Privacy Policy

Last updated: 31 July 2026

hellomiles ("we", "us") is a Singapore-based app that helps you track credit card spending and the miles it earns. This policy explains what information the app handles, why, and the choices you have. The short version: we collect the minimum needed to run the app, we never sell your data, and you can delete everything at any time.

What we collect

Email address — only if you create an account, used solely to sign you in and sync your backup.
Spending records you enter — amounts, categories, dates and card nicknames you type or dictate. We never ask for, and cannot see, your full card number, CVV, bank login or statements. An optional "last 4 digits" field exists purely to help you tell your own cards apart.
Card photos (optional) — if you attach a photo of a card, it is stored with your data to display in your card list.
Voice input (optional) — when you hold the record button, audio is converted to text on your device by your phone's speech recognition. We store only the resulting text of the transaction you confirm; audio is never stored by us.

We do not collect location, contacts, advertising identifiers, or browsing history, and the app contains no ads and no third-party analytics or tracking SDKs.

Where your data lives

Without an account, everything stays on your device. With an account, your data is backed up to our database hosted by Supabase, protected by row-level security so each account can only ever access its own records, and encrypted in transit (HTTPS/TLS). On your phone, sign-in tokens are encrypted and the key is kept in the iOS Keychain / Android Keystore.

How we use it

To run the app: calculating miles, caps and recommendations happens from the data you entered.
To sync your backup across your devices when signed in.
To respond when you contact us.

We do not sell or rent personal data, and we do not use it for advertising. Card recommendations shown in the app are computed from your own data and public card rate information — they are never influenced by commercial arrangements.

Deleting your account and data

In the app: Settings → Delete Account. This permanently erases your account and cloud backup immediately.

By email: if you can't access the app, write to hello@hellomiles.sg from your registered email and we will delete your account within 7 days.

Data stored only on your device is removed when you delete the app.

Retention

We keep your data only while your account exists. Deleted accounts are erased from the live database immediately; residual copies in encrypted backups of our database provider expire on their standard rotation schedule.

Your rights

Under Singapore's Personal Data Protection Act (PDPA) and similar laws elsewhere, you may request access to, correction of, or deletion of your personal data at any time via hello@hellomiles.sg.

Children

hellomiles is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes materially, we'll update this page and note it in the app. Continued use after changes means you accept the updated policy.

Contact

hellomiles · Singapore · hello@hellomiles.sg