Privacy Policy
Last updated: 6 August 2026
1. Who We Are
MileKit ("we", "us", or "our") is an appointment automation platform operated by MileKit Ltd. We provide SMS and email reminder, review automation, and client recall services to appointment-based businesses worldwide.
If you have any questions about this policy, contact us at: support@milekit.com
2. What Data We Collect
Account Data
Your full name, business name, business type, and email address — collected when you register for a MileKit account.
Client Data
Names, phone numbers, and email addresses of your clients — entered by you or imported by you to enable appointment reminders and automation. You are the data controller for your client data; MileKit is the data processor.
Payment Data
Payment is processed by LemonSqueezy. MileKit never stores your full card number, CVV, or banking credentials. We retain only the LemonSqueezy Customer ID and subscription metadata.
Usage Data
Pages visited, features used, appointment counts, reminder delivery status, and review click-through rates — used to improve the platform and show you analytics on your dashboard.
Technical Data
IP address, browser type, device type, and session tokens — collected automatically for security and rate-limiting purposes.
3. How We Use Your Data
- 1To operate and deliver the MileKit platform, including sending appointment reminders on your behalf
- 2To process your subscription payments via LemonSqueezy
- 3To communicate with you about your account, updates, and support
- 4To generate anonymised platform analytics (no individual client data is ever shared)
- 5To detect and prevent fraud, abuse, and unauthorised access
- 6To comply with legal obligations
4. Third-Party Service Providers
We share data only with the following sub-processors, strictly for the purpose of operating the platform:
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase (USA) | Database & authentication | Account data, client data |
| LemonSqueezy (USA) | Payment processing | Name, email, billing details |
| Resend, Inc. (USA) | Transactional email delivery | Recipient email, name |
| Twilio / SMS provider | SMS reminder delivery | Recipient phone number |
| Vercel, Inc. (USA) | Platform hosting | IP address, request logs |
5. Data Retention
We retain your account data for as long as your account is active. If you cancel your account, we retain your data for 90 days before permanent deletion, to allow for account recovery. Client data you have entered is deleted immediately upon your request. Payment records are retained for 7 years for legal and tax compliance.
6. Your Rights
Access
Request a copy of all personal data we hold about you.
Rectification
Request correction of inaccurate personal data.
Erasure
Request deletion of your personal data ('right to be forgotten').
Restriction
Request that we restrict processing of your data.
Portability
Request your data in a machine-readable format.
Object
Object to processing of your data for direct marketing.
To exercise any right, email support@milekit.com. We will respond within 30 days. EU/UK residents may also lodge a complaint with their local data protection authority.
7. Cookies
We use strictly necessary cookies for authentication sessions, and optional analytics cookies. See our Cookie Policy for full details.
8. Security
MileKit uses industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, row-level security (RLS) on all database tables, and strict server-side authentication. See our Security page for full details.
9. Contact
For privacy-related enquiries:
MileKit Ltd. — Data Protection
support@milekit.com