Privacy Policy

The short version

The app doesn’t need an account. There is no sign-up or password, and we never ask for your email address. Miles stores your vehicle and maintenance data on your device and, if you choose, in your private iCloud account. We do not sell or share your data with third parties. There is no analytics SDK and no advertising SDK in the app.

The one exception is optional. Web Access, a Premium feature, keeps a copy of your garage on our server so you can see it on a computer. It is off unless you turn it on, and you can delete that copy at any time.

Data Miles stores

Vehicle details (make, model, year, VIN you enter, mileage, optional purchase date, optional photo), maintenance items, and maintenance records (date, mileage, notes, photos). This is the data you create. Apart from the anonymous NHTSA lookups described below, it stays on your device and in your private iCloud unless you turn on Web Access.

VIN decoding and safety recalls (NHTSA)

When you enter or scan a VIN, Miles sends only the VIN to the U.S. National Highway Traffic Safety Administration’s public vPIC service over an encrypted connection to identify your vehicle’s year, make, and model. The request is anonymous. No account, name, or device identifier accompanies it, and the decoded result is cached on your device so the lookup isn’t repeated.

When you add or view a vehicle, Miles checks for open safety recalls by sending only that vehicle’s make, model, and year to NHTSA’s public recalls service over an encrypted connection. The request is anonymous. No VIN, account, name, or device identifier accompanies it, and results are cached on your device so the lookup isn’t repeated more than once a day.

iCloud sync

When you’re signed in to iCloud and have enabled iCloud sync, Miles uses Apple’s CloudKit to mirror your data across your devices. The data is stored in your personal iCloud container and is not accessible to anyone else, including us. Apple’s iCloud privacy policies apply.

For more information about how Apple handles iCloud data, see Apple’s Privacy Policy.

Web Access (optional, Premium)

Web Access lets you see and update your cars at trackmiles.app/app on a computer. It stays off unless you turn it on in Miles under Settings, Web Access. When it’s on:

• Sign in with Apple. You sign in with your Apple Account in the app and on the website. We ask Apple for no name and no email address. Apple gives us only a random identifier that is the same for you across Miles and its website, and it can’t identify you anywhere else.
• What the app sends. Your iPhone sends our server a copy of your garage: vehicle details you entered (make, model, year, nickname, VIN, license plate, mileage, purchase date), maintenance items and their intervals, service records (dates, mileage, costs, shop names, notes), your fuel log, your vehicle notes, the titles and categories of glovebox documents, and the recall status the app has already checked with NHTSA. It also sends your time zone, language and currency so dates and prices look right, and your device type (for example “iPhone”). It does not send your location or anything from outside Miles.
• Photos and documents. The app also sends copies of the photos on your service records and the images of your glovebox documents, so you can see them on the website. Your iPhone makes the copies itself, at a smaller size, and removes the location and camera details stored inside the original image. Photos kept only in older versions of Miles, from before photos synced with iCloud, stay on your iPhone.
• Changes you make on the website. When you change something at trackmiles.app/app, for example log a service or add a car, photo or document, our server keeps the change until Miles on your iPhone applies it, and keeps a list of those changes so you can see them in Miles under Settings, Web Access. Photos and documents you add on the website are uploaded as the file you chose, which can include where and when it was taken and the camera or phone used. We keep them privately until Miles on your iPhone saves its own copy without that information, the next time the app is open, and delete them then. If that hasn’t happened within 30 days, we delete them anyway.
• Notifications. The app also sends this iPhone’s push notification address, so the website can tell it about changes you make on the web. The notification names the car and the kind of change, never mileage or costs. Turn it off in Miles under Settings, Web Access.
• Confirming Premium. The app sends Apple’s signed record of your download of Miles and, if you bought Premium, of that purchase (they include Apple’s transaction identifiers, not payment details) so our server can confirm Premium. Our server keeps those identifiers with your web account. The app also sends this iPhone’s referral device identifier, so Premium earned through referrals counts. With Web Access on, our server keeps that identifier with your web account.
• Where it lives. The copy, including those photos and document images, is stored on servers run by Cloudflare, our hosting provider, and is replaced each time your iPhone syncs. Photos and document images are kept in private storage and are never public. It is sent over encrypted connections and is only shown to someone who signs in with your Apple Account. The website uses one cookie to keep you signed in, for up to 30 days. Our server also keeps a short log of requests (IP address, rough location, device type and which page or API was used) for up to 7 days so we can fix problems. It never includes your garage. Microsoft Clarity never runs on the signed-in web pages.
• Deleting it. A photo or document you delete in the app is deleted from our server soon after, usually the next time your iPhone syncs. Turn off Web Access in the app to remove that iPhone. If it was your last linked device, the website deletes your copy, photos and document images included. You can also delete everything we hold for you at any time with “Delete web data” on trackmiles.app/app, under Account, or with Delete Web Account in Miles under Settings > Web Access. Either one deletes it for every linked device. To remove Miles from your Apple Account as well, open Settings on your iPhone, tap your name, then Sign-In & Security, Sign in with Apple, Miles, and Stop Using.

Web Access never gives the website access to your iCloud. The copy on our server comes from your iPhone, apart from the changes, photos and documents you add on the website.

Camera

Miles uses the camera only when you scan a VIN, photograph a receipt while logging service, attach a photo to a record, or add a glovebox document. The camera is not used at any other time. No video or image data is sent off your device, unless you turn on Web Access, which sends copies of your record photos and glovebox document images to your private web copy. A scanned VIN goes only to NHTSA, as described under VIN decoding and safety recalls.

Notifications

If you opt in, Miles schedules local notifications to remind you when service is due. Reminders run entirely on-device. They are not sent through any server. With Web Access on, our server can also send a notification when you change something on the web.

Vehicle maintenance database

Miles downloads a public database of recommended service intervals from our content server. The download is anonymous. We don’t know who you are or what vehicle you own. The request is a standard HTTPS request for a public file; no personal data, identifiers, or usage information are transmitted with the request beyond what is normal for any web request (such as your IP address, which our hosting provider may log per standard practices).

Referral program

The app sends a random device identifier, generated on your device and not derived from any hardware ID, to our own referral server on each app launch, to keep your referral progress and rewards (Invite Friends in Settings) current. Unless you turn on Web Access, which keeps it with your web account, this identifier is not linked to your identity. It is never shared with or sold to a third party, and is never used for tracking. It exists to run the referral program, for example to stop the same device claiming a reward more than once, and, with Web Access on, to confirm Premium earned through referrals.

Analytics & tracking

In the iPhone app: Miles contains no analytics SDK, no advertising SDK, and no third-party tracking. The referral program sends a random device identifier to Miles’ own server on each launch, to keep your referral rewards current. It is never sent to a third party and never used for tracking. Unless you turn on Web Access, which keeps it with your web account, it isn’t linked to you. The app does not call any analytics service.

On this website (trackmiles.app): We use Microsoft Clarity to understand how visitors use the marketing site: aggregate page views, scroll depth, click patterns, and session replays. You can turn Clarity off: choose “No thanks” on the notice shown on your first visit, and recording stops immediately and stays off. Your choice is stored in your browser so we don’t ask again; clearing site data resets it. Clarity automatically masks form inputs and other sensitive content by default. The marketing pages have no forms apart from the VIN box on the car recall check: the VIN you type is sent to our server, which passes it to NHTSA’s public databases and keeps the answer for up to a day so repeat lookups are quick. We don’t link it to you or use it for anything else. Clarity never runs on the signed-in web app at trackmiles.app/app. Microsoft processes the data per their privacy statement. Under Clarity’s terms Microsoft may also use this data, as an independent party, to provide and improve Microsoft Advertising. Clarity uses cookies; you can block it through your browser’s tracking-prevention settings or by blocking cookies for this site.

Cloudflare Web Analytics on this website: Cloudflare, our hosting provider, counts page views and page load times on the marketing site with Cloudflare Web Analytics. It sets no cookies, doesn’t fingerprint your device and doesn’t identify you; Cloudflare processes it per its privacy policy.

Google Ads on this website: We advertise Miles with Google Ads, and the website loads Google’s ad tag (gtag.js) to measure which ads bring visitors here and when a visitor taps through to the App Store. Google receives the page address, your browser’s details, an ad click identifier if you arrived from an ad, and that App Store tap, and sets cookies to connect them; Google may also use this for its own ad services, including showing Miles ads to past visitors. The same notice and the same “No thanks” turn it off. In the European Economic Area, the United Kingdom and Switzerland, Google’s ad cookies stay off until you choose “OK”. Google processes the data per its privacy policy; you can also manage ad personalisation at My Ad Center. Neither tag runs inside the iPhone app or on the signed-in web app at trackmiles.app/app.

Purchases

Miles Premium is sold through Apple’s in-app purchase system. Apple handles the transaction. We do not receive your payment information. We only receive a confirmation from Apple that an unlock occurred and a transaction ID. If you turn on Web Access, the app also sends Apple’s signed purchase record to our server so it can confirm Premium (see Web Access). See Apple’s Privacy Policy for how Apple handles purchase data.

Children

Miles carries a 4+ App Store age rating, which reflects its content and is set independently of how we handle children’s data. Separately, Miles is not directed to children under 13, and we do not knowingly collect personal information from children.

Your rights and choices

Because Miles stores your data locally on your device (and optionally in your private iCloud account), you have full control over it at all times:

• You can delete individual records or vehicles from within the app.
• You can disable iCloud sync at any time in Miles’ settings or in your device’s iCloud settings.
• Deleting the app from your device removes all locally stored data. To remove iCloud-synced data, you may also need to remove Miles data from iCloud in your device’s iCloud settings.
• If you use Web Access, you can turn it off in the app at any time, or delete everything our server holds for you with Delete Web Account in Settings > Web Access, or “Delete web data” on trackmiles.app/app.

Security

Your data is protected by the security features of your device and your iCloud account. If you use Web Access, the copy on our server is only shown to someone signed in with your Apple Account. We recommend using a passcode or biometric authentication on your device and enabling two-factor authentication on your Apple ID.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be surfaced in-app. Continued use of the app after any changes indicates acceptance of the updated policy.

Contact

For privacy questions, data access requests, or data deletion requests, please contact us at privacy@trackmiles.app. For general help, see support.