Privacy Policy.

Milesmith, a sole proprietorship at 4135, Sobha Sentosa, Balagere, Bengaluru, Karnataka - 560087, runs Milesmith and decides how your personal data is used. Under India's Digital Personal Data Protection Act, 2023 we are the data fiduciary. This policy says what we collect, why, who we share it with and what you can do.

Account. Your mobile number, your name, and an email address if you give one.

Wallet. The cards you add (the card product, never the card number), their points balances and tiers, the programmes you follow, and preferences such as your home airport.

From Gmail, only if you connect it. Balances, tiers, expiries and card signals found in mail from known banks and loyalty programmes. We keep these values. We do not store the mail itself.

Your questions. What you ask Miles AI, your searches and the answers, and your conversation history.

Payments. Your plan, its status and the reference numbers Cashfree gives us. Your card or UPI details go to Cashfree, not to us.

Technical data. Standard server logs such as IP address, app version and errors, kept for security and reliability.

To run Milesmith and personalise its answers, to bill you, to keep the service secure, to support you, and to meet legal duties. We do not sell your data and we do not use it for advertising.

Milesmith asks for Google's read-only Gmail permission. We read mail from about 20 known senders, your banks and loyalty programmes, and open nothing else. We cannot send, delete or move mail. The access token is stored encrypted.

To stop it, remove Milesmith in your Google Account under third-party access, or disconnect Gmail in the app. We stop reading at once. Values already extracted stay in your wallet until you delete them.

If our own rules cannot read your tier from a programme email, the text of that one email, with membership numbers and email addresses masked, can be sent to an AI model provider to read the tier, and tier images to a vision model. It is used only to answer that question.

Milesmith's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. No person at Milesmith reads your mail, except where you ask us for support, for security, or where the law requires.

We use these providers to run the service, and share only what each needs:

Cashfree Payments, to take payments. MSG91, to send one-time passwords. Google, for sign-in and the Gmail permission you grant. AI model providers, currently DeepSeek and Google Gemini, which receive your Miles AI question and the parts of your wallet needed to answer it. Resend, to send the confirmation email when you apply on the website. Amazon Web Services and Cloudflare, to host and deliver the service.

Some of these providers process data outside India. We share data with authorities only when the law requires it.

We keep your data while your account is active. You can delete your account yourself in the app: open Account, then Delete account. This cancels any subscription, disconnects Gmail, and deletes your personal data from our systems straight away, including your cards, balances, chats and preferences. If you email us instead, we do it within two weeks. We keep only what the law requires, such as payment and tax records, which our payment provider Cashfree also holds.

Under the DPDP Act you can ask for a summary of your data, ask us to correct or erase it, withdraw your consent, name someone to act for you if you cannot, and raise a grievance.

You can erase your account yourself in the app under Account, then Delete account. Email [email protected] to use any other right. If our reply does not settle it, you can complain to the Data Protection Board of India.

Data travels over HTTPS, Gmail tokens are encrypted at rest, and access is limited to what the work needs. No system is perfectly secure. If a breach affects you, we will tell you and the authorities as the law requires.

Milesmith is for people aged 18 and over. We do not knowingly collect data from anyone younger.

We may update this policy. The date at the top shows the latest version, and we will tell you in the app or by email before a material change takes effect.

When you apply on milesmith.club we collect your name, email, mobile number, the link to your public profile (such as LinkedIn), your answers to the application questions, and any suggestion you write. Applying does not create an app account.

We use this only to confirm your email, choose Founding Members, write to you about access, and contact you when the app opens. We send the confirmation link through Resend, and the application is stored on Cloudflare. Cloudflare Turnstile checks that the form is filled in by a person.

We keep your application for three months from the day you apply, then delete it. We delete it sooner whenever you ask. Email [email protected] to see, correct or delete it.

Email [email protected] or call +91 98118 02432. Our address is 4135, Sobha Sentosa, Balagere, Bengaluru, Karnataka - 560087.

Grievance Officer: Rajat Bansal, at the same email. We acknowledge a complaint within 48 hours and aim to resolve it within two weeks.