YoMilo Privacy Policy

Effective date: 8 October 2026
App: YoMilo (com.codefoundry.nearchat), version 0.8.7
Developer: CodeFoundry · DJ Apps Studio
Privacy and support contact: support.djapps@gmail.com

YoMilo connects approved nearby Android devices over Bluetooth, Wi-Fi and related device-to-device technologies. CodeFoundry does not operate a messaging server and does not receive or store your conversations. An active Google Play subscription is required for app use. Nearby messaging itself does not require internet; purchasing, restoring or refreshing subscription access can require internet and a Google Play account.

1. Data used on your device

You choose a public nickname and create an Android Keystore cryptographic identity. Your nickname is advertised only when you enable foreground visibility. Private identity keys are not designed to leave the device. Contacts, fingerprints, messages, groups, polls, events, statuses, drafts, preferences and delivery/read metadata are stored locally in encrypted SQLCipher storage.

Files and media you explicitly select are imported into encrypted app-private storage and sent to recipients you approve. YoMilo does not request broad photo-library, file-system or address-book access. A system contact picker supplies only the selected contact detail. Original media can contain embedded location or other metadata; supported photo re-encoding can remove EXIF.

The microphone is used only for voice notes after your action and Android permission. Voice notes are encrypted attachments. Live voice calls and location sharing are disabled in this release. YoMilo does not acquire GPS or assisted-location fixes. Android 10–12L can still require foreground location permission and Location services for nearby discovery; the app does not use that discovery permission to read coordinates. Android 13+ uses nearby-device permissions instead.

Older installations may contain location messages or call-history metadata created before these features were disabled. Disabling the features does not silently erase existing history or restore live sharing. You can remove local data using the app's deletion controls. A place or address typed as an ordinary message remains ordinary message content.

Android performs optional biometric/device-credential authentication; YoMilo receives the result, not biometric templates. Notifications and group-event reminders are local. Message previews are hidden by default. There is no remote push service.

2. Sharing and third-party services

Messages, files and voice notes go directly to approved contacts or group members. Recipients can retain, export, photograph or record their copies. Local deletion cannot guarantee removal from another device.

YoMilo uses Google Play services Nearby Connections. Google documents usage analytics such as connection/discovery performance, device model, country, build version and app package name. These Google-controlled diagnostics are separate from developer analytics; users can review Android Settings > Google > Usage & diagnostics. See Nearby Connections and Google's Privacy Policy.

Google Play Billing handles subscription offers, prices, eligibility, payments, purchase ownership and acknowledgement. YoMilo does not receive payment-card details. Purchase tokens are used in process memory; app code does not send conversation content, contact fingerprints, proximity records or coordinates to Play. Google can process purchase and service information under its own policies.

A recent positive Play ownership check is cached in authenticated encrypted, app-private no-backup storage for up to 24 hours within the same device boot. The cache contains a check time, boot number and renewal indicator, not a purchase token or chat identity. It survives app restarts. A device reboot or expired check requires another successful Play check. Orientation completion and agreement version are stored locally and do not grant a trial or subscription.

Camera apps, document/media providers and export destinations receive data when you initiate their corresponding actions. Their storage, backups and policies apply. YoMilo has no developer-operated advertising, analytics, cloud-backup or crash-reporting service. CodeFoundry does not sell personal information.

YoMilo checks for app updates through Google Play. Google processes device metadata, the installed app version and installed module/asset-pack information to determine update availability and download size. YoMilo does not send chats, identities or location to the update service. Update prompts can be deferred; Google Play handles the download and installation. See Google Play in-app updates and data safety. A deferred-update version and reminder time are stored locally.

Authorised app reviewers can use a separately issued, digitally signed review credential. This grants the same available features without a purchase or free trial, does not create Play ownership, and is labelled as review access. It does not provide access to another user's data. The credential is stored only in authenticated encrypted, app-private no-backup storage and is removed by Remove review access, local data deletion or uninstalling. No review sign-in account or messaging backend is created.

3. Security

Approved peers use mutually authenticated encrypted sessions. Users should compare connection codes and independently verify safety numbers; a nickname is not identity proof. Local conversations and attachments are encrypted with keys protected by Android Keystore where supported. Android backups of app data are disabled. Backgrounding ends nearby communication and capture; temporary decrypted previews are cleaned up according to app and operating-system lifecycle.

No security measure eliminates every risk, particularly on a compromised device or when a recipient retains content. Security review and physical device acceptance remain release requirements; no independent audit certification is claimed.

4. Retention, deletion and subscription changes

Local content remains until you delete it, uninstall the app or a supported expiry rule removes it. Use Settings > Delete all local data and identity to remove chats, contacts, private attachments, preferences, cached subscription checks, any review credential and the local cryptographic identity. This control also remains available on the subscription screen when access is unavailable. Deletion and uninstalling destroy identity continuity; no identity backup or recovery is provided.

Subscription cancellation, expiry, pending payment or failed checking does not erase local history. Messaging and other app use require access to be restored. CodeFoundry cannot remotely retrieve or erase data held only on your device. Delivered/exported copies and Google's separately processed information are outside this local deletion operation.

Deleting data or uninstalling does not cancel a Google Play subscription. Manage cancellation in Google Play.

5. Children and other people's data

YoMilo is intended for adults aged 18 and over, matching its Google Play target audience. It is not directed to children. If you are under 18, do not use YoMilo. If you believe a child has provided personal information to the developer, contact support.djapps@gmail.com; avoid including private conversations or payment details.

Only share another person's information or media when you have permission or another lawful basis. Do not send unlawful, abusive or non-consensual content.

6. Contact and changes

For privacy questions, support or complaints, email support.djapps@gmail.com with the app name. Do not include passwords, payment details or private conversations in your initial message. Any further information should be limited to what is needed for the request.

We may update this policy when features, processing or applicable obligations change. Material changes will be disclosed through the app or its store listing. The effective date will be revised.

Public policy: https://djapps-studio.github.io/yomilo/privacy.html

YoMilo is the new name of NearChat. The Android package remains com.codefoundry.nearchat; existing local identity, history and Google Play subscriptions continue with the same app. This branding update does not start another free trial.