Privacy

This page covers the FlatMile iPhone app and website, including information collected by the earlier launch waitlist.

Your mileage records

The app records and stores your drive history on your iPhone. FlatMile does not create an app account or upload your drives, routes, addresses, business-purpose notes or vehicle details to our own servers. Location permission allows the app to record drives; Bluetooth can help attribute a drive to a vehicle.

You choose whether and where to share an export. CSV export remains available without a subscription. If you turn on backup in the app, FlatMile keeps a copy of your mileage log in a FlatMile folder in your own iCloud Drive, so your drives survive deleting the app or changing iPhone. The backup includes where you drove. FlatMile cannot read your iCloud; the backup leaves your Apple account only when you export it. We do not operate cloud sync or hold a copy of your drives ourselves, so we cannot restore them for you. Device-level iCloud backup, if enabled, is provided by Apple.

Lock Screen Live Activities

When Show drives on the Lock Screen is on, FlatMile sends an ActivityKit push-to-start token to a relay operated for FlatMile through Cloudflare. If automatic capture confirms a drive while the app is not on screen, it sends that token, a random journey identifier and the drive’s start time to the relay. App Attest security data is used to protect registration and requests. The relay asks Apple Push Notification service to start a generic FlatMile Live Activity; your iPhone then updates and ends it locally.

The relay does not receive your coordinates, route, addresses, distance, vehicle, purpose, notes, tax country, mileage value, email address or advertising identifier. It has no database and does not log request contents. Cloudflare’s short-lived cache holds only hashed rate-limit and security counters for at most one hour; raw tokens and journey identifiers are not written there. Cloudflare and Apple receive the network requests needed to deliver the Live Activity.

Turn off Settings → Lock Screen and notifications → Show drives on the Lock Screen to stop future relay registration and start requests and remove the saved relay credential from your iPhone. Automatic capture and your mileage log keep working; only the Lock Screen presentation is disabled.

Optional analytics in the app

If your App Store country is outside the European Economic Area, usage analytics is on when you first install FlatMile, and the first setup screen says so. In the European Union, Iceland, Liechtenstein and Norway, it is off until you choose to share it. Either way, when it is on, PostHog, hosted in the European Union, receives selected product events such as onboarding, classification, report export and subscription-screen interactions. Events can include your chosen tax country, app and iOS versions, device model, language, a device-scoped identifier and session information.

We do not include trip coordinates, routes, addresses, notes, vehicle or Bluetooth identifiers, or email addresses in these analytics events. We do not enable session recordings. This data is pseudonymous, not anonymous. Like other network services, the analytics provider receives the connecting IP address.

Turn it on or off at any time in Settings → Privacy → Share usage analytics. Turning it off or declining does not change capture, reports or purchases. Withdrawing stops future analytics collection and discards pending app analytics events; it does not automatically delete events already received. Contact us for a deletion request.

Purchases and subscription status

Apple handles App Store payments. RevenueCat helps the app validate purchases, restore access and determine subscription status. This operational processing is separate from optional usage analytics and continues when analytics is off. RevenueCat also sends subscription events (a trial starting or ending, a renewal, a cancellation, an expiry, a billing problem, and the amount in US dollars) to our PostHog project in the European Union. When usage analytics is on, they carry the same device-scoped identifier as your app events; when it is off, they carry only RevenueCat’s own anonymous purchase identifier and are not linked to any app usage. It includes app-scoped purchase identifiers and transaction or entitlement information. When the app opens, it also passes RevenueCat a token from Apple, which RevenueCat uses to ask Apple whether the download followed an Apple Ads advertisement in the App Store and, if it did, which campaign, ad group, keyword and country or region that ad belonged to. We use this only to measure whether our advertising works; it does not use your device’s advertising identifier, FlatMile does not ask for tracking permission, and none of it is added to optional usage analytics. We do not receive your payment-card details. See Apple’s privacy policy and RevenueCat’s privacy policy.

Website analytics and your choice

Outside the European Economic Area, website analytics is on when you first visit. In the European Union, Iceland, Liechtenstein and Norway, nothing is sent until you accept it. We use the country Cloudflare reports for your connection to decide which applies and do not store it. If your browser sends a Global Privacy Control signal, analytics stays off unless you turn it on.

When analytics is on, PostHog, hosted in the European Union, receives page visits, App Store link clicks and use of the public resources. Events include the public page address without query strings or fragments, the page’s content revision where available, fixed interaction labels and a random identifier kept in your browser tab while analytics is on. Like other network services, PostHog receives the connecting IP address and browser request headers. We do not send referring-site addresses, campaign values taken from incoming links, mileage records, email addresses, CSV contents, routes, business-purpose notes or calculator inputs. We do not load analytics or advertising scripts, automatically capture every interaction, or enable session recordings.

You can accept, decline or change this choice using Analytics preferences in the footer. The site remembers your preference in your browser. Turning analytics off stops new event requests, cancels pending requests where possible and clears the tab’s analytics identifier. A request already received by PostHog cannot be recalled by turning analytics off; contact us for a deletion request. Older analytics cookies may remain until you clear the site’s data in your browser, but the current website does not read or reuse them. CSV checking and calculations still run in your browser. Essential hosting requests are processed by Cloudflare to deliver and protect the site.

Fonts

The website serves its font files from the same site. Viewing the page does not make a Google Fonts request.

App Store links

When you follow a download link, Apple receives the request under its own privacy terms. A link may include a campaign label so we can understand which page led people to the App Store. It does not include your mileage records or email address.

Earlier waitlist entries

The launch website previously collected an email address, an optional price-research answer, the signup page, first-touch landing and referring-site information when available, optional campaign tags, time, browser user-agent and country derived by Cloudflare. The waitlist did not store IP addresses itself. An email-domain delivery check sent only the domain to Cloudflare’s DNS resolver; the result was not kept.

Entries were stored in Cloudflare Workers KV on the basis of the consent given at signup. They are kept until the launch message has been sent and subscribers have had the chance to hear about it, or until deletion is requested, whichever comes first. The website no longer asks visitors to join that list. If you previously joined, email us to withdraw consent or request deletion. Joining was not a purchase or an app account.

Support messages

If you email us, we receive your address and whatever information you send so we can answer. Include only what is needed to explain the issue. You do not need to send your full mileage history to ask for help.

Your rights

You can ask for a copy of your personal data, ask us to correct it, or ask us to delete it. Email hello@flatmile.com; no account or form is required. We will act within 30 days. If you are in the EU or UK, you can also complain to your national data protection authority. App records held only on your own phone must be exported or deleted on that device.

Changes

The date above identifies this version. Material changes will be described on this page.

FlatMile is made by Reklit BV in the Netherlands, which is responsible for the personal data described on this page. Contact: hello@flatmile.com.