My Loved Ones ("Mylo," "we," "us," or "our") operates the website mylo.family, a free platform for making a public Legacy Pledge to a charity. This Privacy Policy explains what information we collect, why, the lawful basis for each use, and what control you have over it.
The data controller — the party that decides how and why your personal data is used — is Sergei Ponomarev, the individual operator of mylo.family, trading as My Loved Ones. You can reach the controller about anything in this policy, including any request to exercise your rights, at team@mylo.family.
The short version: making a pledge needs very little information about you, we never sell your data, and your details only ever reach a charity after you explicitly opt in by ticking the consent box. Our free writing tools run in your browser and are not stored on our servers.
Information We Collect
Your Legacy Pledge
When you make a pledge, we store:
- Your name — optional. You can pledge anonymously.
- Your pledge — the share or statement you choose and the charity you choose.
- Your email address — only if you ask us to send the pledge kit by email, or if you opt in to be connected with your chosen charity.
You do not need an account to make a pledge. Public pledge pages are set to noindex, so we ask search engines not to list them.
The pledge kit and updates (optional, separate consents)
There are two separate, optional choices, and each is its own consent:
- Pledge kit by email — if you ask for it, we use your email to send you the kit. This is a one-off transactional email.
- Connect me with my chosen charity— see "Sharing Your Data with a Charity" below. This is a separate data-sharing consent you give by ticking the box.
Marketing or occasional updates from Mylo are a further, separate opt-in. You can decline all of these and still make a pledge.
Analytics
We use Google Analytics and the Meta Pixelto understand how visitors use the site. These tools set cookies and collect usage data such as pages viewed and general interactions. See "Cookies" below.
How the Free Writing Tools Handle Your Content
Our free writing tools — legacy letters, the ethical will, twelve life lessons, life advice — run entirely in your browser tab. Your drafts are not stored on our servers. If you close or refresh the tab, the draft is cleared unless you have downloaded it to your own device. Please download anything you want to keep.
A small number of pre-existing paid accounts still have an encrypted vault where signed-in downloads can be saved as ciphertext. Even then, the encryption happens in the browser and our servers only ever hold scrambled bytes — we never see the plaintext. This is a legacy feature, not part of the current free service.
Sharing Your Data with a Charity (Consent)
This is the most important part, so we'll be precise. We share your personal data (your name and email) with a charity only when you explicitly opt in— by ticking the "connect me with this charity" box when you create your pledge. If you don't tick that box, we never share your details with anyone.
When you tick the box, what happens next depends on the charity:
- If the charity has already claimed and verified its listing on Mylo, we share your name and email with that charity, and only that charity.
- If the charity has not yet claimed its listing, your details are held (not shared) until it claims and verifies its listing — and if it never does, they are dropped and never shared.
Our lawful basis for this sharing is your consent, and you can withdraw it at any time by emailing team@mylo.family or by using the delete link in your pledge email. Once a charity has received your details, its own privacy policy governs how it uses them, and you can contact the charity directly to ask it to stop.
Beyond this consent-based, confirmed sharing, we do not sell, rent, or share your personal information with anyone for marketing. No money ever flows through Mylo, and pledgers are never charged.
Our Lawful Basis for Each Use
Data-protection law (the EU GDPR and the UK GDPR) requires us to have a valid lawful basis for every use of your personal data. Here is the basis we rely on for each purpose:
- Sending you the pledge kit by email — consent. We only email you the kit because you asked us to, and you can withdraw that consent at any time.
- Sharing your details with your chosen charity — consent. We only share after you opt in by ticking the box, and you can withdraw at any time.
- Marketing or occasional updates from Mylo — consent. A separate opt-in you can withdraw at any time.
- Basic analytics, site security, and preventing abuse — legitimate interests. We have a legitimate interest in understanding how the site is used and in keeping it secure. Non-essential analytics cookies still only run if you allow them (see Cookies).
- Running the closed legacy subscription — contract. For the small number of remaining paid subscribers, we process account and billing data because it is necessary to provide the subscription they signed up for (and to meet related legal obligations, such as tax record-keeping).
Where our basis is consent, you are free to refuse or withdraw it without affecting your ability to make a pledge.
Cookies
Essential cookies are needed for the site to work — for example, the authentication cookies our provider (Clerk) sets to keep the limited number of legacy subscribers signed in. These are always on because the service cannot function without them.
Analytics and marketing cookies are set by Google Analytics and the Meta Pixel to help us understand how people find and use the site. These are non-essential: you can decline them and still use every part of Mylo, including making a pledge. You can also control or block cookies at any time through your browser settings.
Third-Party Processors
We use a small number of trusted providers ("processors") to run the service. Each processes personal data only on our instructions and under its own privacy policy. We store the underlying pledge data in the EU wherever possible.
- Supabase — database hosting, in an EU region, for pledges and related records.
- Resend — transactional email (pledge kits, confirmation emails).
- Vercel — website hosting and content delivery (CDN).
- Google Analytics and Meta Pixel — analytics (these set non-essential cookies you can decline).
- Clerk — authentication, and Lemon Squeezy — billing. These are used onlyfor the remaining legacy subscribers' sign-in and payments. New users don't interact with them.
International Data Transfers
Some of our processors (for example Resend, Vercel, Clerk, Lemon Squeezy, and the Google and Meta analytics tools) are based in, or store data in, the United States. When your personal data is transferred outside the EU or the UK, we rely on the safeguards required by law — such as the European Commission's Standard Contractual Clauses(and the UK's International Data Transfer Agreement/Addendum), an applicable adequacy decision, or a provider's certification under the EU–US Data Privacy Framework — so that your data keeps a level of protection essentially equivalent to that in your home country.
Data Retention
Pledge data is kept until you delete it. Every pledge comes with a one-click delete link by email, and you can also ask us to delete it at team@mylo.family.
Charity leads for unclaimed charities (where you opted in but the charity has not yet claimed its listing) are held until the charity claims and verifies its listing; if it never does, they are dropped and never shared. When you delete your pledge, any lead we still hold for it is deleted too.
Free-tool drafts are never stored on our servers, so there is nothing to retain.
Analytics datais retained according to each provider's default settings.
Your Rights
Under the EU GDPR and the UK GDPR, and subject to the conditions in that law, you have the right to:
- Be informed about how your personal data is used — which is what this policy is for.
- Access the personal information we hold about you and receive a copy of it.
- Rectification — ask us to correct data that is inaccurate or incomplete.
- Erasure— ask us to delete your pledge and associated personal data ("the right to be forgotten").
- Restrict processing — ask us to pause how we use your data in certain circumstances.
- Data portability — receive the data you gave us in a common, machine-readable format, or have it sent to another provider.
- Object to processing based on our legitimate interests.
- Withdraw consent at any time — for the pledge kit, for the charity connection, or for updates — without affecting anything done before you withdrew.
- Complain to a supervisory authority.If you are in the EU you can complain to your national data-protection authority; if you are in the UK you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to help first, but this is your right either way.
To exercise any of these, email team@mylo.family. We aim to respond within one month, as the law requires.
Children's Privacy
Mylo is intended for adults (18 and over). We do not knowingly collect personal information from children. If we learn that we have, we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date at the top of this page. Continued use of the platform after changes are posted means you accept the updated policy.
Contact Us
If you have questions about this Privacy Policy or our data practices, email us at team@mylo.family.