Milepost

Consumer health data

Effective October 6, 2026

This consumer health data privacy policy applies to consumers in Washington and Nevada. Milepost isn’t a health app, but these states’ laws can treat location data that could show someone seeking health care as consumer health data. Our privacy policy covers everything else.

What we collect and why

Milepost collects precise location while you record a drive: your route, with times, speeds, stops and the places you mark. A route could show that you visited a place where health care is provided. Notes and photos you add could also mention your health.

We use this information only to provide the features you ask for: recording, mapping, backing up and syncing your drives, showing them to the audiences you choose, and keeping shared content safe. We don’t use it to infer anything about your health, and we don’t sell it.

Where it comes from

Directly from you and your devices, when you record drives and add marks, notes and photos.

What we share and with whom

We share it only as needed to provide what you ask for, or at your direction:

  • Service providers that process it for us: hosting and storage (Fly.io and Tigris); maps, weather and place names (Apple, and Google on Android); and content checks and reaction emoji for shared Roadbooks (OpenAI, which receives notes and photos, not routes).
  • People you choose: friends who can see your Friends Roadbooks, and anyone with a Public Roadbook’s link, including its full route.
  • Services you connect, such as an AI agent or a device assistant you allow.

Milepost has no affiliates.

Your rights

You can ask us to confirm whether we collect or share your consumer health data, get a copy of it with a list of the third parties we’ve shared it with and how to contact them, and delete it. You can withdraw your consent at any time by stopping recording, turning off Milepost’s location access or deleting your Roadbooks or account.

Email sai@kambampati.studio to make a request. We respond within 45 days, or tell you within that time if we need 45 more. Requests are free up to twice a year, and we verify them using as little information as we can. When you delete your data, we also tell our service providers to delete it, and copies in backups are removed within six months.

If we decline your request, you can appeal by replying to our decision, and we’ll answer within 45 days. If we deny your appeal, you can contact the Washington Attorney General or the Nevada Attorney General.