Privacy policy

Last updated: 6 November 2026

This policy explains what Mileverse stores about you, who handles it, and what you can do about it. We keep it short and say only what the app really does.

Who is responsible

Mileverse is run by Ajay Jaiswal, an individual, from India. For the purposes of the Digital Personal Data Protection Act, 2023 (DPDP Act), the owner is the data fiduciary. Contact for anything in this policy: [email protected]. When the app moves to a business developer account later, this policy will be updated to name it.

What Mileverse stores

If you explore the app without signing in, it shows sample data only. You cannot add your own programs until you sign in, so no programs, balances or history of yours are stored, on your phone or on our servers. The app keeps only its own settings on your phone, such as your usage-data choice.

If you sign in (with Google, or with Apple on iPhone), the following is saved to your account on our servers (see "Where your data is kept"):

• your account identity: with Google, your Google account ID, email address, and the name and profile photo link Google shares; with Apple, your Apple user ID and the email address Apple shares (which may be a private relay address); Mileverse does not ask Apple for your name;
• the programs you hold, with your balances and tiers;
• your expiry entries and your balance history;
• any custom programs you create.

Each account can only read and write its own data. You can never see another user's data, and they can never see yours.

Reminders are scheduled on your phone itself, using the expiry dates you entered. Mileverse does not send notifications from a server.

What is never stored

• Passwords or any other credentials for your airline, hotel or bank accounts. Mileverse never asks for them.
• Card numbers.
• Your precise location, contacts or microphone. The app does not ask for these permissions.

Where your data is kept

Account data is stored with Supabase, in its Mumbai (India) region. Supabase is our hosting and sign-in provider, and it processes your account data for us.

Signing in

You can sign in with Google. Mileverse asks Google only for your email address and basic profile information. It does not ask for access to your Gmail, Drive, contacts or anything else in your Google account. Google handles your Google password; we never see it. The app displays your email address on the Profile tab.

On iPhone and iPad you can also sign in with Apple. We ask Apple only for your email address, not your name. Apple may let you hide your real email behind a relay address, and if you do, that relay address is the one we receive. If you sign in with Apple, we keep a token Apple issues so that we can revoke Mileverse's access to your Apple ID when you delete your account.

Ads

Mileverse may show one ad on the Home screen. Ads are provided by Google AdMob. To show and measure ads, AdMob may use your device's advertising ID and other device and usage information. This is collected by Google, not by us, and is covered by Google's privacy policy.

Where the law requires it (for example in the European Economic Area and the UK), the app asks for your consent before ads are personalised, and shows ad choices in Profile. If you do not consent there, ads are not personalised. Where consent is not required, including in India, Google may show personalised ads; you can limit this by resetting or deleting your advertising ID in your phone's settings. The ad does not use your balances or other data you enter in the app.

On iPhone and iPad, the app asks permission through Apple's App Tracking Transparency prompt before showing personalised ads. If you decline, ads are not personalised.

Usage analytics (optional)

If you agree to share usage data, Mileverse sends a small set of usage events, not linked to your account, to PostHog (hosted in the EU) to learn how the app is used. It is off until you agree: after you add your first program, the app asks once whether you want to share it. You can change your answer at any time with Share usage data in Profile; when it is off, no events are sent.

The events cover: that the app was opened (and whether you are exploring or signed in), that the Home screen was viewed (with a rough count band of programs held, such as "1-3"), how far down Home you scrolled, that a program was added or a balance was updated (with only the program category, such as card, airline or hotel, whether it was a custom program, and whether the balance went up, down or stayed the same), whether an ad loaded, failed (with Google's error code) or was tapped, and that a reminder was opened (with its kind: expiry or out-of-date balance).

Events never include your balances, program nicknames, names, email address, tiers, dates or any text you type. Each event also carries basic technical details added by PostHog: the phone's make and model, operating system version (Android or iOS), app version, language, time zone and screen size. PostHog receives your IP address when an event is sent; we have switched off IP-based location lookup. Events are not linked to your account: the app does not identify you to PostHog, and it has IP-based location lookup, session replay and automatic crash capture switched off. PostHog assigns a random identifier to the app install so repeat visits can be counted.

Crash reports

To find and fix bugs, Mileverse sends crash reports to Sentry. Before a report leaves your phone, our code removes the user record, extra data, tags and request contents, and blanks out long numbers, email addresses and ID-like values in error messages, and the app does not attach your name or email. A crash report still includes technical device details, such as the phone model, operating system version and the app version, and the code location where the error happened. Like any web service, Sentry also receives your IP address when a report is sent. Crash reports are not linked to your account.

How long we keep data

• App settings on your phone (such as your usage-data choice) stay until you uninstall the app or clear its data.
• Account data is kept until you delete your account. It is then deleted from our servers immediately, together with everything linked to it. Our hosting provider, Supabase, keeps sign-in and security logs (which can include your email address and IP address) and may keep routine backups; these expire on their own schedule within a limited period.
• Usage events and crash reports are kept by PostHog and Sentry under their own retention settings, and are not linked to you.

Export and deletion

• Export: in the app, go to Profile, then Export my data. You get a file with your programs, holdings and balance history.
• Delete: in the app, go to Profile, then Delete all my data. If you are signed in this deletes your account and all its data.
• Without the app: see how to delete your account by email. We act on requests within 30 days.

Your rights under the DPDP Act

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• get a summary of the personal data we process and how we use it;
• have your data corrected or completed (you can edit it in the app);
• have your data erased (see "Export and deletion" above);
• withdraw your consent at any time, for example by switching off usage data, by deleting your account, or by changing ad choices where they are offered;
• get your grievance addressed;
• nominate another person to exercise these rights if you die or cannot do so yourself.

Grievance contact: Ajay Jaiswal, [email protected]. Write to this address with your request or complaint and we will reply within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

Children

Mileverse is not directed at anyone under 18, and we do not knowingly collect data from them. If you believe a child has an account, email us and we will delete it.

Changes to this policy

We may update this policy, for example when features change or the app moves to a business developer account. The date at the top shows the latest version. If a change matters for how we use your data, we will say so in the app.