Privacy Policy

Who We Are

Milestone Mirror is operated by kitdesai LLC ("we," "us," or "our"). We provide a web application that allows parents to compare photos of their children at the same ages. You can reach us at [email protected].

Information We Collect

We collect the minimum information needed to provide our service:

• Email address — used for account creation, sign-in verification codes, and essential account communications.
• Photos you upload — images you choose to upload to your milestone frames. These are stored securely and are only accessible to you.
• Child profile information — names and birth dates of children you add, used solely to organize and compare photos by age.
• Apple account identifier — if you sign in with Apple, we receive a unique identifier and your email address (or Apple's private relay address). We do not receive your Apple password.
• Dropbox access — if you connect Dropbox for photo comparison, we access photos through Dropbox's API with your permission. We do not store copies of your Dropbox photos.

How We Use Your Information

• To provide and maintain the Milestone Mirror service
• To authenticate your identity and secure your account
• To send verification codes and essential account notifications
• To display your uploaded photos within your frames

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your photos for training AI models or any purpose other than displaying them to you.

Data Storage and Security

Your data is stored using Cloudflare's infrastructure:

• Account data is stored in Cloudflare D1 (a distributed SQLite database)
• Uploaded images are stored in Cloudflare R2 (object storage)
• All data is encrypted in transit via HTTPS
• Session authentication uses secure, HTTP-only cookies

While we take reasonable measures to protect your data, no method of electronic storage is 100% secure. We encourage you to use strong, unique credentials for your account.

Children's Privacy

Milestone Mirror is designed for use by parents and guardians. The service is not directed at children under 13, and children do not create accounts or interact with the service directly. Parents and guardians are responsible for the photos and information they upload about their children. If you believe a child has provided us with personal information directly, please contact us and we will delete it promptly.

Your Rights

You have the right to:

• Access your data — view all information associated with your account
• Delete your data — request complete deletion of your account and all associated data, including uploaded images
• Export your data — request a copy of your data in a portable format
• Correct your data — update your child profiles and account information at any time

To exercise any of these rights, contact us at [email protected].

Cookies

We use strictly necessary cookies only: a session cookie to keep you signed in, and a temporary state cookie during Apple Sign In authentication. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

Third-Party Services

• Cloudflare — hosting, database, and image storage
• Resend — email delivery for verification codes
• Apple — Sign in with Apple authentication (optional)
• Dropbox — photo access for comparison feature (optional)

Each of these services has their own privacy policy. We only share the minimum data necessary for each service to function.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy or your data, contact us at [email protected].