Privacy Policy & Security

Security Notice

MilAssist is designed for unclassified military career development only. Do not input classified or controlled unclassified information (CUI), operationally sensitive details, or other people's personal information. All communications should follow standard operational security (OPSEC) guidelines.

MilAssist LLC Privacy Policy

Last Updated: June 24, 2026 | Effective Date: June 24, 2026

Information We Collect

Account & Profile

Username, email address, phone number, first and last name, and the military details you provide (rank, branch, unit, and MOS/AFSC).

Authentication & Security

Hashed passwords (never stored in plain text), two-factor authentication (2FA) codes sent by SMS, password-reset tokens, session cookies, and records of your acceptance of our legal agreements (version, date/time, IP address, and device/browser).

Subscription & Billing

Your plan tier, subscription status, and trial dates, plus billing identifiers from our payment processor (Stripe). Payment card details are handled by Stripe; we never store full card numbers.

Content You Create

AI chat messages and history, and documents you generate or upload (memorandums, evaluations, award citations, operation orders/CONOPs, notes), along with your training, lesson, quiz, and mission progress.

Usage & Gamification

Experience points (XP), streaks, tiers, achievements, leaderboard scores, and how you interact with features.

Device & Technical

IP address, browser type, operating system, app version, general device information, and diagnostic/performance data.

Advertising Data (Mobile App)

With your permission, our mobile ad partner (Google AdMob) may use your device's advertising identifier (such as Apple's IDFA on iOS) to deliver and measure personalized ads. See "Advertising & Tracking" below.

Push Notifications (Mobile App)

If you enable notifications, we store a device push token so we can send training reminders and alerts.

SMS Consent Records

If you opt in to SMS, we record your phone number, the consent language shown, message types and frequency, date/time, IP address, and device/browser.

Security & Anti-Abuse

When you register or submit certain forms, we use Google reCAPTCHA, which collects device and interaction signals to detect and prevent automated abuse.

Calendar Integration (Optional)

If you choose to connect an external calendar (Google, Microsoft/Outlook, or Apple), we collect the associated account email and the access/refresh tokens or app-specific calendar credentials needed to sync (stored encrypted), and we read and write your calendar events to publish your training plans. You can disconnect at any time.

Voice & Audio

If you use voice input, we process your audio recording to transcribe it to text (via OpenAI Whisper). The transcript may be retained as part of your chat history.

Uploaded Documents

PDFs and Office files you upload are processed to extract form fields or convert formats (via Adobe PDF Services) and may be stored in cloud object storage (Replit Object Storage, backed by Google Cloud Storage).

Communication Data

Messages sent through our contact forms and support channels.

How We Use Your Information

  • Provide personalized military career guidance and document formatting
  • Customize features based on your branch and military occupation
  • Improve our AI-powered features and overall service quality
  • Send important service updates and security notifications
  • Respond to your questions and support requests
  • Ensure platform security and prevent misuse

Data Storage & Security

Storage Location

We are based in the United States and store and process data there and in other countries where we or our service providers operate.

Security Measures

We employ industry-standard encryption, periodic security reviews, and access controls to protect your information.

Data Retention

Account data is retained for as long as your account is active. Chat history and documents can be deleted by you at any time.

Information Sharing

We do NOT sell, rent, or trade your personal information.

Limited data sharing occurs only in these circumstances:

  • With your explicit consent
  • To comply with legal obligations or court orders
  • To protect our rights, property, or safety
  • With trusted service providers who assist in platform operations (under strict confidentiality agreements)

Third-Party Services

MilAssist integrates with the following services:

  • OpenAI: AI-powered text and document generation, and voice transcription (Whisper)
  • ElevenLabs: AI voice synthesis (e.g., War Room)
  • Stripe: Payment and subscription processing
  • Twilio: SMS delivery (verification codes, alerts, and notifications)
  • SendGrid: Transactional and account email
  • Google AdMob: Advertising in the mobile app
  • Google Analytics: Web usage analytics
  • Google reCAPTCHA: Bot and abuse prevention on sign-up and forms
  • Google Calendar, Microsoft (Outlook/Graph) & Apple (iCloud via CalDAV): Optional calendar sync (only if you connect a calendar)
  • Expo: Mobile push-notification delivery
  • Adobe PDF Services: PDF form extraction and Office-to-PDF conversion for uploaded documents
  • Neon / PostgreSQL: Secure database hosting
  • Replit / Replit Object Storage (Google Cloud Storage): Application hosting and file/document storage

Each service operates under their own privacy policies and security standards.

Advertising & Tracking (Mobile App)

The MilAssist Training mobile app shows ads through Google AdMob to support the free tier.

  • App Tracking Transparency (iOS): Before any tracking for personalized ads, iOS asks for your permission. If you decline, you will still see ads, but they will be non-personalized.
  • Consent: We use Google's User Messaging Platform to gather any required advertising consent and remember your choice on your device.
  • Your choices: You can change or withdraw permission at any time in your device settings (iOS: Settings > Privacy & Security > Tracking), where you can also reset or limit your advertising identifier.
  • Ad-free option: Paid (PRO) subscribers do not see ads in the mobile app.

Account Deletion

You can request deletion of your account and associated personal data at any time from your account settings or by emailing contact@milassist.ai. When you delete your account, we remove or de-identify your personal data, except information we must retain for legal, tax, accounting, security, or fraud-prevention purposes.

Your Rights & Choices

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data
  • Export: Download your data in a portable format
  • Opt-out: Unsubscribe from non-essential communications

Military-Specific Protections

  • No tracking of duty locations, deployments, or operational details
  • We never sell your information, and we share it only with the service providers listed above and as required by law
  • Not an official DoD system; we apply industry-standard security practices for unclassified use
  • Periodic security reviews and updates
  • Military personnel can request expedited data deletion

Questions & Contact

For privacy questions or to exercise your rights, contact us:

  • Email: Contact@milassist.ai
  • Subject Line: "Privacy Policy Question"

We are committed to responding to all privacy inquiries within 30 days.