Privacy Policy

The iOS and Android app

The bundled app has no account system, advertising, analytics requests, or visitor-counter requests. Themes are stored on your device. George answers typed questions locally and keeps the conversation in memory until you close it. Native voice input and identity-document collection are unavailable.

The public website

The website loads Umami analytics and an Abacus visit counter. Requests to these services expose normal connection information such as your IP address and browser information to the service provider. The counter also uses a local flag to limit repeat counting; it is an approximate browser count, not a verified count of people. Hosting providers process requests to serve the site.

Browser voice input is optional and may send audio to your browser or operating-system speech provider. Use typed input if you do not want to use that service.

Milo accounts

A Milo account is optional; Milo works the same without one. If you choose Continue with Google or Continue with email, the account is held by Supabase, the service we use for sign-in. It stores your email address, your name and profile picture link if Google provides them, which sign-in method you used, and when you signed in. Google shares only your name, email address and profile picture with Milo; Milo never sees your Google password. Email sign-in sends a one-time code to the address you type. Continue with StepMail is handled by ShouldBe's own StepMail server, which gives Milo only your StepMail name and address, never your password or your mail.

Signing in uploads nothing else: your bookmarks, history, downloads and settings stay on your Mac. Milo keeps its sign-in encrypted with your Mac's keychain. To delete your Milo account, email verifiedshouldbe@gmail.com from the address you signed in with.

Email and external links

Contact, feedback, and project-update links open an email draft. Nothing is delivered until you send it. If you send an email, your email provider and our Gmail inbox process your address and message so we can respond. Requests do not reserve a waitlist position. External links open third-party services with their own privacy practices.

Storage and deletion

Current versions do not store waitlist email addresses or identity documents. On upgrade, legacy local waitlist entries and simulated verification flags are removed. Clear website data or remove the app to clear local preferences. To request access to or deletion of correspondence, email verifiedshouldbe@gmail.com. We retain correspondence while needed to handle your request and any applicable record-keeping obligations.

No identity verification

ShouldBe does not authenticate government documents, verify age, or perform biometric matching. Do not send identity documents through the contact form or email.