Privacy Policy
Our Privacy Core Principle:
VaultMileage is built as a local-first, offline application. We do not have user accounts, we do not use cloud databases to sync your trips, and we have no access to your location logs or financial records. Your trips, receipts, vehicle data, and tax records stay on your device unless you choose to export them.
1. Location Data Collection & Usage
Unlike traditional mileage tracking apps, VaultMileage does not perform background GPS polling or continuous location tracking. We believe background location tracking is intrusive, drains phone batteries, and is unnecessary for tax logs.
VaultMileage calculates mileage and coordinates through the following user-initiated features:
- Odometer Loggers: You manually enter start and end odometer numbers. No coordinates or map locations are read or saved.
- 1-Tap Route Templates: You manually select predefined start and destination points. The app calculates route distance and details locally on your device without accessing live GPS.
2. Storage and Sandbox Security
All recorded logs, vehicle profiles, custom tax rates, and receipt images are stored exclusively inside the app's secure private sandbox directory. This sandboxed local database is protected by the mobile operating system's security boundaries and is inaccessible to other applications.
3. Encrypted Backups & Portability
VaultMileage provides an encrypted offline backup feature allowing you to transfer data between devices:
- Backups are compiled into a single `.smtbackup` payload.
- The payload is fully encrypted on your device using AES-GCM decryption with a key derived via PBKDF2 (120,000 SHA-256 iterations) from your unique recovery code.
- VaultMileage does not store the backup file or the recovery code. Both exist only on your local system or wherever you manually choose to share the file (e.g. Email, Google Drive, or local storage).
4. Advertising and Analytics
VaultMileage is entirely ad-free. We do not integrate advertising SDKs, sell data, or build behavioral advertising profiles. The app sends limited product-usage events to Firebase Analytics and Rahat Labs' SignalCore service to measure reliability and feature performance. These events may include app opens, onboarding completion, paywall and purchase actions, export actions, coarse count or distance brackets, and reminder interactions. They never include GPS coordinates, addresses, route names, notes, receipt contents, vehicle plates, tax records, or exported files.
5. Billing & Subscription Management
All in-app purchases and subscription transactions (Pro) are processed securely through the Google Play Store or Apple App Store. VaultMileage does not collect or store your payment details, billing address, or credit card numbers.
6. Changes to This Policy
We may update our Privacy Policy to reflect app updates or security refinements. Any changes will be updated on this page with an adjusted "Last Updated" date.
7. Contact Support
If you have any questions about this Privacy Policy or our offline-first design philosophy, please contact our support team at support@vaultmileage.app.