App Privacy Policy

Last updated 29 October 2026

This covers the Bright Miles phone and watch app. It explains what the app collects, why, who else sees it, and how to get all of it deleted. It is written to be read, not to be survived. The website and studio policy is separate.

1. The short version

No selling of personal data, no analytics SDK, no cross-site tracking. We have never sold personal data and we do not intend to start. Members on the free plan may see ads that are not personalized (see “Ads” in section 3); Miles Pro members see none.

Your health data is never used for advertising, never sold, and never shared with anyone outside the people listed in section 7. Apple requires us to say that, and we would say it anyway.

What we hold is your account, the things you chose to log or post, and the conversations you had with Miles. Deleting your account deletes it, apart from the few things section 9 lists that the law makes us keep or that belong to someone else.

2. Who we are

Bright Miles is operated by Charles Hines of 3367 Moss Bridge Lane, Myrtle Beach, SC 29579. For anything in this policy, write to support@brightsidestreams.com. We are the data controller for the information described here.

3. What the app collects

Because you gave it to us

• Account details — a username, an email address, and a password. Sign in with Apple or Google and we receive an identifier and the email you chose to share, with no password. We use your email address for emails about your account and the app: a welcome when you join, a password reset code when you ask for one, the occasional notice about the app (such as an update or an outage), and, if you start a free trial, one reminder two days before it ends.
• Profile — your display name, photo, birthday if you add one, your language, and your time zone. The time zone is how we know when it is 8am where you are.
• What you post and send — stories, moments, photos and videos, comments, direct messages, group chats, voice notes, and the voice clips you save to send again (your laugh, your birthday memo).
• Top cheerers in a live — If you’re one of the top 3 cheerers in a live, your name and heart count are kept on that show’s summary for the host.
• Contacts, as hashes only — if you ask us to find friends from your address book, your phone hashes the numbers before sending them. We compare hashes and never receive or store a phone number or a name from your contacts.
• Your calendar, only when you ask Miles to plan around your day — if you ask something like “when should I run today”, and allow calendar access on iPhone, the app reads the times you are busy today and tomorrow from your phone’s calendar. It sends Miles only those busy times, for that one question. It never sends where an event is, who is invited, or its notes, and it sends an event’s name only if you turn that on. We do not keep any of it: it is not saved to your account, your conversation or what Miles remembers about you. Adding a run to your calendar still happens in your phone’s own add-event screen, where you see it before you save it.
• Support messages — what you send us, and our replies.
• Flyers and saved QR codes — the flyers you make, and up to 5 QR codes you save (the link each one opens and the words under it).

Because the product produced it

• Usage records — how many questions you asked Miles, how many spoken answers you used, your plan and subscription status. This is how the allowances work.
• Technical logs — errors and diagnostic events, kept briefly so we can find and fix faults.
• A push token, if you allow notifications, so the app can reach your phone.
• Which Apple Ads campaign brought an install (iPhone) — the first time the app opens on an iPhone, it asks Apple’s own AdServices for a one-time token and sends it to our server with a random install number made on your phone (not your name or your account). Our server asks Apple whether that install came from a tap on one of our Apple Ads, and Apple answers with its own campaign, ad group, keyword and ad numbers (the ad says which of our App Store pages the tap came through, and Apple adds a few more about the ad itself, such as the country it ran in), or “not from an ad”. Those four numbers, or “not from an ad”, against the install number, are all we keep; the token is not kept. It is how we learn which ads bring people who stay. It uses no advertising identifier and needs no tracking permission.
• QR code scans — we count how many times each of your saved codes is scanned. Just a number, never who scanned it or where they were. Daily counts are kept for 30 days. If a QR code you saved is reported and breaks our rules, we can turn it off, and keep a short note of why until you delete the code or your account.
• Telling a real invite from a repeat. When a friend joins from your invite, we keep a scrambled code for each phone they use (a hashed install ID, made from the app’s own random ID, never your phone’s hardware ID or phone number). We use it only to tell a new person on their own phone from the same phone signing up again. It goes when your account does.
• What the person who invited you sees. If someone invited you, they see that you joined and how many approved posts you have made toward their invite (for example, “Posting · 2 of 3”), until your invite counts. They never see what the posts say unless the posts are public anyway.
• Your year in numbers — how many stories you posted and how many lives you hosted each year, so your Wrapped can show you your own year. Just the two numbers, not what was in them, and only you can see them. A story you delete within 10 minutes of posting is not counted. Deleting your account deletes them.
• Home screen widgets. So a widget can refresh while the app is closed, it gets its own read-only key. That key can only fetch what the widget shows, like a friend’s latest moment, or your progress numbers if you turned on Show my numbers. It cannot post, send messages or change anything, and deleting your account removes it.
• Ads. Members on the free plan may see ads from Google AdMob. The ads are not personalized: we don’t use your activity in other apps or websites to choose them, we never ask to track you, and we don’t share your personal information with advertisers. To show an ad, measure it and stop fraud, Google receives basic information like your device type, an approximate location from your internet address, and how the ad performed. Miles Pro members see no ads.

What we deliberately do not collect

• No analytics SDK and no cross-site tracking. Ads are not personalized; see “Ads” above.
• No card numbers. Subscriptions are billed by Apple or Google; we never see your card.
• No contact names or numbers — only the hashes described above.
• No continuous location. See section 4.

4. Health and fitness data

This is the most sensitive thing the app holds and it gets its own section.

• What we read, only with your permission: workouts, steps, active energy, heart rate, resting heart rate, heart rate variability, VO₂ max, sleep, body weight, body fat percentage and lean body mass, and the calories, protein and water you log in other apps — from Apple Health on iPhone or Health Connect on Android. You can refuse any of it, or withdraw it later in your phone's settings, and the app keeps working.
• Blood pressure and the health checks stay on your phone: blood pressure readings you type into the blood pressure log, or bring in from Apple Health or Health Connect when you tap Import (readings your own monitor saved there; the app only reads them and never writes them back), and your Movement check results are kept on your phone only, and Fitness age is worked out on your phone from the VO₂ max your watch saved. They are not sent to our servers or to Miles. They leave the phone only in a summary you choose to share or print.
• Food and water from other apps stay on your phone: if you allow it, the app reads today’s calories, protein and water that other apps, like a food diary or a water tracker, saved to Apple Health or Health Connect, so the GLP-1 companion’s Protein and Water tiles are not empty. They are read on your phone, never added to your own food log, and not sent to our servers or to Miles. They leave the phone only in a summary you choose to share or print.
• What the app saves to Apple Health or Health Connect, only with your permission: the runs, walks, rides and workouts you track in the app, and the weigh-ins you type in yourself, so your phone’s health app has the same numbers. It never writes back a reading that came from there, like a smart scale’s, and if you undo or delete a weigh-in in the app, it is taken out of Apple Health or Health Connect too.
• Lives and Apple Health. If you go live with heart rate turned on from your Apple Watch, the live is saved to Apple Health as a workout, like any other workout you record. Your heart rate is shown to your viewers only while that switch is on, and you can turn it off before or during a live.
• Your GLP-1 companion stays on your phone. The medications you add (the names you give them, their schedules, and the dose your prescriber gave you, which you type in yourself), the doses you log, injection sites, side effects, how you feel, your supply and your progress photos and measurements are kept on your phone only. They are not sent to our servers unless you switch on Let Miles see my GLP-1 log. They leave the phone only in a summary, a PDF or a file you choose to share or print. The countdown you can add to your Home Screen, your lock screen on a dose day and your Apple Watch is drawn on your phone and watch from that same log, says “Next dose” rather than your medicine’s name unless you turn the name on, and is not sent to us. A dose you log on the watch is logged on your phone.
• The GLP-1 group, only if you join it. If you join the GLP-1 group, your name, photo and what you send there are kept on our servers and shown to the group’s members, like any group chat. Your GLP-1 log stays on your phone; nothing from it is shared unless you type it into the group.
• What the app records itself: runs, walks and rides you track (including the GPS route), strength sets, food you log, your weight, fasting windows, and step counts.
• Location is used while you are tracking an activity, to draw your route and show local weather. It is collected during a workout, not continuously, and a route you post to a feed, and every picture of it, has the part near where it started and finished hidden on your phone before it leaves (200, 400 or 800 metres, your choice in Settings → Activities; 400 unless you change it) — so a published run never starts at your front door. Weather on your posts can be switched off there too.
• Where it goes: it is saved to your own private account on our servers so it survives a new phone and so Miles can answer questions about your own training. Nobody else can read it. It is not a feed, it is not shared, and no part of it is used for advertising or sold. Apple's rules forbid that and so do we.

Food entries are stored as daily totals — calories and macros for a day — not as a list of everything you ate.

5. Miles, and what the AI sees

• Your conversations are kept so the app can show you your own history and so Miles remembers the thread. You can clear a conversation, and deleting your account deletes all of them.
• What he can look up: your own runs, lifts, food, weight, steps, fasting, sleep and heart data, your training plan, your journal if you have switched journal backup on, and anything you explicitly asked him to remember. He can only ever read your data. There is no tool that takes somebody else's name.
• Where the thinking happens: your question, the recent conversation, and whatever he looked up are sent to an AI service provider, which writes the answer. The same goes for what you give Miles or the app to read or translate, like a message, a photo, a meal, a journal entry or, when you ask him to plan around your day, your busy times for today and tomorrow, and for the notes he writes you on his own, like your weekly letter. The provider that writes his answers does not train on them.
• Your GLP-1 log, only if you switch it on. If you turn on Let Miles see my GLP-1 log, a short summary goes with your question to our AI service provider: the names you gave your medications, their schedules, when you last logged a dose, your prescribed dose as you typed it, recent side effects, how you’ve felt and your weight trend. The summary is used for that answer only and is not saved to your account or to what Miles remembers about you, though the conversation itself is kept like any other. The provider does not train on it. Miles never gives dosing advice or suggests changing your medication; that stays between you and your prescriber. You can switch it off at any time.
• Your tastes, if you fill them in: what you love, what you never want, your food allergies and how you eat are kept on your phone, go with your questions to Miles so he can leave them out of what he suggests, and are not saved on our servers.
• Job match: when you use Job match, the job posting and the resume you choose are sent to our AI service provider only to write your fit report and tailored resume; Bright Miles does not store your resume or the posting on its servers, and the resume you upload stays in your phone’s own storage until you remove it. When you build a resume with Miles, your interview answers are sent the same way, once per build, and are not kept.
• Money requests: if you add a Cash App $cashtag, a Venmo username, a PayPal.Me username, or the phone number or email your Apple Cash receives money on, we keep only that handle and the money requests you send or receive (who, how much, what for, whether it was marked paid or declined, any short reason given, and when a reminder was sent); the payment itself happens in Cash App, Venmo, PayPal or Apple Cash, and we never see or hold it. Your Apple Cash phone number or email is shown only to a friend you send a request to, so they can open Messages to pay you; it is never shown to anyone else in a group or on a plan, and removing or changing it stops it showing on requests still open.
• Bright Side Wallet list: members 18 and over can tap Join the list on the Money page. We keep your username and the time you joined, and nothing else. We use and share only the total number of members on the list, never your name, and joining moves no money. You can tap Leave the list at any time, and deleting your account removes you from it.
• The notice. The app explains all of this in a notice called How Miles answers, which you can read again, or turn off, under Profile, Legal. The notes he writes on his own, like your weekly letter, only start once you have tapped Got it. Shows made in the studio, from the app or the website, are covered by the website and studio policy.
• Tonight’s bulletin. When a photo you post is in a friend’s evening bulletin, it goes to our AI service provider once, with your first name and your own caption, so Miles can say one line about the moment to the friends who can already see that post. He never comments on how anyone looks, and he only does it once you have tapped Got it on How Miles answers. The line is kept with the post, and deleted with your account.
• Pictures and scans. When you ask for a picture made from your photo, like a portrait, your look, or a story photo restyled, cut out or brought to life, the photo goes to an image service, and a picture you ask Miles to draw goes there as a description. A body scan sends the photo and the height, weight, age and sex you entered to a body-scan service.
• Tagged in a post: if another member tags you in a post, we store your username (and the spot on the photo where they placed it) with that post so it can show you are in it; we tell you in your notifications, you can remove your tag at any time and it cannot be added back, the tag is deleted when the post or the poster's account is deleted, and it is no longer shown to anyone once you delete your own account.
• Collaborating on a post: when a friend invites you to be a collaborator on their post, we keep the invitation and your answer with that post, and once you accept, your name and profile picture appear on the post, it is shown on your profile and to your followers, and either of you can end it at any time.
• Invite links: when you invite someone by link, we keep who made the link, what it was for (a game, a call, a walk or a step challenge), when it expires and who used it, and we delete that record 30 days after the link expires, or sooner if either of you deletes your account.
• Gym look: we keep the photo you chose in private storage, only so we can make another version when you ask. It is never shown to anyone, and it is deleted when you delete that look or your account.
• Voice. Speaking to Miles on the phone is turned into text by your phone's own speech recognition, which Apple or Google provide, and it never reaches us as audio. On the watch, which has none of its own, the clip is sent to a speech-to-text service, turned into text, and not kept by us. The sound of a video you post goes to the same kind of service to write its captions, and so does what people say on a call while live captions are on; a caption in another language goes to the AI service provider to be translated. When Miles replies in his own voice rather than your phone's, the text of that answer goes to a voice service to be spoken, and so does the narration of a film of your run.
• Your messages. When someone in a chat asks Miles, translates, asks for suggested replies or turns a voice note into text, the messages it needs go to an outside AI service to do it. The messaging rules you accept before your first message say the same.
• Keeping the app safe. Photos and videos you post, and your profile photo, are checked automatically by an AI service for content that breaks the rules, so it can be kept off the app. This check runs on everything posted.
• We do not read your conversations except where you report something to us, or where we are required to by law.

6. Your journal

Your journal is kept on your device. It is not uploaded or backed up unless you switch backup on, and we do not read it.

Some features send an entry to an AI service provider to answer it, and only when that feature is used: the reply under your latest entry on the Dreams and Moments pages, asking Miles about your journal (he can only read it with backup on), and making your year into a book, which asks you first. The provider writes the reply and does not train on it.

You can turn on journal backup if you want it to survive a lost phone. That is off unless you switch it on, and switching it on is the only way your journal is kept on our servers. If you do, it is stored privately against your account, nothing searches across it, and deleting your account deletes it.

7. Who else processes it

These are the only third parties that receive anything, and each receives only what its job needs:

• An AI service provider — what you ask Miles or give him or the app to read or translate, with the context he looked up, to write his answers and the notes he sends you; a photo you post, for his one line about it in your friends’ evening bulletin; the messages a chat feature needs; and the photos and videos posted to the app, to check them for content that breaks the rules. It does not train on them.
• Voice services: a main voice service, and a second one that reads it when the first cannot. They receive the text of an answer when you ask for it in his voice, Miles's coaching lines in a workout, the narration of a run film, tonight's bulletin, and a story you ask to hear read aloud.
• A speech-to-text service — watch voice clips, the sound of videos you post, voice notes turned into text, and what is said on a call while live captions are on, for transcription only.
• An image service — your photo, when you ask for a picture made from it, and the description of a picture you ask Miles to draw.
• A body-scan service — the photo and the measurements you enter for a body scan.
• Supabase — our database, where your account and everything above is stored.
• Cloudflare — photos, videos and audio you upload, live video, and the nightly backups of our database, kept in private storage.
• LiveKit — live audio and video for calls and rooms while they are happening.
• Railway — the servers the app talks to.
• Expo — delivery of push notifications.
• Apple and Google — subscriptions, sign-in, and health data on your own device; and Apple, on iPhone, says whether an install came from one of our Apple Ads (section 3).
• USDA FoodData Central — receives a food name to look up its nutrition. Nothing about you is sent.
• Weather providers — receive an approximate location to return a forecast.
• Amazon Web Services hosts the public terrain maps our server reads to correct the climb on a finished GPS activity. Each request names only a map square several kilometres across, never a point of your route, and never your account.
• OpenTopoData receives the points of a finished route, with no name or account attached, only when those terrain maps cannot be read or the route covers too wide an area. It sends back the height of the ground at each point.
• An email service: your email address and first name, to deliver those emails.
• OpenStreetMap: when you ask for races near you, receives your approximate location, rounded to about a kilometre, to find your postcode; a city you type to search for races may go to it for the same reason. When you turn on a map layer for streets lit at night, water fountains, restrooms or bike lanes, it receives the map area you are looking at, rounded out to about a kilometre and at most about 6 km across, from our server. The map usually shows where you are, so that area says roughly where you are, as the races lookup does; it never includes your route, your exact position or your name.
• RunSignup — receives that postcode, or the city you typed, to list the races near it. Neither service gets your name or account.
• Google AdMob (ads, only for members on the free plan): basic device information, an approximate location from your internet address, and how an ad performed, to show the ad, measure it and stop fraud. Never your name, your posts or your health data.

None of them is permitted to use your data for their own purposes, except OpenTopoData, OpenStreetMap and RunSignup: they are free public services we have no contract with, so we send them only what is described above, with no name or account.

Terrain data credits

The corrected climb is worked out from open terrain data, the Terrain Tiles dataset on the Registry of Open Data on AWS. Its sources ask to be credited, and we are glad to:

• ArcticDEM terrain data DEM(s) were created from DigitalGlobe, Inc., imagery and funded under National Science Foundation awards 1043681, 1559691, and 1542736;
• Australia terrain data © Commonwealth of Australia (Geoscience Australia) 2017;
• Austria terrain data © offene Daten Österreichs – Digitales Geländemodell (DGM) Österreich;
• Canada terrain data contains information licensed under the Open Government Licence – Canada;
• Europe terrain data produced using Copernicus data and information funded by the European Union - EU-DEM layers;
• Global ETOPO1 terrain data U.S. National Oceanic and Atmospheric Administration;
• Mexico terrain data source: INEGI, Continental relief, 2016;
• New Zealand terrain data Copyright 2011 Crown copyright (c) Land Information New Zealand and the New Zealand Government (All rights reserved);
• Norway terrain data © Kartverket;
• United Kingdom terrain data © Environment Agency copyright and/or database right 2015. All rights reserved;
• United States 3DEP (formerly NED) and global GMTED2010 and SRTM terrain data courtesy of the U.S. Geological Survey.

Place names and postcodes for races near you © OpenStreetMap contributors, available under the Open Database Licence.

Map layers for lit streets, water fountains, restrooms and bike lanes © OpenStreetMap contributors, available under the Open Database Licence.

8. How long we keep it

• Your account and what you logged: until you delete it.
• Conversations with Miles: until you clear them or delete your account.
• Voice clips you save (your laugh, your birthday memo): stored privately so we can send them for you, until you re-record or delete them in Profile → My voice clips, or delete your account. Each one you send is kept like any voice message.
• Health, food, weight and training backups: the most recent picture, up to about six months of days.
• Weekly report backups: your Sunday letters and the weekly reports frozen when each week ends, up to about a year of weeks, so a new phone gets them back. They are stored privately against your account, nothing searches across them, and only your own signed-in device can read them.
• Technical logs: days, not months.
• Backups of our database: one copy a night, in private storage, each rolling off within 30 days.
• When you join a creator's crew, we keep which days you watched their lives, to give you your crew level. Leave the crew and it's deleted.

9. Your rights, and how to use them

You can ask for a copy of what we hold, correct it, delete it, or object to how it is used. Write to support@brightsidestreams.com and we will answer within 30 days.

When you delete your account, we delete it and what you put into it. That is your profile and login; your posts, moments, stories, comments and Anonymous Talk posts; your messages, and your membership of every group chat; your follows, friends and blocks; your runs and their routes, your strength log, and your food, weight, steps, fasting, sleep and heart data; your journal backup if you turned it on, and your weekly report backups; every conversation with Miles and everything he had remembered about you; your episodes, recordings, photos, videos and files; your games and scores, and your place in challenges and walks; your flyers and saved QR codes; the accounts you connected, such as YouTube, Twitch, Facebook or Instagram, and the access they gave us; and your push token, so the app stops contacting you. If any part of it fails, the app tells you rather than reporting success, and trying again finishes it.

What we keep, and why. A few things outlast an account, because the law requires them or because they belong to someone else:

• Payment and tax records of what you paid us and anything we paid you, for as long as tax law requires.
• Copies in our backups. Each night we keep a copy of our database, in private storage with no public address, so we can recover from a mistake or an outage. What you deleted stays in the copies made before you deleted it until they roll off, within 30 days.
• A note that your username belonged to a deleted account, and which App Store or Google Play subscription was yours, so a subscription you have not cancelled can never pass to the next person who takes your username.
• Your name in other people's things. Where your username is part of someone else's post or message, it stays part of it: a like, a view, a reaction, a poll vote, a mention in their story, a “seen” mark in a group chat.
• What other people sent you. Photos, videos and files someone sent you in a chat belong to them, so they are not deleted with your account; the conversation itself is. Group chats carry on without you: your messages go, and everyone else’s stay.
• A video of yours that someone else’s post or message still plays stays with it.
• Recordings that are part of another member’s show, such as a take a teammate recorded in your studio, stay with that show.
• A host’s record that you knew you were being recorded, if you were a guest on their show. It is their evidence about a recording that still exists, so it stays, marked as belonging to a deleted account, and it never applies to anyone who takes your username later.
• Reports you made about another member stay, without your name, so they can still be acted on.
• Your show’s web address stays reserved and empty, so nobody else can ever publish to the people who followed it.

You can also refuse or withdraw any individual permission — health, location, microphone, contacts, calendar, notifications — in your phone's settings, at any time, and the app keeps working without it.

10. Children

Bright Miles is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will remove it.

11. Changes

If we change what we collect or who processes it, we will update this page and the date at the top. Material changes will be told to you in the app rather than left here to be discovered.

12. Contact

support@brightsidestreams.com — Charles Hines, 3367 Moss Bridge Lane, Myrtle Beach, SC 29579.