Millepas — Privacy Policy

Effective: October 16, 2026

Millepas is made by Enso Labs LLC. This page explains, in plain words, what information the app uses and how.

In short

• Your steps never leave your iPhone. Step counts, motion data, your history, goals and your Apple Health data stay on your phone. They are never sent to us, and never used for ads.
• No account, no ads, no tracking, no analytics, no crash-reporting or third-party SDKs.
• Counting, history, widgets, goals and reminders work without internet.
• The one exception is optional and part of Plus: a photo you choose to scan may be sent to our scan service to be read. We don't save the photo or the result. The details are below.

What stays on your iPhone

Motion and steps. Millepas counts your steps from the iPhone's motion sensors, with your Motion & Fitness permission. All the counting happens on your phone.

Your history, goals and settings. Your daily steps, walks, the workouts you add or scan, streaks, your goal, stride length, body weight, reminders and other preferences are stored only on your phone. Deleting the app deletes them.

Apple Health (optional). If you connect Apple Health, Millepas reads your steps (to add steps from your Apple Watch and to show history from before you installed the app), flights climbed, walking and running distance, workouts, body weight and height (to estimate calories and stride). It writes to Apple Health only the workouts you save after reviewing them (a walk, a workout you add, or a scan), with their time, distance, active energy and only the steps your phone missed. You choose what to allow in the Health permission sheet and can change it at any time in the Health app. Your Health data is never sent to us or anyone else, and never used for advertising or marketing.

Camera and photos. The camera is used only when you scan a workout screen or a handwritten log, and the photo picker gives the app only the photo you pick. Apple's text recognition reads the photo on your phone first. The app doesn't keep the photo after the scan.

Widgets and the Live Activity. The widgets and the Live Activity of a Walk show numbers stored on your phone, shared only between the app and its own widgets.

Notifications. Reminders (the evening nudge, and the reminder before a free trial ends) are scheduled on your phone. No server and no push notifications are involved.

Export. Settings → Export CSV makes a file of your steps and workouts. It goes only where you send it with the iPhone share sheet.

Plus: reading a photo with our scan service

Reading photos is part of Plus; free users can try a demo scan and one real scan. When you scan a photo:

1. Millepas first reads it on your iPhone.
2. Only if the on-device reading isn't good enough, or if you tap Read it again with AI, the photo is sent to our scan service (millepas-api.eulerai.net, on servers in the United States).
3. Our service passes it to Google's Vertex AI (a Gemini model, in Google's United States region) to read the numbers, and sends them back to your phone. Nothing is saved to Apple Health until you have checked the numbers and tapped save.

What is sent with a scan: the photo, resized and re-encoded without its location or other metadata; the text your phone already read from it; the photo's date, your time zone, your language and region setting and your preferred distance unit (so dates and units are read correctly); the app's version; and the security information in the next section. No step counts, Health data, name, email or contact details are sent.

What we keep: we don't save the photo or what was read from it. Our server's logs hold no content: only the time, an anonymised caller tag, the result status, how long it took, the model and the number of tokens used.

Google: Google processes the photo as our service provider, under its terms for Vertex AI, and doesn't use it to train its models. Under Google's default settings, Google may keep data for a short time: in short-term caching (up to 24 hours) and in logs it keeps to detect abuse.

Protecting the scan service

To prevent abuse and keep the service affordable, each scan also carries:

• An App Attest key id: a random key that your iPhone creates for this installation of the app, which proves that a request comes from the genuine app. It doesn't identify you: it isn't linked to your name, your Apple ID or your device's serial number. Our server keeps the key's public part, a counter, and how many free scans it has used (one free scan per installation).
• With Plus, your App Store transaction, signed by Apple, which proves your purchase. Our server stores only a one-way coded (hashed) form of its transaction number, with a monthly scan count (Plus includes up to 300 scans a month) and whether the purchase is still active. To know that, it asks Apple whether the purchase was refunded or has ended.

This information is used only to run the scan service. It isn't linked to your identity and isn't used to track you. In the App Store's privacy details this appears as Photos, Purchase History and Device ID, used for app functionality, not linked to you and not used for tracking.

Purchases

Plus is bought through Apple's App Store. Apple handles the payment; we never see your payment details, your name or your Apple ID.

What Apple does

You download the app from the App Store, under Apple's privacy policy. If you have turned on "Share With App Developers" in iPhone Settings, Apple may give us anonymous crash reports and aggregate usage statistics. Apple collects these, not the app, and they don't identify you.

Your history is stored on your iPhone. If you back up your iPhone (to iCloud or a computer), Millepas's data may be included in that backup, like any other app's data. Apple handles backups; we can't see them.

iCloud backup (optional, off until you turn it on). In Settings you can turn on iCloud backup. Your step history and saved workouts are then kept in your own private iCloud account through Apple's CloudKit, and appear on your other iPhones signed in to the same account. Your settings and calibration stay on each iPhone. This data is stored by Apple in your iCloud, not by us: we can't read it. Turn the option off to stop syncing; to remove what's stored, use iPhone Settings → your name → iCloud → Manage Account Storage.

Children

Millepas has no accounts and collects no personal information from anyone, including children.

If you email us

If you email us, we use your address and message only to reply and to fix problems in the app. We don't sell or share them. Ask us to delete them and we will.

This website

This website uses no cookies, no scripts and no analytics, and it loads nothing from other sites. It is hosted by Cloudflare, which, like any web host, may keep standard server logs (such as IP address, browser type and the page requested) for security and operation. We don't use them to identify or track anyone.

Changes

If this policy changes, we will post the new version here with a new date. If what leaves your phone ever changes, that will be stated here and in the App Store privacy details before it happens.

Contact

Enso Labs LLC · euleraibot@gmail.com