in device settings. Usage-analytics controls depend on app version, as explained above. We will not discriminate against you for exercising your privacy rights.
Miles Studios London is based in London, United Kingdom. If you are located outside the UK, please note that your data may be processed in the UK or other countries. We ensure appropriate safeguards are in place for international transfers and comply with applicable data protection laws, including GDPR for EU users.
If you are in the EU/EEA, your data is protected by GDPR regardless of where it is processed.
The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at info@milesflow.app. We will handle the request promptly after appropriate verification.
The App does not use your photos for advertising or perform cross-app or cross-website tracking. Local storage supports preferences and cached data, while the account, subscription and diagnostic services described above use their own identifiers and network connections. Local storage is not a promise that all app data stays on the device.
Our website uses only essential cookies required for the site to function (e.g., remembering your cookie consent choice). We may use anonymous analytics cookies if you opt in via the cookie banner. You can manage cookies at any time via the cookie preferences link in the footer.
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this policy and posting a notice in the App. Material changes become effective 30 days after notification. Your continued use of the App after the effective date constitutes acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
For EU/UK users: If you have concerns about how we handle your data, you have the right to lodge a complaint with your local data protection authority:
We will respond to your inquiry within 30 days (or as required by applicable law).