Privacy Notice

Last updated: November 1, 2026

This privacy notice for Miloop (“we,” “us,” or “our”) describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:

• Visit our website at miloop.app, or any website of ours that links to this privacy notice;
• Download and use our applications — the Miloop app for Mac, the Miloop extension for Chrome, and the Miloop extension for Visual Studio Code — or any other application of ours that links to this privacy notice; or
• Engage with us in other related ways, including customer support, communications, or other interactions.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@miloop.app.

Summary of Key Points

This summary provides key points from our privacy notice, but you can find more details about any of these topics in the sections below.

What personal information do we process?
When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. This may include your display name and profile picture, account identifiers, the supported work you have open (such as a GitHub pull request or repository, or a Linear issue), presence and availability information, information you choose to share through collaboration features, and — if you connect one — your GitHub account identifier and username.

Do we process any sensitive personal information?
We process authentication information necessary to provide and secure your account, and, if you connect GitHub, a GitHub authorization that we store encrypted. We do not use sensitive personal information to infer characteristics about you.

Do we receive any information from third parties?
Yes, in limited ways: from our sign-in provider when you sign in, and from GitHub if you choose to connect your GitHub account.

How do we process your information?
We process your information to provide, improve, and administer our Services, communicate with you, enable collaboration between users, maintain security, prevent fraud or misuse, and comply with applicable law. We may also process your information for other purposes with your consent.

In what situations and with which types of parties do we share personal information?
With other Miloop users when you are around the same or related work, and with the service providers named in this notice. See section 4.

Do we sell your personal information?
No. We do not sell your personal information.

Do we record audio conversations?
No. Audio may be processed in real time when you use audio communication features, but Miloop does not record or store the content of those conversations.

How do we keep your information safe?
We have organizational and technical processes and procedures designed to protect your personal information. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be completely secure.

What are your rights?
Depending on where you are located, applicable privacy law may provide you with certain rights regarding your personal information.

How do you exercise your rights?
You can delete your account in the Miloop app for Mac, and exercise other rights by contacting us at privacy@miloop.app. We will consider and act upon requests in accordance with applicable data protection laws.

Table of Contents

1. What information do we collect?
2. How do we process your information?
3. What legal bases do we rely on to process your personal information?
4. When and with whom do we share your personal information?
5. What is our stance on third-party websites?
6. Do we use cookies and other tracking technologies?
7. How do we handle third-party logins and connected accounts?
8. Is your information transferred internationally?
9. How long do we keep your information?
10. How do we keep your information safe?
11. Do we collect information from minors?
12. What are your privacy rights?
13. Controls for Do-Not-Track features
14. Do United States residents have specific privacy rights?
15. Do other regions have specific privacy rights?
16. Chrome Web Store Limited Use
17. Do we make updates to this notice?
18. How can you contact us about this notice?
19. How can you review, update, or delete the data we collect from you?

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register for the Services, use features of the Services, contact us, request support, or otherwise interact with us.

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use.

The personal information we collect may include:

• your display name — taken from the name on your sign-in account when one is available, or entered by you;
• your profile picture, as a link to an image hosted by our sign-in provider, GitHub, or Google;
• account identifiers;
• information you provide when communicating with us; and
• other information you choose to provide.

You sign in with your email address, or another sign-in method our sign-in provider offers, through our sign-in provider, WorkOS. Miloop's own systems do not store your email address.

All personal information that you provide to us must be true, complete, and accurate, and you should notify us of any changes to such personal information.

Information collected when you use the Services

In Short: We process limited information about the supported work you have open in order to provide Miloop's presence and collaboration features.

Work you have open. When you use Miloop with supported work services, we process identifiers of the supported work you have open, such as a GitHub pull request, issue, or repository (for example, github:owner/repository/pull/123) or a Linear issue. These identifiers can include the names of private repositories. We process them for every supported page you have open in Chrome, including tabs that are not in front, and, while Visual Studio Code is in front, for the GitHub repository open in it.

GitHub work. We record that you are on GitHub work only after GitHub has confirmed that you can access its repository, which requires you to connect your GitHub account (see section 7). Until then, the only record Miloop keeps is the question it puts to GitHub about that repository, and only if you have connected GitHub. If you have not connected GitHub, Miloop records nothing about the GitHub work you have open.

Related work. On a GitHub pull request, Miloop reads the links to issues in the pull request's sidebar and description, so that people on a pull request and on the issues it addresses can find each other. We store the link between the pull request and those issues, but only when it is reported by someone GitHub has confirmed can access the repository.

Presence and availability. We process your availability setting (Active, Busy, Focus, or Offline), whether Miloop is in front of you, and which supported work you are on.

Collaboration features. We process the interactions you start or receive — waves, knocks, requests to join a conversation, and Points (which identify a pull request and one comment on it) — and your participation in conversations. While you share your pointer during a conversation, Miloop sends its position over the shared comment, as a fraction of that comment's area, to the other people in the conversation in real time; pointer positions are not stored.

This information allows Miloop to determine when users are around the same or related work and provide the collaboration features you choose to use.

Miloop is not designed to collect the contents of your work. We do not collect source code, pull request diffs, file contents, file names, branch names, keystrokes, screenshots, page text, or your general browsing history.

Visual Studio Code. The Miloop extension for Visual Studio Code reads only the address of your repository's origin remote, reduces it to the GitHub owner and repository name, and sends that, with whether the window is focused, to the Miloop app on your own computer.

Audio information

If you choose to use an audio communication feature, we request access to your microphone when a conversation starts and process live audio as necessary to provide that feature.

Miloop does not record or store the content of audio conversations.

You can control microphone access through your device or operating system settings.

Information stored on your device

The Miloop app for Mac keeps a small amount of information on your Mac: your sign-in session, encrypted with your macOS Keychain, your settings for notifications and conversations, and a log of the app's own warnings for troubleshooting, which is never sent to us. The Miloop extension for Chrome keeps your availability setting and, for the current browser session only, a short-lived sign-in token and your display name. Miloop shows notifications through macOS, which may display names and the work they refer to in Notification Center.

Information automatically collected

In Short: Some information may be collected automatically when you visit, use, or navigate the Services.

We or the service providers that support our Services may automatically process certain technical information when you visit, use, or navigate the Services.

This information does not necessarily reveal your specific identity but may include information such as:

• Internet Protocol (IP) address;
• browser and device characteristics;
• operating system;
• application or browser version;
• timestamps;
• connection information; and
• other technical or diagnostic information.

For example, the Miloop app for Mac checks for updates at downloads.miloop.app when it starts and every few hours; these checks include no account information. Miloop does not include analytics, telemetry, or crash-reporting software.

This information is primarily used to maintain the security and operation of our Services, troubleshoot problems, prevent fraud or misuse, and maintain the reliability of our Services.

Information collected from other sources

In Short: We receive limited information from our sign-in provider and, if you connect it, from GitHub.

When you sign in, our sign-in provider tells us your name and profile picture where your account has them.

If you choose to connect a GitHub account, we receive your GitHub account identifier and username, and an authorization that lets Miloop ask GitHub whether you can access a repository. Miloop's GitHub App requests read-only access to repository metadata and nothing else. See section 7.

We do not purchase personal information from data brokers.

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, maintain security, prevent fraud or misuse, and comply with applicable law. We may also process your information for other purposes with your consent.

We may process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts.
• To deliver and facilitate delivery of the Services.
• To provide presence and availability features.
• To help users determine when other users are around the same or related supported work.
• To check with GitHub that people are shown to each other on GitHub work only when both may access the repository.
• To enable user-to-user communications and collaboration.
• To provide audio communication and other collaboration features you choose to use.
• To respond to user inquiries and offer support.
• To send administrative information to you.
• To protect our Services.
• To prevent fraud, abuse, or misuse.
• To understand how our Services are used.
• To improve our Services and user experience.
• To comply with legal obligations.
• To protect the rights, property, or safety of our users, Miloop, or others.
• For other purposes with your consent.

We do not use Miloop to create employee productivity scores.

We do not sell your personal information.

We do not use your personal information for personalized or targeted advertising.

3. What Legal Bases Do We Rely On to Process Your Personal Information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law.

If you are located in the European Economic Area (“EEA”), United Kingdom (“UK”), or another jurisdiction where applicable law requires a legal basis for processing, we may rely on the following legal bases:

Consent. We may process your information if you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time.

Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services.

Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms.

These interests may include operating, maintaining, securing, and improving our Services, understanding how our Services are used, preventing fraud or misuse, and responding to users.

Legal Obligations. We may process your information where we believe it is necessary to comply with our legal obligations, cooperate with law enforcement or regulatory authorities, exercise or defend our legal rights, or disclose information as required by law.

Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of another person.

4. When and With Whom Do We Share Your Personal Information?

In Short: We share information with other Miloop users as the features require, and with service providers that help us operate our Services.

Other users

When you are around the same or related work as other Miloop users, they can see your display name, profile picture, availability, and the supported work you are on. On GitHub work, Miloop shows people to each other only when GitHub confirms that both of them can access the repository, which requires each of them to have connected GitHub. Work in Linear is not yet checked this way: other Miloop users on the same or related Linear issue can see you there.

When you wave, knock, point, or join a conversation, the people involved see your display name and profile picture, and the people in a conversation hear its audio and see your shared pointer.

Profile pictures are images hosted by our sign-in provider, GitHub, or Google. When another user's app shows your picture, it loads the image from that host, which can see that user's IP address.

Vendors and service providers

We share your information with third-party vendors and service providers that perform services for us or on our behalf and require access to information to perform that work.

Service providers currently used in connection with Miloop include:

• WorkOS, which provides account registration and authentication services;
• Convex, which provides cloud infrastructure and data storage services;
• LiveKit, which provides real-time communication services for conversations;
• GitHub, which we ask whether you can access a repository when you have connected your GitHub account;
• Cloudflare, which hosts our website and the downloads and updates for the Miloop app for Mac; and
• Microsoft, which provides our email, including privacy@miloop.app.

The Miloop extension for Chrome is distributed through the Chrome Web Store. The Miloop extension for Visual Studio Code is distributed through the Visual Studio Marketplace and Open VSX, and the Miloop app for Mac installs it from the Visual Studio Marketplace, or from a copy it carries when the Marketplace can't provide it. Google, Microsoft, and the Eclipse Foundation, which runs Open VSX, process information about those installations under their own terms.

We expect service providers that process personal information on our behalf to handle that information only as necessary to perform services for us and in accordance with applicable contractual and legal obligations.

We do not share your personal information with advertising networks or data brokers.

Business transfers

We may share or transfer your information in connection with, or during negotiations concerning, any merger, financing, acquisition, sale of company assets, reorganization, or similar business transaction.

Legal requirements

We may disclose your information if we reasonably believe disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request.

We may also disclose information where necessary to protect the rights, property, or safety of Miloop, our users, or others.

5. What Is Our Stance on Third-Party Websites?

In Short: We are not responsible for the safety of information that you independently provide to third-party websites, services, or applications.

The Services may link to, integrate with, or operate alongside third-party websites, online services, or applications that are not affiliated with or controlled by us.

We do not make any guarantees regarding such third parties and are not responsible for the content, privacy practices, or security practices of third-party websites, services, or applications.

Information collected independently by third parties is governed by their own privacy notices and practices.

We encourage you to review the privacy policies of any third-party services you use.

6. Do We Use Cookies and Other Tracking Technologies?

In Short: Miloop does not currently use advertising cookies or behavioral tracking technologies in its applications.

Our applications do not currently use advertising cookies, tracking pixels, or session replay technologies for behavioral advertising.

We may use cookies or similar technologies on our websites where necessary to operate, secure, maintain, or improve those websites or Services.

We do not currently use your personal information for targeted advertising.

If our use of cookies or similar tracking technologies materially changes, we will update this privacy notice and provide any additional notices or choices required by applicable law.

7. How Do We Handle Third-Party Logins and Connected Accounts?

In Short: If you sign in with a third-party account or connect GitHub, we receive certain information about you.

Signing in

You sign in through WorkOS, with your email address or another sign-in method it offers. We receive your name and profile picture where available, and an identifier for your account. We do not store your email address.

Connecting GitHub

Connecting a GitHub account is optional, but without it Miloop does not show you, or show you anyone, on GitHub work. When you connect one, Miloop's GitHub App asks you to authorize it on GitHub. It requests read-only access to repository metadata and nothing else: it does not give Miloop access to the contents of your code, issues, or pull requests, and it cannot change anything.

We receive and store:

• your GitHub account identifier and username; and
• the authorization GitHub issues, which we store encrypted and use only to ask GitHub whether you can access a repository you are working on.

When you open GitHub work, Miloop asks GitHub whether you can access that repository, and keeps GitHub's answer for a short time (see section 9). We record the repository's name and GitHub identifier with the answer; we do not record anything else about the repository.

You can disconnect GitHub at any time in the Miloop app's settings. Disconnecting deletes your GitHub details and authorization from Miloop and asks GitHub to revoke the authorization. You can also revoke it yourself in your GitHub settings.

We do not control, and are not responsible for, how third-party account providers independently collect, use, or share your personal information.

8. Is Your Information Transferred Internationally?

In Short: We may transfer, store, and process your information in countries other than your own.

Miloop is based in the United States, and service providers that support our Services may process information in the United States and other countries.

If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, or processed in countries that may have data protection laws different from those in your country.

Where required by applicable law, we will take appropriate measures to protect personal information transferred internationally.

9. How Long Do We Keep Your Information?

In Short: Presence and collaboration information is temporary; account information is kept until you delete your account.

We keep your information for as long as reasonably necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law. Specifically:

Some information may remain for a limited period in backups, logs, or other systems our service providers operate for security, legal compliance, or disaster recovery.

When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize such information or, if immediate deletion is not possible, securely store it and isolate it from further processing until deletion is possible.

10. How Do We Keep Your Information Safe?

In Short: We aim to protect your personal information through reasonable organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational measures designed to protect the security of personal information we process. For example, your sign-in session on your Mac is encrypted with your macOS Keychain, and a GitHub authorization is encrypted before it is stored.

However, no electronic transmission over the Internet or information storage technology can be guaranteed to be completely secure.

Although we take steps designed to protect your personal information, we cannot guarantee that unauthorized third parties will never be able to defeat our security measures or improperly collect, access, use, or modify your information.

11. Do We Collect Information From Minors?

In Short: Our Services are not directed to children.

We do not knowingly solicit or collect personal information from children in violation of applicable law.

If we learn that we have collected personal information from a child in circumstances where legally required consent was not obtained, we will take reasonable measures to delete that information.

If you become aware of any information we may have collected from a child improperly, please contact us at privacy@miloop.app.

12. What Are Your Privacy Rights?

In Short: In some regions, you have rights that allow you greater access to and control over your personal information.

Depending on applicable data protection laws, your rights may include the right to:

• request access to your personal information;
• obtain a copy of certain personal information;
• request correction of inaccurate information;
• request deletion of your personal information;
• restrict or object to certain processing;
• request data portability;
• withdraw consent where processing is based on consent; and
• lodge a complaint with an applicable data protection authority.

These rights may be subject to limitations and exceptions under applicable law.

We will consider and act upon valid requests in accordance with applicable data protection laws.

Withdrawing your consent

If we are relying on your consent to process personal information, you have the right to withdraw your consent at any time.

Withdrawal of consent will not affect the lawfulness of processing that occurred before your withdrawal.

Account information

You can delete your account at any time in the Miloop app for Mac (Settings → Account). Deleting your account immediately removes your display name, profile picture, account identifiers, presence, waves, knocks, Points, and connected GitHub account from Miloop, and asks GitHub to revoke Miloop's authorization. If you are in a conversation with two or more other people at the time, that conversation continues without you, and a record that you started or were invited to it remains, without your name, until it ends. Our sign-in provider keeps its own record of your sign-in account under its own terms.

The Miloop app does not yet let you change your display name or profile picture. To change either, contact us at privacy@miloop.app.

If you have questions or comments about your privacy rights, you may email us at privacy@miloop.app.

13. Controls for Do-Not-Track Features

Most web browsers and some operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal a preference not to have certain online browsing activities monitored and collected.

At this time, no uniform technology standard for recognizing and implementing DNT signals has been finalized.

As such, we do not currently respond to DNT browser signals or other mechanisms that automatically communicate your choice not to be tracked online.

If a standard for online tracking is adopted that we are required to follow in the future, we will inform you about that practice in a revised version of this privacy notice.

14. Do United States Residents Have Specific Privacy Rights?

In Short: If you are a resident of certain U.S. states, you may have specific rights regarding your personal information.

Depending on where you live and subject to applicable exceptions, you may have the right to:

• confirm whether we process your personal information;
• access personal information we maintain about you;
• correct inaccuracies in your personal information;
• request deletion of your personal information;
• obtain a portable copy of certain personal information;
• opt out of the sale of personal information;
• opt out of targeted advertising;
• opt out of certain profiling; and
• appeal certain decisions regarding privacy requests.

We do not sell personal information.

We do not currently use personal information for targeted advertising.

We do not use sensitive personal information for the purpose of inferring characteristics about you.

We will not discriminate against you for exercising privacy rights provided by applicable law.

We may need to verify your identity before processing certain requests.

Where permitted by applicable law, you may also designate an authorized agent to submit a request on your behalf.

To exercise a privacy right that is not available directly through your account, contact us at privacy@miloop.app.

15. Do Other Regions Have Specific Privacy Rights?

In Short: You may have additional rights based on the country or region where you live.

Depending on applicable law, you may have additional rights regarding access, correction, deletion, restriction of processing, data portability, objection to processing, withdrawal of consent, or complaints to a supervisory authority.

We will consider and respond to valid requests in accordance with applicable law.

To exercise a privacy right that is not available directly through your account, contact us at privacy@miloop.app.

16. Chrome Web Store Limited Use

Miloop's use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Information handled through the Miloop browser extension is used only as necessary to provide or improve Miloop's disclosed user-facing features, maintain the security and reliability of those features, comply with applicable law, or protect against fraud and abuse.

Miloop does not use or transfer information obtained through the browser extension for personalized advertising, creditworthiness or lending purposes, or sale to data brokers or other information resellers.

17. Do We Make Updates to This Notice?

In Short: Yes. We may update this notice as necessary to reflect changes to our Services, practices, or legal obligations.

We may update this privacy notice from time to time.

The updated version will be indicated by an updated “Last updated” date and will become effective when it is made available.

If we make material changes to this privacy notice, we may notify you by prominently posting a notice of the changes or through another appropriate method.

We encourage you to review this privacy notice periodically to stay informed about how we process and protect your information.

18. How Can You Contact Us About This Notice?

If you have questions or comments about this notice or our privacy practices, you may contact us at:

Miloop
United States
privacy@miloop.app

19. How Can You Review, Update, or Delete the Data We Collect From You?

Depending on applicable law, you may have the right to request access to the personal information we collect from you, request that we correct that information, obtain a copy of it, or request that we delete it.

You can delete your Miloop account, and disconnect GitHub, in the Miloop app for Mac. To request a copy of your information, a correction, or anything that cannot be done in the app, contact us at privacy@miloop.app.