Privacy Policy

ControlMiles is developed by Olympus Mont Systems LLC ("we", "us", "our"). This Privacy Policy explains what information ControlMiles (the mobile app and the website at controlmiles.com) collects, how we use it, who we share it with, and the choices you have. If you join or create an organization (Fleet account), the Fleet Privacy Policy (controlmiles.com/privacy/fleet) also applies to the data you record under that organization.

Account information: your email address, your first and last name, and the account type you choose (personal driver, fleet owner/administrator, or fleet driver). If you sign in with Google, we receive your name, email address, and Google account identifier from Google; we never receive your Google password.

Location data: with your permission, ControlMiles records precise GPS location while you are tracking a trip, including in the background while a trip is running. We store the route of each trip (a trail of GPS points) together with its mileage, so the trip can be shown on a map and in your reports. If you use Automatic Detection, the app also uses location in the background to detect when a trip starts or stops. Location is not recorded when no trip is active and Automatic Detection is off.

Motion activity: with your permission, ControlMiles uses your device's physical-activity recognition (for example "in vehicle" vs. "still") to help detect trips and filter out GPS noise. This is processed on your device.

Odometer photos: when you start or end a trip, ControlMiles may ask you to photograph your vehicle's odometer. The number is read on your device (on-device text recognition), and the photo is uploaded to our cloud storage as evidence supporting your mileage records.

Vehicle and trip information: the vehicles you add, trip start/end times, mileage, the gig platform or business purpose you associate with a trip, and any notes you choose to add.

Gig-app detection (optional, premium feature): if you enable Automatic Detection, ControlMiles uses Android's Usage Access permission to identify which app is in the foreground on your device, so it can suggest or start a trip. It only reads the name of the app on screen -- never the contents, account, trip data, or earnings of any third-party app. You can turn this off at any time.

Purchases: if you buy a subscription, the payment is processed by Google Play (in the app) or Stripe (on the website). We receive the subscription status, plan, and transaction identifiers -- never your full card number.

Device and diagnostic information: device type, operating-system version, app version, and crash or error reports (including the screen or step where the error happened), used for troubleshooting and security.

Website data: the website uses cookies that are strictly necessary to keep you signed in and to remember your language. We do not use advertising or cross-site tracking cookies.

To provide the service: recording, calculating, and reporting your mileage; drawing your trip routes; generating PDF/CSV reports; storing your evidence photos. To protect the integrity of mileage records: trips are checked by automated anti-fraud rules (for example impossible speeds or GPS jumps), and a summary of each closed trip may be sent to our own trip-integrity service, which records a tamper-evident cryptographic seal of that trip. To operate premium features you enable, such as automatic trip detection. To send service emails (for example account confirmation, password changes, and security notices). We do not send marketing email without your consent. To maintain your account, respond to support requests, and secure the service against fraud or abuse. We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use third-party advertising networks.

Maps in ControlMiles are drawn from map data by OpenStreetMap contributors, packaged by Protomaps and hosted for us on Cloudflare's storage network. To show a map, your device downloads map tiles from that storage and map fonts and icons from Protomaps' public servers (hosted on GitHub Pages). Those requests reveal your device's IP address and the general area being displayed to the hosting provider, as with any website, but they do not include your name, email, or account.

For fleet trips, ControlMiles may look up the posted speed limit near a point where the vehicle appears to be speeding. That lookup sends the coordinates of that point -- and nothing else about you -- to the public OpenStreetMap Overpass API (overpass-api.de), operated by a third party.

Map data © OpenStreetMap contributors, available under the Open Database License (ODbL). Map attribution is shown on every map in the app and on the website.

Fleet/organization accounts: if you join or create an organization (Fleet mode), the data you record under that organization is visible to its administrators as described in the Fleet Privacy Policy. Personal (gig-mode) trips are not shared with any organization.

Service providers that process data on our behalf, only to run ControlMiles: Supabase (database, authentication, file storage, and server functions); Vercel (website hosting); Cloudflare (map tile hosting); Resend (delivery of service emails); Stripe (website payments); Google (Google Play billing and Google Sign-In); and our own trip-integrity and error-monitoring service.

Map services: Protomaps' public servers and the OpenStreetMap Overpass API, as described in Section 4.

We may also disclose information if required by law, or to protect the rights, property, or safety of ControlMiles, our users, or others, and in connection with a merger, acquisition, or sale of assets (subject to this Policy).

ControlMiles lets you label trips with the name of the gig platform you were working for, and, if you enable Automatic Detection, can recognize when one of those apps is open on your device.

ControlMiles is an independent, third-party tool. It is not affiliated with, endorsed by, sponsored by, or officially connected to any gig, delivery, or rideshare platform referenced in the app. All product names, logos, and brand names are trademarks of their respective owners, used here only to describe compatibility. ControlMiles does not access, read, or store any data from those platforms' own apps, accounts, or servers -- it only knows the name of whichever app is currently on your screen.

We retain your trip, route, vehicle, and account data for as long as your account is active, or until you delete individual trips or your entire account. Deleting your account permanently removes your data, including routes and uploaded evidence photos, from our active systems; residual copies in encrypted backups are overwritten on the backup rotation schedule. Cryptographic trip seals contain a short trip summary (trip and vehicle identifiers, miles, duration, and the account email) but no photos or routes, and may be kept to preserve the integrity of the audit chain. Billing records may be kept as long as tax and accounting law requires.

You can delete individual trips at any time from the History screen. You can delete your account at any time from Settings (in the app) or from the website -- this is permanent and cannot be undone. You can revoke location, physical-activity, camera, notification, or Usage Access permissions at any time from your device's system settings; doing so will limit or disable the corresponding features. You can turn Automatic Detection off at any time.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you the right to: know what personal information we collect and how we use it; request deletion of your personal information; correct inaccurate personal information; limit the use of sensitive personal information (such as precise location) -- which we only use to provide the service you request; and not be discriminated against for exercising these rights. We do not sell or share your personal information for cross-context behavioral advertising.

Residents of other U.S. states with comparable privacy laws (for example Maryland, Virginia, Colorado, Connecticut, Oregon, Texas, and Utah) have similar rights, including the right to access, correct, delete, and obtain a copy of their data, and to appeal our decision on a request. We honor these rights on the same basis.

To exercise any of these rights, contact privacy@controlmiles.com. We may need to verify your identity before responding.

If you access ControlMiles from outside the United States, your information will be transferred to and processed in the United States. If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have additional rights under the GDPR or UK GDPR, including the right to access, correct, delete, or port your personal data, and the right to object to certain processing. Contact privacy@controlmiles.com to exercise these rights.

ControlMiles is not directed at children and is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

We use industry-standard measures to protect your information, including encrypted connections, access controls enforced at the database level, and tamper-evident trip records. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security. Report security issues to security@controlmiles.com.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notice in the app, on the website, or by email.

Privacy questions and data-rights requests: privacy@controlmiles.com. Support: support@controlmiles.com.