Privacy policy

Plain language, no surprises. Here is exactly what Milepost collects and why.

Effective October 27, 2026. Milepost helps teens with a learner's permit log supervised driving practice. This policy explains what the app collects, why, and what you can do about it. Questions go to support@getmilepost.app.

The short version. Without an account, everything stays on your phone. With an account, your log is stored so it can sync and be shared with the family members you link. Location is only recorded during a drive. No ads, no analytics, no selling data.

Using Milepost without an account

Everything you enter and every drive you record is stored only on your phone. Nothing is sent to us. The one exception is the weather lookup described under Service providers, which sends a rounded location and no identifier.

What we collect when you sign in

  • Account details: the username and password you choose (the password is stored only as a secure hash), a display name, whether you are a teen or a parent, and your state. We do not collect your email address or phone number.
  • Drives: start and end times, distance, the GPS route points, night minutes, road types, weather, the supervisor's name and any notes, plus whether a drive is in progress so a linked parent can see it.
  • Ratings and family links: skill ratings given after a drive, and the links between a teen and their parents or guardians.
  • Push token: for parents who allow notifications, so they can be told when a drive is ready to rate.

We use this only to run the app: to back up your log, show it to the family members you link, and produce your driving log PDF. We do not sell data, show ads, use analytics or tracking SDKs, or share data with data brokers.

Location

Milepost records your location only while a drive is in progress, including when the screen is locked if you allow "Always" access. It stops when you end the drive and never collects location at any other time.

Service providers

  • Supabase handles sign-in and stores account, drive, rating and family-link data for signed-in users in its Postgres database.
  • Expo delivers push notifications. A notification contains the teen's first name and a drive reference.
  • Open-Meteo receives an approximate location (rounded to about 100 m) at the start of a drive to look up the weather. No identifier is sent.
  • OpenRouter writes optional coaching tips, only after a signed-in user turns on AI coaching (it is off by default). OpenRouter passes each request to one of several AI model providers, which can vary from request to request, and some of those providers may keep a log of the request. Because of that, we send only numbers, never anything that identifies you: practice totals (number of drives, hours, night hours, miles, minutes per road type, drives per weather type) and the 0 to 10 skill scores from ratings, and for a single-drive recap, that drive's duration, night minutes, distance, road-type minutes, weather, drive number and your total hours before it. It never receives names, email addresses, phone numbers, notes, comments, routes or locations.
  • Vercel hosts this website and the server that sends AI coaching requests.

Who can see your drives

Only you and the parents or guardians you link. Linked family members can see your drives, including route maps. You can remove a link at any time in Profile, Family.

Children and teens

Milepost is meant for teens old enough to hold a learner's permit and their parents. It is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we will delete it.

Keeping and deleting data

We keep your data while your account exists. Profile, Delete account permanently deletes your account, drives, ratings and family links from our servers. Without an account, Profile, Erase all data clears the phone. You can also email us to request a copy or deletion of your data.

Security

Data is encrypted in transit and at rest. Row-level security rules in the database ensure each user can read only their own data and that of linked family members.

This website

The Milepost website does not use cookies, analytics or trackers. Fonts are loaded from Google Fonts, which receives your IP address when the page loads.

Changes

If this policy changes in a way that matters, we will update the date above and tell you in the app.