Privacy policy

Who we are

MileMoments (milemoments.com) turns routes you run, ride and hike into printed posters and books. This policy explains what personal data the app collects, why, who receives it, how long it is kept, and how you can delete it.

The service is operated by MileMoments. Questions and privacy requests: hello@milemoments.com.

Data we process

Account data: email address, optional display name, and the sign-in method you choose.

Activity data: GPS tracks, dates and statistics from GPX or TCX files you upload, or from activities you choose to import from Strava, Garmin, Polar, Wahoo or Ride with GPS.

Project data: your designs, texts and uploaded photos.

Order data: shipping address, phone number if you give one for the carrier, order contents and payment status. Card numbers are handled by Stripe and are not stored by MileMoments.

Why we process it

We use this data to create your account, provide the editor, save your projects, produce and ship the items you order, send messages about those orders, and keep the accounting records the law requires.

We do not sell personal data. We do not use it for advertising, and we do not use it to train generalised models.

Google sign-in

Signing in with Google is optional. If you choose it, MileMoments requests the OpenID, email and profile scopes only. From your Google account we receive your email address, your name, your profile picture and the account identifier Google assigns.

We use that Google user data only to create your MileMoments account, sign you in, and show your name. We do not use it to access Gmail, Drive, contacts, photos or any other Google product. We do not use it for advertising, we do not sell it, and we do not use it to train models.

Google user data is stored with your account in our database, hosted in the European Union by our processor Supabase. It is not sent to the print partner and it is not shared with other customers. It is deleted when you delete your MileMoments account. You can also remove MileMoments from your Google Account at any time; that stops future sign-in with Google and we then delete the Google data we hold, either when you delete the account or when you ask us at the address above.

Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Strava

If you connect Strava we request read access to your activities (scope activity:read_all) only to import the activities you choose into your library.

Strava data is cached for at most seven days, after which route details are removed until you refresh them. We never sell or share Strava data, never use it for advertising or AI training, and never show it to other users.

When you disconnect Strava or delete your account, we revoke our access and delete all Strava data within 48 hours.

Garmin, Polar, Wahoo and Ride with GPS

Connecting one of these services is optional and read-only. We import only the activities you select.

Garmin activities arrive after your device syncs. Polar shares exercises recorded after you accept the connection. Wahoo and Ride with GPS are read when you ask to import.

Disconnecting a service, or deleting your account, revokes our access where the service allows it and deletes the activities imported from it.

Processors

Supabase (database, authentication and file storage, in the European Union), Stripe (payments), our print and fulfilment partner (production and shipping — it receives the print files through expiring links and your shipping address, not your Google account), Resend (order emails), Google Cloud (hosting the website and rendering print files), and our map providers (map tiles, and pitched 3D basemaps when that style is shown).

Retention and deletion

Projects and photos are kept until you delete them or your account. Frozen print snapshots of orders are removed 30 days after an order is completed. Invoices are kept as required by law.

You can delete your account from the account settings. That deletes your profile, projects, photos and imported activities. You can also ask us to export, correct or delete your data by writing to hello@milemoments.com. We respond to deletion requests within 30 days.

Your rights

You can access, export, correct and delete your data from your account settings or by writing to hello@milemoments.com. You may also lodge a complaint with your data protection authority.

This policy is published at https://milemoments.com/legal/privacy and is linked from the MileMoments home page.