Miils Privacy Policy

This Miils Privacy Policy provides information on how we collect and process personal data, and how we use that data. This Privacy Policy applies to all our services and products specified in our Terms of Service (accessible at URL https://mehilainen.miils.com/legal/tos), as well as our website located at URL https://mehilainen.miils.com.

Please review this document carefully as we want to make sure you fully understand how your personal data is used.

Note also that as we want to ensure that this Privacy Policy properly reflects the way we handle your data, we need to reserve the right to make changes to it in our sole discretion whenever it is necessary. Although we will use reasonable efforts to notify you of all substantial changes to this Privacy Policy, you should also do your best to review this document on a regular basis.

If you have any questions, comments or concerns about this Privacy Policy, please contact us at feedback@miils.com.

1. The type of information we collect

We collect both personal data and non-personal data. By personal data, we mean any information that directly identifies you. By non-personal data, we mean all other information we collect that does not enable you to be identified.

Personal data. We collect personal data both when you register as a user, and when you use the service. We collect the following types of data depending on your user account level:

Your personal details: We require you to provide us with your name and, optionally, your birthday when you register to the service. Your name is kept private unless you make it public. To be able to count your nutrition needs, you need to provide your age, gender, weight, height, activity level, and goals. You can also add your profession, location and brief intro about yourself. Adding profession, location and brief intro is optional.

Contact details: We require you to provide us with a functioning e-mail address when you register to the service.

Picture: You can add your picture to your user profile either during registration or at a later stage. Adding a picture is optional.

Your nutrition needs: You can edit your nutrition needs in your user profile. You can also add your daily nutritional targets, dietary preferences, allergies, and health condition to your profile. Adding daily nutritional targets, dietary preferences and allergies is optional.

Plans, meals and recipes: According to the user account level, you may be able to add your own plans, meals and recipes in the service, and optionally, share these with other users. These are linked to your user account.

Comments: Comments that you add to others’ public materials will be linked to your user account.

Meal calendar information: This optional service allows you to create your own meal calendar. The information you store in the calendar is linked to your user account.

Favourites: If you mark material published by others as a favourite, that information is linked to your user account.

Non-personal data. We can also collect information about how you use our services, including, in case of our website, what webpages you access and any user specific settings (such as your preferred language) you set. This non-personal data is not stored in our personal data register, but is instead stored anonymously (subject to the exception set out below). In some cases, such as webpage analytics, we analyze the data in an aggregate format for the purpose of improving and developing our services.

The usage data generally does not contain any personal data. However, in some limited cases usage data can be stored together with your personal data in such a way that the usage data could be considered to be personal data as well. In such cases we process it in accordance with the personal data provisions of this Privacy Policy.

2. The purposes for which we use the information

We collect personal data for the purpose of

i) enabling us to develop and improve our products and services by better understanding our target audience: For this purpose, we need your personal details, information about how you use the service, such as the nutrition needs you add to the service, the plans, meals and recipes you submit, the comments you make, and the favourites you add.

iii) enabling scientific studies and research based on anonymous data.

iii) keeping you informed about our services: For this purpose we need your personal details and your contact details.

iv) contacting you in specific cases related to issues you might be experiencing with our products and services: For this purpose we need your personal details, contact details and information about your use of the service tied to the specific issue you are experiencing. Thus in this specific instance we might combine, if possible and necessary, diagnostics data related to your use of the service to your user id in order to resolve the issues you are experiencing.

Some of the features in our products and services might rely on the use of information we have collected from you in order to ensure that the feature in question is customised and targeted for your specific use. These include features that require information about your nutrition needs, your plans, meals and recipes, comments, calendar information and favourites.

Your personal data will not be used for the purpose of providing you with marketing from our partners without your express opt-in consent.

3. Storing of your personal data

We store and process your personal data (if any) on third party servers ("Hosting Providers"), located in EU for EU citizens and in the US for the US citizens, which are protected by physical as well as technological security devices. By using our products and services, you give us consent to store, process and transfer your personal information (if any) outside of your country of residence to the countries where our Hosting Providers are located. If you object to your personal information (if any) being transferred or used in this way please do not use our products and services.

4. Your right to inspect the information

We do not verify the accuracy of the personal data you provide. You have the right to inspect the personal data we have collected about you by sending a written request to our address stated below, together with sufficient proof that enables us to verify your identity. Our address is Rategia Oy, Kuortaneenkatu 2, 00510 Helsinki, Finland.

5. Disclosure of the information to third parties

Apart from Hosting Providers, we do not disclose your personal data to third parties unless

• you have provided us with your express opt-in consent for doing so;

• the disclosure is reasonably necessary for us to be able to enforce our Terms of Service;

• the disclosure is reasonably necessary for the purposes of detecting and preventing fraud or security breaches; or

• applicable law requires us to disclose it .

We may share non-personal data (provided that it does not contain any personal data) to select third parties.

6. Removing of information from the register

You can request the removal of any of your personal data by sending a written request to our address in the clause 4, together with sufficient proof that enables us to verify your identity.

7. Cookies

We do not use cookies for the purpose of collecting personal data. The only cookies we might set are technical in nature, used for purposes such as tracking session ids and user state.

When using our services, you may be exposed to cookies provided by third parties. These third party cookies are mainly used for analytics purposes, but can also be set by other third party plug-ins and services. Although we seek to ensure that our users’ privacy is protected at all times, we cannot be responsible for how these third party cookies are used. You should consult the privacy policies of these third parties for more information about how they treat your personal data.

8. Data Security

We use industry standard security mechanisms to protect the collected personal data. All data transfers via the HTTP protocol are protected via SSL. All collected personal data is stored in protected databases located behind a firewall and with both physical and software-based access controls provided by our Hosting Provider.

9. General information

The name of the data controller is Rategia Oy, a company registered under the laws of Finland with principal offices at Helsinki. The name of the personal data register is the Miils user register.

If you are under the age of 13, please ask your legal guardian’s permissions before using our products and services. We do not knowingly collect personal data from anyone under the age of 13. If you are under 13, please do not use any of the features of our products and services that require you to provide personal data to us.