Privacy Policy

Overview

Milestone ("the app," "we," "our") is operated by Path Forward Financial, a company based in the United States. This Privacy Policy explains what information we collect, how we use it, and the choices you have — whether you are creating a milestone, leaving a message as a guest, or sending a gift.

We built Milestone to help people gather heartfelt messages and deliver them as a keepsake for life's biggest moments. We collect only the information necessary to make that work, and we never sell your data.

Who Uses Milestone

Milestone has three types of users:

• Account holders — people who create an account, add recipients, and create milestones. Their data is stored securely in our database.
• Guest contributors — people who receive a shared link and add a message. Guests do not create an account and provide only their name and message.
• Gift senders — guests who choose to send an optional monetary gift alongside their message. They provide their email address for a receipt and complete payment through Stripe.

Information We Collect

Account holders

• Email address and password — used to create and access your account.
• Recipient profiles — name and email address. Only accessible by you.
• Milestone data — occasions, links, and gathered messages. Only you can view these.

Guest contributors

• Name and message — stored and made available only to the account holder for review before sending.

Gift senders

• Email address — collected at the time of the gift to send a receipt. Not stored in our database beyond the transaction.
• Gift amount — recorded in our database alongside the associated message.
• Payment details — handled entirely by Stripe. We never see or store card numbers or banking information.

Automatically collected

• Usage data — standard server logs collected by Vercel and Supabase for security and reliability, not advertising.
• IP address — collected at the time a message is submitted to help prevent abuse. Not used for tracking or advertising.

How We Use Your Information

• To provide the core service: creating milestones, gathering messages, generating the keepsake PDF, and facilitating delivery via your own email.
• To maintain your account and remember your preferences across sessions.
• To process gift payments and send receipts to gift senders.
• To notify account holders when a gift has been received.
• To protect the security and integrity of our service.

We do not use your data for advertising, we do not build advertising profiles, and we do not share your data with third-party advertisers.

How Messages Are Handled

Guest contributors should be aware that the message they write — including their name — is visible to the account holder who created the milestone. The account holder reviews all messages before sending and may remove any message they deem inappropriate. Messages are not visible to other contributors.

Messages are delivered via an email sent directly from the account holder's personal email address. Milestone does not send emails on your behalf or expose the recipient's email address to guests.

How Gifts Are Handled

Gifts are optional and facilitated through Stripe, a third-party payment processor. When a gift is sent, the funds are transferred directly to the recipient's connected Stripe account, minus a Milestone platform fee and Stripe's processing fee. A full fee breakdown is shown to the gift sender before payment is confirmed, and a receipt is emailed to the gift sender upon completion.

Gifts are non-refundable once sent. Milestone is not responsible for how gift funds are used by the recipient. The account holder is notified by email when a gift is received.

Account holders who wish to receive gifts must complete Stripe's identity verification process and agree to Stripe's terms of service. Stripe requires connected account holders to be at least 18 years of age.

Data Sharing and Third Parties

We use the following third-party services:

• Supabase — database and authentication. Privacy Policy
• Vercel — website hosting. Privacy Policy
• Stripe — payment processing and connected accounts for gift recipients. Stripe handles all payment card data and identity verification. We receive only confirmation of payment status and connected account IDs. Privacy Policy
• Resend — transactional email delivery for gift notifications and receipts. Privacy Policy

We do not sell, rent, or trade your personal information to any third party. We may disclose information if required by law or to protect user safety.

Data Retention

Account data is retained for as long as your account is active. If you delete your account, your profile and milestones will be removed. Guest messages are deleted when the associated milestone is deleted by the account holder.

You may request deletion of your data at any time by contacting us at the email address below. We will respond within 30 days.

Children's Privacy

Milestone is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with information, please contact us and we will delete it promptly.

Guest contributors may include individuals of any age. Account holders are responsible for ensuring that milestone links are shared only with appropriate recipients. Stripe requires gift recipients to be at least 18 years of age to create a connected account.

International Users

Milestone is operated from the United States. If you access the service from outside the US — including the EEA or UK — your information may be transferred to and processed in the United States, where data protection laws may differ.

If you are located in the EEA or UK, you have rights under GDPR or UK GDPR, including the right to access, correct, or delete your personal data. Contact us at the address below to exercise these rights.

Your Choices

• Account deletion — contact us to request deletion of your account and all associated data. We will respond within 30 days.
• Message removal — as an account holder, you can remove any contributor message before sending.

Security

We take reasonable measures to protect your information. Account data is protected by Row-Level Security on our database — each account holder can only access their own data. Passwords are managed by Supabase and never stored in plain text. All payment data is handled by Stripe and never passes through our servers.

No method of internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Milestone after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: