Privacy Policy

1. Information we collect

Milestone collects only the information needed to operate, secure, support, and improve the app. Depending on the features you use, this may include:

• Account information: an anonymous account identifier, email address, or Apple sign-in identifier and name.
• Vehicle information: year, make, model, trim, mileage, distance unit, driving profile, and maintenance answers.
• Service records: work performed, shop, date, mileage, cost, and how the record was added.
• Content you submit: receipt images, voice recordings, support messages, screenshots, feature requests, and votes.
• Purchase information: subscription and entitlement status supplied by Apple and RevenueCat. Milestone does not receive your full payment-card information.
• Usage and technical information: screens viewed, app lifecycle events, app version, platform, and error-related context.

2. VINs, receipts, and voice recordings

If you enter or scan a VIN, it may be stored on your device and sent to the U.S. National Highway Traffic Safety Administration vehicle database to identify the vehicle. Milestone does not intentionally save the full VIN in its cloud vehicle record.

Receipt images and voice recordings are sent through Milestone’s processing service and to OpenAI only when you ask Milestone to analyze them. Milestone does not intentionally save the original receipt image or audio recording in its own database after the request. OpenAI may retain API inputs and outputs for a limited period for abuse monitoring unless different data controls apply. The structured service record you approve may be saved to your account.

3. How we use information

• Create and update your maintenance plan and reminders.
• Sync your vehicle and service history across sessions.
• Process receipts, voice entries, and support requests.
• Provide, restore, and manage subscription access.
• Secure, troubleshoot, analyze, and improve Milestone.
• Comply with law and enforce our Terms of Service.

4. Analytics

Milestone uses PostHog for limited product analytics. Milestone currently records app lifecycle events and screen names tied to an app account identifier. Touch autocapture, screen autocapture, location enrichment, and session replay are disabled. We do not use this information for targeted advertising.

5. When we share information

We do not sell personal information. We share information only as needed with service providers that help run Milestone:

• Supabase for authentication, database storage, file storage, and server functions.
• OpenAI for receipt, voice, and optional AI-assisted processing.
• PostHog for product analytics.
• RevenueCat and Apple for purchases, subscriptions, and entitlement status.
• NHTSA for vehicle identification when you use VIN lookup.

We may also disclose information when required by law, to protect rights and safety, or as part of a business transaction subject to appropriate safeguards.

6. Retention and deletion

Vehicle information, service records, preferences, and account details are generally kept while your account is active. Local app data remains on your device until you clear it or remove the app. Support messages and optional support screenshots may be kept for as long as reasonably needed to resolve the request, prevent abuse, and maintain business records.

Signed-in users can delete their Milestone account from Garage → Account. Account deletion removes the associated cloud vehicle and service history. Deleting Milestone does not automatically cancel an Apple subscription; subscriptions must be managed separately in Apple ID settings. You may also contact us for access, correction, or deletion requests.

7. Your choices

You can decline camera, photo, microphone, and notification permissions; use typed entry instead of receipt or voice features; turn maintenance reminders off; exclude car and app context from a support message; edit or delete service records; and delete your account. Some choices may limit related features.

8. Security and international processing

We use reasonable administrative, technical, and organizational safeguards. No system is completely secure. Milestone and its service providers may process information in the United States and other countries where they operate, subject to applicable safeguards and law.

9. Children

Milestone is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child submitted information, contact us so we can investigate and delete it where required.

10. Changes

We may update this policy as Milestone changes. We will update the effective date and provide additional notice when required.