Privacy policy

4 November 2026

milim is an app for learning to read Hebrew, run as milim (milimapp.com). This page says what milim keeps about you, what each piece is for, who else handles it, and how to delete your account.

What you give when you sign up

• Your email address. You sign in with it. It is for signing in, for a password-reset link if you ask for one, for a link to confirm the address, and for study reminders if you say yes to them.
• A name to show in the app, anything you like up to 30 characters. You can change it in Profile. It is shown to you in the app, at the top of the side menu.
• A password. milim keeps only a scrambled form of it (an scrypt hash) that cannot be turned back into the password. It is for checking it is you when you sign in.
• If you arrived through a link with a label on it (such as /start?from=…), that label is kept with your account. It is for counting which links bring people in.

What milim records as you use it

These are stored on the server with your account's number:

• Your progress: the words you have marked as known or are learning, and every change to that list; your answers on cards and in games (which option you picked and whether it was right); the stories, units, rooms, scenes and games you have opened or finished; the stars, keys, trophies and puzzle pieces you have earned.
• When you use it: when each visit started and ended, the screen you came in on and left from, and whether you opened the installed app or a browser tab; the first-time steps of your first few minutes (such as "finished the intro"). No internet address or device name is stored with these.
• Your settings, including the character you made, so they follow you to another phone or browser. Text size and theme are the exception: they stay on the device where you set them.
• Your home time zone, as your browser reports it or as you set it in Settings, with a record of each change. It decides when your day starts, for streaks, daily goals and reminders.
• Each sign-in: its time, the kind of system (iOS, Android, macOS, Windows, Linux or other), and whether it came from the milim app, a home-screen icon or a browser tab. Your browser's full identifying string is read to work this out and is not kept. It is for knowing which phones and browsers to support.
• Study reminders, if you answer the question: your yes or no, the weekday you chose, weekly or every two weeks, and the date the last one was sent.

All of this is what the app needs to work: to pick what to show you next and to show your progress back to you. It is also how we learn which parts of milim help people and which do not, so we can make it better.

When you send a report

The flag on each screen sends a report. A report holds:

• whatever you type into it;
• what was on screen: the page, the story line and card, the word and the answer shown, and which buttons were showing;
• the app's version;
• your last 30 or so taps, as which buttons you pressed. Never what you typed, and never the words on the screen;
• your account's number, not your email or name.

It is for finding and fixing the problem you reported.

Measurements the server keeps

• Slow loads and app errors. When a page or request is slow, or the app hits an error, your phone sends the page's address (without anything after the ?), how long it took, the error message, and your account's number. It is for finding what makes milim slow or broken.
• Words with no translation. When you tap a word milim has no translation for, it notes the word, where it appeared, and your account's number. It is for knowing which translations to write next.
• The server's request log. Like most web servers, milim's server logs each request with the internet (IP) address it came from, the address asked for and the time. Your internet address is also held briefly in memory to slow down anyone guessing passwords. They are for keeping the service running and safe.

Reports, slow-load notes and missing-translation notes are copied to the computer of the person who runs milim, to be read there.

On your device

• One cookie, called milim_session. It holds your account's number, a counter that lets "sign out everywhere" work, and the time you signed in, signed so it cannot be altered. It lasts 30 days and page scripts cannot read it. It keeps you signed in. milim sets no other cookies.
• The browser's own storage (local storage) holds your settings, where you are in a story, what you have already seen, a report you have started writing, and answers and reports waiting to be sent while you are offline.
• Session storage holds your last taps, for a report, and is cleared when the tab closes.

Sound and vowel marks

Spoken sentences and vowel-marked text are made once per sentence and saved under that sentence's text. They hold nothing about who listened. milim does not use your microphone, your camera or your location.

Who else handles it

• Fly.io runs the servers, in San Jose, California, USA. Your account, your progress, reports, measurements and the request log are stored there.
• Resend sends milim's emails: password-reset links, address confirmations, and study reminders if you said yes. It receives your email address and the email's contents.
• Cloudflare answers lookups for the milimapp.com name. Your visits themselves go straight to Fly.io.

Everything the app shows (its pages, fonts, pictures and sounds) comes from milim's own server. No page loads anything from another company.

Study reminder emails

None are sent unless you say yes. You choose a weekday, and weekly or every two weeks; a week with nothing ready to study sends nothing. Every reminder has a one-tap unsubscribe link, and you can change your answer in Profile. Turning reminders off does not stop password-reset or confirmation emails.

Deleting your account

Go to Profile, then Delete my account, and enter your password. This removes:

• your email address and your login (your password, and the address you signed in with);
• the name you showed in the app;
• your settings, including the character you made;
• your record of sign-ins;
• your home time zone and its history;
• any open password-reset or confirmation links.

You are signed out on every device. The same email can make a new account later.

Your learning progress stays, tied only to a number with no name or email: the words, answers, visits, stars and the rest listed above. Reports you sent and the measurement lines stay too, under the same number; anything you typed into a report stays as you wrote it. It is kept to learn how people use milim and to improve it.

Copies of the database made before you delete stay as they were until they are replaced or removed: a daily backup keeps its last 14 copies, and a copy is also made when new stories are added to the app. Your details can remain in those copies for a while.

Questions

Write to hello@milimapp.com about anything on this page.

When what milim keeps changes, this page changes and its date changes with it.