Privacy policy

Miletus is operated by HL Tech Consulting, based in Queensland, Australia (“we”, “us” or “our”). This policy explains how we handle personal information when you visit our website, use our learning service or contact us.

We collect your email address, the name you provide, information you choose to share and records created as you learn. We use this information to run and personalise Miletus. We do not sell or rent personal information or use it for advertising. We do not connect to your inbox, calendar, contacts, files or other accounts.

Information we collect

• Invite requests. If you request an invite, we save your email address and the date of your request so we can follow up about access to Miletus.
• Account information. Your email address, the first name requested at signup, any later display-name changes, an account identifier, account timestamps and invitation redemption details. Sign-in uses email codes rather than a password.
• Information you provide. Onboarding answers, selected interests and familiar areas, optional intellectual references and favourite books, assessment and exercise answers, quest ideas and notes, course requests, clarification answers and tutor messages. This includes personal details you choose to mention in free-text responses.
• Learning records. Questions, generated lessons and replies, feedback, grades, knowledge estimates, course enrolments, progress, use of hints or solutions, and refresher schedules and results. These records include dates and activity within the learning service.
• Personal memory. Saved preferences and personal context drawn from your selections and submitted responses, with supporting evidence. How this works, and how to remove a memory, is explained below.
• Technical records. Authentication and session records, errors, request identifiers and AI usage information, such as model, token count, audio duration and cost. Our hosting and authentication providers may also process IP addresses, browser or device information and access logs to deliver and secure the service.
• Web analytics. We use Vercel Web Analytics to understand visits and page views through aggregated statistics, including referring sites, browser and device information and approximate location. It does not use analytics cookies. See Vercel’s analytics privacy information.
• Communications. Messages and contact details you send us when asking for support or making a privacy request, and records of our response.

We do not request payment details, a postal address, a phone number, identity documents or access to your other services as part of signup. We do not use third-party advertising or session-replay scripts. Information you include voluntarily in an answer or support message is still information we receive, so share only what you want processed for your learning or request. Please avoid sensitive information and other people’s private information unless necessary and you have permission to share it.

How we use information

• To create and authenticate your account and administer invitations.
• To assess your starting point, maintain your knowledge map, generate and deliver learning material, answer tutor questions and schedule refreshers.
• To remember relevant context and personalise later questions, recommendations and quests.
• To send sign-in and other service emails, respond to requests and communicate material changes to the service or these policies.
• To investigate problems, prevent abuse, manage usage limits and costs, maintain security and meet legal obligations.
• To understand website traffic and improve the website and service.

You can browse the public website without an account. An email address and the requested signup details are needed to create an account; learning features need the answers and context relevant to those features. Optional questions and voice input are your choice.

AI processing and personal memory

AI providers receive the content and context needed for a request, which may include your answers, conversation history, learning goals, knowledge estimates and relevant saved memory. They return questions, teaching material, feedback or suggested personal context. Automated assessments and recommendations guide your learning; they are estimates and can be wrong. They are not qualifications or verified statements about you.

Personal memory can include experience, interests, learning preferences, projects, practical constraints and facts you volunteer about your family, hobbies or everyday life, even when unrelated to the current lesson. Memory extraction is instructed to use your statements and deliberate choices, not to infer demographic traits or motives. Memory does not itself establish mastery or override your explicit interests.

You can inspect saved facts and their supporting evidence, and remove them, in Settings → Memory. Removing a fact stops its future use from memory. Unfinished course preparation must be refreshed to use your updated context. We keep a limited record to prevent the same source from recreating the removed fact. Original answers, conversations, source records and previously released lessons remain in your learning history; removing a memory does not delete those records or withdraw a request already sent to a provider. New information you submit can support new memories.

We store learning content and private background processing records needed to complete or recover your requests. Those records can contain source text, AI context and results. Our separate AI usage log records operational metadata rather than prompt or answer text.

Voice input

If you choose the microphone and grant browser permission, your recording passes through our server to OpenRouter and its transcription provider, currently OpenAI. We save the returned transcript and transcription reference so you can review and edit the text before submitting an answer. This means transcription text is stored even before you submit it as an answer. We do not save the audio recording in our database. The providers process audio under their applicable terms and retention policies. You can use typed answers instead and revoke microphone permission in your browser.

Service providers and other disclosures

We use the following services to operate Miletus:

• Supabase provides authentication and database storage for account and learning information.
• Vercel hosts the website and application and processes requests and operational logs. It also provides the web analytics described above.
• Resend delivers service emails and receives the recipient address and message content, together with delivery information.
• Trigger.dev hosts background processing for features such as memory and course generation. Its workers access the information needed for that work; scheduling messages and operational logs use identifiers and statuses rather than answer text.
• Particle.ai and OpenRouter provide access to AI models for assessment, teaching, tutoring, personal memory and transcription. Requests are processed by the selected model host, which may be a further provider reached through these services.

Providers receive information needed for their role. AI providers’ retention and any use of inputs or outputs for model improvement depend on their terms and the applicable service settings. For example, OpenRouter describes these differences in its provider data policies.

We may also disclose information where required by law, to protect legal rights or the security of the service, or to professional advisers where necessary. If the business is acquired or reorganised, information may transfer to a successor subject to applicable law and the privacy commitments in this policy. We will provide any notice required by law.

International processing

Our providers operate internationally. Your information may be stored or processed outside Australia, including in the United States. The locations depend on the service and AI provider used; we do not limit all processing to Australia. Overseas privacy laws may differ from those where you live. We remain responsible for our handling of your information and for meeting any applicable obligations relating to overseas disclosures.

Cookies and browser storage

• Authentication cookies keep you signed in. Supabase may split a session across several cookies and refresh them as you use the app. Signing out clears the session cookies. Blocking them may prevent sign-in from working.
• Signup continuation cookie holds a random token so email verification can survive a reload. While you verify, we temporarily store your email and starting answers on our server. The token alone cannot finish signup for a different account.
• Local and session storage remember your theme, onboarding choices, unsent answer and tutor drafts, and interface or request state. Drafts kept only in browser storage are not shared across devices. Notes, requests and answers you save or submit are stored with your account; voice transcription is handled as described above.

We do not use advertising or analytics cookies. You can clear site data in your browser to remove local preferences and drafts; doing so does not delete information already saved to your account.

Security and retention

We use encrypted connections, server-side authorisation and database access controls to protect account information and learning records. Access is limited to operating, supporting and securing the service. No online service can guarantee absolute security.

We retain invite requests for follow-up. To ask us to remove your request, email team@miletus.app from the address you submitted.

We generally retain account and learning records while your account exists so you can resume your learning. Unfinished assessments and requests may retain their history too. To request account deletion, email team@miletus.app from your account address. Requests are handled manually; there is currently no in-app account deletion control. We may need to verify that you own the account before acting.

A pending signup record can be used for up to 24 hours. We remove it after your starting answers are saved, when you explicitly start over, or when expired records are cleared during later signup attempts. If the continuation is no longer available, you can still verify your account and choose your starting areas again.

Account deletion removes your account and associated personal learning records from our active systems, including personal memory and its source and background work records. A minimal invitation record, including the used code, account identifier and redemption time, is retained to prevent reuse. We may retain records needed for legal obligations, security or resolving disputes for as long as those purposes require. Copies can remain in backups until those backups are replaced or expire, and provider logs follow the provider’s retention arrangements.

Your choices, requests and complaints

You can change your display name in profile settings, adjust your interests on the knowledge map and review or remove personal memory. Contact team@miletus.app to request access to or a copy of your personal information, correction, deletion, or to raise a privacy concern. Depending on the law that applies to you, you may also have rights to object to or restrict processing, request portability or withdraw consent where processing relies on consent.

We will assess your request, verify your identity where needed and respond within the period required by applicable law. We aim to respond to privacy complaints within 30 days. If we cannot fulfil a request, we will explain why and the options available to you. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner or the relevant privacy authority where you live, subject to its jurisdiction.

Adults only

Miletus is intended for people aged 18 and over. We do not knowingly provide accounts to children. If you believe a child has provided personal information through an account, contact us so we can investigate and take appropriate steps to remove it.

Changes to this policy

We will update this policy and the date above when our practices change. We will notify account holders of material changes by email or a prominent notice in the service, before they take effect where practicable, and obtain consent where required by law.

Contact

HL Tech Consulting, Queensland, Australia. Email team@miletus.app. Our terms of service explain the conditions for using Miletus.