Privacy

Milemark · Last updated 27 August 2026

The short version: Milemark has no account and no sign-up. Your milestones, your photos, your places and your reminders stay on your iPhone. We can’t see them, because they are never sent anywhere.

Two things do leave the phone: anonymous measurements of how the app is used, and a handful of events that tell us whether an advert worked. Neither contains anything you wrote. Both are covered by one switch in Settings, and you can turn it off.

This page explains what Milemark does with your information, in plain terms. If something here isn’t clear, please ask. The contact address is at the bottom.

Where your milestones live

Everything you create in Milemark is stored on your iPhone: the milestone itself, its date, its colour or scene, its notes, its checklist, its place and its reminders. It all lives in Milemark’s own private storage. The widget reads that same storage on your device so it can show your next milestone on your Home Screen.

None of it is uploaded, synced to a server of ours, or shared with anyone. It never appears in the measurements described below.

What leaves your phone

Milemark sends two kinds of measurement, and nothing else:

What goes is the shape of what you did, never its contents: which onboarding step you reached, that a milestone was created and which of our nine categories it used, whether it has a photo or a place, how far off it is as a rough band (“0-7 days”, “8-30 days”, and so on), which screen the Pro paywall was opened from, and whether a card or a memory film was shared. Alongside those ride the app version, your app language, whether you have Pro, and a rough count of your milestones (“1”, “2-5”, “6-20”, “21+”). Bands rather than exact numbers, on purpose.

Never sent: milestone titles, dates, notes, checklists, place names, photos, videos, music choices or filenames. Every value in an event is drawn from a fixed list our own code defines: a label, a yes/no, or a band. The app’s test suite checks that this stays true. There is also a filter that drops any text that doesn’t look like one of those fixed labels, so a future mistake becomes a missing field rather than a leaked one.

Anonymous, and not tracking

There is no account, so there is nobody to attach any of this to. PostHog is configured with person profiles switched off entirely, meaning no per-person record is built on their side. The events are counted, not filed against you. Nothing you do in the app is ever linked to your name, email or Apple Account, because Milemark never learns them.

Milemark does not ask for permission to track you, and never will: it does not read your device’s advertising identifier and shows no App Tracking Transparency prompt. Advert attribution instead uses Apple’s own SKAdNetwork, which reports back to TikTok in a deliberately coarse, delayed form designed so that neither we nor TikTok learn which person installed the app. Every payload sent to TikTok is tagged Limited Data Use, which bars them from building advertising audiences out of it, so there is no retargeting and no lookalike audiences off the back of Milemark.

The two sets of measurements are not joined to each other, and nothing from either is sold or passed on. Each service handles the data as our processor, under their own security and retention terms.

To describe an install, both services also send the ordinary technical details every app sends: device model, operating-system version, locale, and a device identifier scoped to us as a developer. The app’s crash reporting is switched off, so no crash reports are captured or sent.

The switch

Settings › Help improve Milemark covers both of the above: one switch, both services. It is on by default, which we’d rather state plainly than bury.

Turning it off does more than stop new events: it tells both services to stop, clears anything still waiting to be sent, and discards the anonymous identifier for this device. If you turn it back on later, a fresh anonymous identifier is created, so the two halves cannot be joined back together.

Photos and videos

If you choose a photo or video for a milestone, Milemark asks iOS for permission to read from your photo library. You control what it can see, and you can change or withdraw that at any time in the iOS Settings app.

Two different things happen depending on what you’re doing:

Milemark never modifies or deletes anything in your photo library, and never uploads it. A memory film made from an album is put together on your phone, using soundtracks that ship inside the app, and only leaves it if you choose to share it yourself.

Calendar

If you choose to start a milestone from an existing calendar event, Milemark asks iOS for permission to read your calendar. It reads upcoming events so you can pick one. It never adds, edits or deletes anything in your calendar, and calendar information is not sent anywhere, including in the measurements above, which record only that an event was picked and roughly how far off it was.

Places

You can attach a place to a milestone. When you type in the place search field, what you type is sent to Apple Maps to fetch suggestions. This is Apple’s search service, and Apple’s own privacy policy applies to it. Once you pick a place, its name, address and coordinates are stored with your milestone on your device, and go nowhere else.

Milemark never asks for your device’s location, and cannot see where you are.

Reminders

If you allow notifications, Milemark schedules reminders with iOS on your device. There is no push server, so nothing about your milestones travels over the internet to deliver a reminder. You can turn notifications off at any time in the iOS Settings app.

Purchases

Milemark Pro is bought through the App Store. Apple handles the payment; Milemark never sees your payment details, card number or Apple Account credentials. The app asks Apple only whether this Apple Account currently owns Pro, and remembers the yes-or-no answer on your device.

When a purchase completes, the price paid and its currency are included in the measurements described above, so we can tell how the app and its adverts are doing. That figure carries no identity with it.

Backups

If you use iCloud Backup or back your iPhone up to a computer, Milemark’s data is included in that backup, along with everything else on your phone. Those backups are made and secured by Apple under Apple’s terms, and Milemark has no access to them.

What we never do

Children

Milemark is a general-audience app and is not directed at children under 13. It asks for no personal details from anyone, of any age, and the measurements it sends are anonymous.

Deleting your information

Deleting a milestone in the app removes it from your device. Deleting Milemark from your iPhone removes everything the app stored, permanently.

Because your milestones were never sent to us, there is nothing there for us to delete. The anonymous measurements cannot be traced back to you or singled out on request, which is the flip side of their being anonymous. Turning the switch off discards this device’s identifier and stops any more being sent. If you have a question about any of this, write to us.

Your rights

Where laws such as the GDPR apply, our lawful basis for the measurements above is our legitimate interest in understanding how Milemark is used and whether its adverts work, exercised through anonymous, bucketed data and an off switch you control. Everything else you create stays on your device and is never processed by us at all. You can write to the address below with any question or complaint, and you may also complain to your local data protection authority.

Changes to this page

If Milemark ever changes in a way that affects this page, we’ll update it here and change the date at the top. If a future version ever collected more than it does today, we would say so plainly.

Contact

Questions about privacy in Milemark can go to privacy@milemark.app.