Milestone
Privacy
This is what Milestone collects, why, who can see it, and how to get rid of it. It is written to be read, not scrolled past. Aromary Technologies, a sole proprietorship registered in India, is behind the app and is the one responsible for your data.
What this app is
Milestone is a record-keeping tool for parents and carers of a child in therapy. You write down what happens — sessions, goals, hard moments, good ones, sleep, medication, appointments — and the app shows it back to you in ways that are useful at the next appointment.
It does not diagnose, treat, or replace a therapist, and nothing in it is medical advice.
What we collect
Only what you type in. There is no advertising identifier, no analytics service, and no tracking across other apps or websites.
- Your account: email address, name, and the country you chose at sign-up (used to show prices in your currency).
- The child's profile: the name or nickname you give, birthday, and any diagnoses, traits, or notes you choose to add.
- The records you keep: therapy sessions and goal data, milestones, hard moments and who was present, sleep, meals, medication and its timeline, appointments, care team contacts, costs and claims, and any files or photos you attach.
- Reminders and notification preferences, stored on your device.
- Messages you send to the people who share a profile with you. These are kept for 30 days and then stop being readable, by design.
- If you subscribe: the fact that you have a plan and which one. Payment itself is handled by Google Play or the App Store; we never see your card.
Health information
Most of what you record is information about a child's health and development. We treat all of it as sensitive: it is stored only to show back to you and the people you choose, it is never sold, never used for advertising, and never used to train anything.
Who can see it
You, and only the people you invite. Sharing is by explicit invitation or share code, per child, with a role that limits what the other person can do. You can see who has access, what they have looked at, and remove them at any time.
The database enforces this, not just the app: every record is protected by row-level rules so that one account cannot read another's data even if the app were to ask.
Staff at Aromary Technologies do not read your records. Access to the database is limited to keeping the service running, and a support request never requires us to open a child's record.
Services we rely on
- Supabase hosts the database, file storage, and sign-in. Your data lives on their servers, encrypted in transit and at rest.
- RevenueCat, together with Google Play or the App Store, handles subscriptions. They receive an anonymous account identifier and your purchase status — not your records.
- Expo provides the app updates and the notification service. Notifications are scheduled on your device; their content is not sent to us.
- Email is sent through a transactional email provider for sign-up codes and password resets only. We do not send marketing email.
- UserCheck is asked, once, whether the domain of the address you sign up with (for example "gmail.com", never the whole address) is a throwaway email service. Temporary addresses expire, and an account on one cannot be recovered.
Each of these is a processor acting on our instructions, with its own published security practices.
Where it is stored
On Supabase infrastructure in the region the project was created in. Copies for backup are kept by Supabase as part of the service. Nothing is stored on servers we operate ourselves.
How long we keep it
For as long as you have an account. Deleting a child removes that child’s records; deleting your account removes everything. Both are permanent and happen straight away, with backups expiring on the provider’s schedule.
Messages are the exception: they are kept for 30 days and then stop being readable, whether or not anyone deletes anything. Removing someone’s access to a profile also ends your conversation with them about it, immediately.
On the free plan, day-to-day records older than the free history window are not shown in the app but are not deleted; they are shown again if you subscribe.
Your rights
- Export: Settings → Your data → Export everything as JSON gives you a complete copy of everything held against your account.
- Delete: Settings → Delete my account removes your account and every record in it. See the account-deletion page for the steps.
- Correct: everything you have written can be edited in the app.
- Ask: write to privacy@aromarytechnologies.com and we will answer within 30 days.
If you are in a jurisdiction with a data-protection authority, you also have the right to complain to it.
Children
The app is for adults. The records are about a child, but the account holder is a parent, guardian, or professional, and we do not knowingly create accounts for anyone under 18. If you believe a child has made one, tell us and we will remove it.
Changes
If this policy changes in a way that matters — new data collected, a new recipient, a new purpose — we will say so in the app before it takes effect. Wording and layout changes are noted by the date at the top.