Privacy policy

1. Who we are

MileSprout is made by Travis Britton, trading as MileSprout, a sole trader in the United Kingdom. For the small amount of personal data we do handle (mainly emails you send us), we are the data controller under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Postal address: [address]
Email: [email protected]

2. What the app keeps on your phone

To be a mileage log, MileSprout has to keep a record. All of it is stored on your iPhone:

• Trips: when each drive started and ended, the start and end place (an address or a name you gave it), the distance, the route as GPS points, whether it was Work or Personal, its purpose, and any parking, tolls or notes you add.
• The edit history of your trips, so a tax office can see which trips were recorded while driving and which were changed later.
• Places you save (such as "Home" or a depot), your shifts and breaks, your work hours, your vehicles, odometer readings, logbook periods and car costs.
• Earnings you add, typed in or read from a screenshot, for the Money tab.
• Your settings, such as your country, language and reminders.

This is kept in a database encrypted with AES-256 (SQLCipher). The key is kept in your iPhone's Keychain. A few small settings (for example your country, language, and the totals shown when the app opens) are kept in the Keychain as well.

If you turn on client privacy mode, a stop you haven't named yourself is stored as the area only (for example "Client visit · Leeds LS6"), never the street or house number, and no GPS route is kept.

3. Location and Motion & Fitness

Location. MileSprout asks for location access set to "Always" so it can notice when you start driving, even when the app is closed. While you're parked it uses low-power location updates; GPS runs while you drive. Your location is used on your phone to record trips and is never sent to us. You can change this any time in Settings → MileSprout → Location. With "While Using" or no access, you can still add trips by hand.

Motion & Fitness. If you allow it, MileSprout reads your iPhone's motion activity (in a vehicle, walking, cycling, still) for the minutes around a detected drive, so a walk isn't logged as a drive. It reads this on your phone, doesn't store it with your trips and never sends it anywhere. You can change this in Settings → MileSprout → Motion & Fitness.

4. iCloud backup

If you're signed in to iCloud with iCloud Drive on, MileSprout backs up your data by itself, about once a day when something has changed. You can also start one from Settings → Backup & data in the app.

• Each backup is compressed and encrypted on your iPhone (AES-256-GCM) before it is written. Only the encrypted file goes to iCloud.
• It's stored in MileSprout's own private folder in your iCloud Drive (the app's iCloud container), not in the Files app and not on any server of ours.
• The key is kept in your iCloud Keychain, which Apple end-to-end encrypts, so you can restore on a new iPhone signed in to the same Apple Account. Neither we nor Apple can read the backups. If iCloud Keychain isn't available, the key stays on your phone only, and the app tells you those backups can't be restored on another iPhone.
• The newest four backups are kept; older ones are deleted.

To stop iCloud backups, turn off iCloud Drive for MileSprout in Settings → [your name] → iCloud. Separately, if you use iCloud Backup or back up your iPhone to a computer, that backup includes MileSprout's (encrypted) database. Apple's iCloud is covered by Apple's privacy policy.

5. Apple services the app uses

These services are built into iOS. When the app uses them, the data goes to Apple, not to us, and Apple handles it under its own privacy policy.

• Place names and address search. To show "Hyde Park" or a street address instead of coordinates, the app asks Apple's location services to look up the start and end points of a trip. When you type an address to add a trip or save a place, what you type is sent to Apple Maps search to suggest matches.
• Maps. Trip routes are drawn on Apple Maps. Your iPhone loads map images from Apple for the area on screen.
• App Store purchases. MileSprout Pro is an App Store subscription. Apple takes the payment and manages the subscription. The app checks whether your subscription is active with the App Store on your phone; we don't receive your name, Apple Account or payment details. Apple gives developers sales reports, which don't identify you.
• Crash reports and app analytics from Apple. If you've chosen "Share with App Developers" in Settings → Privacy & Security → Analytics & Improvements, Apple may share crash reports and usage statistics with us through App Store Connect. These don't identify you. You can turn this off there.

6. Other features, and where their data goes

• Screenshot scan. To fill in earnings, you can pick one screenshot. iOS gives the app only that image, not your other photos. The text is read on your iPhone with Apple's Vision framework; nothing is uploaded. Only the figures you confirm are saved.
• Weekly recap and Ask MileSprout. On iPhones with Apple Intelligence, these use Apple's on-device language model. Your figures and questions are processed on your iPhone and aren't sent to us.
• Live Activity. While you're on shift, your shift time, miles and their value can show on the Lock Screen and in the Dynamic Island. Anyone who sees your locked phone can see them. It's updated by the app on your phone, not by a server. Turn it off in the app under Settings → Your driving → Show shift on lock screen.
• Siri & Shortcuts. So Siri can answer "how far have I driven today?" without opening the app, MileSprout keeps a small summary (today's and this week's work miles, drives and their value) in a storage area on your iPhone that the app shares with its Siri actions. It stays on your phone and is protected by iOS, but it sits outside the encrypted database.
• Reminders. Reminders (such as a weekly nudge or a tax deadline) are scheduled on your phone. MileSprout doesn't use push notifications and has no notification server.
• Exports and reports. PDFs, spreadsheets and CSV files are made on your phone. When you share one, you choose where it goes using the iOS share sheet; after that, the app or person you sent it to is responsible for it.
• Invites. Invite codes are made on your phone and shared by you. A friend redeems an invite offer through the App Store, which Apple handles. In the current version invite codes stay on your phone. If we later check invites through iCloud, we'll update this policy before that version is released.
• Perks. The offers on the Perks tab are a demo with made-up brands. A perk code is made on your phone, is random, and contains nothing about you, your trips or your phone. Your claimed codes are kept on your phone only. If a code's QR is scanned, the scanning device opens a page on this website that contains only the code.

7. What we receive

From the app: nothing that identifies you. MileSprout has no account, no sign-in, no advertising, no analytics or crash-reporting software, and makes no connection to a server of ours. We never receive your location, trips, places, earnings or any other personal data from the app, and we don't sell or share data with anyone.

The only personal data we hold is what you choose to send us, such as an email to [email protected] or a waitlist sign-up (section 9), plus the anonymous Apple reports described in section 5.

8. This website and email

• No cookies, analytics or trackers. This site has no cookies, no third-party scripts or fonts and no embedded content. Its one small script, our own, animates the pictures and sends the waitlist form; it doesn't track you.
• Hosting. The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes your IP address and browser details to deliver pages and protect the site from attack. We don't use these to identify you. See Cloudflare's privacy policy.
• Email. Mail to our @milesprout.app addresses is forwarded by Cloudflare Email Routing to our inbox. We use what you send only to reply and to help you, and we delete support emails when they're no longer needed (normally within two years).

Our lawful basis for handling your emails and the website's security logs is our legitimate interest in answering you and keeping the site running safely.

9. Waitlist

Before launch you can join our waitlist on this website.

• What we keep. Your email address, what you drive for and your country if you choose to tell us, which form you used, and the time you gave consent. Nothing else: not your IP address, not your browser details.
• What for. To email you when MileSprout launches. We'll only send other launch news if you've agreed to it. We never sell or share your email, and never use it for advertising.
• Where. In a Cloudflare D1 database. Cloudflare stores and processes it for us, as our processor.
• How long. Until 12 months after launch, or sooner if you unsubscribe (every email has a link) or ask us to delete it at [email protected].
• Lawful basis. Your consent, which you give by ticking the box. You can withdraw it any time.
• Founding testers. If you sign up to test the app at milesprout.app/testers, we keep the same details plus a tag for the group or link you came from and, if you tell us, which iPhone you have, and use them to send your TestFlight invite, testing updates and the launch email.

10. Keeping and deleting your data

• Your records stay on your phone until you delete them. You can delete a trip, a place, earnings or a logbook in the app.
• Deleting the app removes its database from your phone. iOS may keep MileSprout's Keychain items (such as the database key and a few small settings) until you erase the phone; they don't contain your trips.
• MileSprout's iCloud backups stay in your iCloud until you delete them in Settings → [your name] → iCloud → Manage Account Storage → MileSprout.
• Because we don't hold your app data, there's nothing for us to delete on our side. To have an email to us or your waitlist sign-up deleted, ask at [email protected].

11. Your rights

Under UK data protection law you have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to data portability. Email [email protected] and we'll reply within one month. Your app data is already in your hands: Pro exports it as a PDF, spreadsheet or CSV.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to sort it out first.

Apple and Cloudflare may process data outside the UK. They're responsible for the safeguards they use for that.

12. Children

MileSprout is made for adults who drive for work. It isn't aimed at children under 13, and we don't knowingly collect data from them.

13. Changes to this policy

If we change how MileSprout handles data, for example a future feature that sends data off your phone, we'll update this page and the App Store privacy details before that version is released, and change the date at the top.