Effective Date: October 28, 2026
Last Updated: October 29, 2026

Application: MileLedger
Service Provider: Cytrix Technologies LLC
Contact Email: support@mileledger.io

1. INTRODUCTION

Welcome to MileLedger, operated by Cytrix Technologies LLC (“MileLedger,” “Company,” “we,” “us,” or “our”).

We recognize that privacy is particularly important when an application handles information about where individuals travel, how they conduct business, and what they spend.

This Privacy Policy explains how we collect, access, use, store, disclose, retain, and protect personal information when individuals use the MileLedger mobile application, associated websites, and related services (collectively, the “Services”).

It also explains users' choices and privacy rights.

MileLedger is a mileage tracking, expense management, receipt scanning, and reporting application.

Certain features require access to location information, trip history, receipt photographs, expense records, and other information.

Our objective is to limit information processing to legitimate, disclosed purposes and maintain appropriate security and privacy practices.

Where applicable law requires consent, we will request it separately.

Nothing in this Privacy Policy waives rights or remedies protected by Applicable Law.

2. INFORMATION WE COLLECT

The following categories describe information MileLedger may process.

Actual collection and processing depend on enabled features, permissions, infrastructure, and application configuration.

2.1 Account and Identity Information

We may process:

• Name or display name;
• Email address;
• Account identifiers;
• Authentication information;
• Sign-in provider identifiers;
• Subscription status;
• Account preferences;
• Support communications; and
• Information voluntarily provided by users.

If users authenticate through Apple or another provider, MileLedger may receive authorized account identifiers and information provided through that service.

2.2 Precise and Approximate Location Information

Automatic mileage tracking may require access to precise device location information.

This may include:

• GPS coordinates;
• Trip origins and destinations;
• Routes and movement patterns;
• Dates and times;
• Distances;
• Location accuracy indicators;
• Speed or movement-related signals; and
• Stops and periods of inactivity.

Location information may reveal sensitive patterns, routines, and frequently visited places.

MileLedger processes relevant location information to provide mileage tracking and related features.

2.3 Background Location Tracking

Where enabled and authorized, background location processing may occur while the application is minimized, the screen is locked, the user is traveling, or the operating system permits background activity.

This processing supports automatic trip detection and mileage recording.

Users may modify location permissions through device settings.

Disabling permissions may prevent automatic tracking functionality.

The application must clearly disclose when background tracking is enabled and how users can disable it.

2.4 Motion and Activity Information

MileLedger may access authorized motion-related signals such as movement states, activity transitions, and sensor-derived information needed to identify vehicle travel.

We do not request unrelated health information merely because the operating system provides fitness or motion frameworks.

2.5 Mileage and Trip Records

Trip records may include dates, times, distances, business or personal classifications, trip purposes, notes, vehicle details, route information, mileage rates, odometer values, and user modifications.

We process these records to provide tracking, reporting, categorization, and historical recordkeeping.

2.6 Expense and Financial Record Information

When users manage expenses, MileLedger may process:

• Merchant names;
• Expense descriptions;
• Transaction dates;
• Amounts and currency;
• Taxes, tips, and discounts;
• Expense categories;
• Payment method descriptions;
• Business or personal classifications;
• Receipt details; and
• Related notes.

This information may qualify as sensitive or financial personal information under applicable privacy laws.

Users should avoid uploading unnecessary payment credentials or unrelated sensitive financial records.

2.7 Receipt Images and Documents

MileLedger may access receipt images and documents selected or captured by the user.

Receipts can contain merchant information, transaction details, partial payment card identifiers, addresses, and other personal information.

We process these materials to support receipt storage, OCR, expense categorization, and reporting.

2.8 OCR and Automated Information Extraction

MileLedger may use optical character recognition, image processing, machine learning, or artificial intelligence to extract receipt information.

The information may include text, merchant names, line items, quantities, prices, dates, taxes, and totals.

Implementation disclosure: The Company must verify whether receipt processing occurs exclusively on the device or involves an external provider before representing the processing method as a confirmed fact.

2.9 Reports and Exported Information

Reports and exports may contain personal, location, business, or financial information.

When users export or share documents outside MileLedger, those materials may become subject to the destination service's privacy and security practices.

2.10 Device and Technical Information

Depending on implementation, we may collect device type, operating system, app version, installation identifiers, IP address, connectivity information, language settings, crash logs, and performance diagnostics.

We use this information for compatibility, security, troubleshooting, and reliability.

2.11 Subscription and Purchase Information

Where purchases are handled through Apple's App Store, Apple generally processes payment credentials.

MileLedger may receive subscription identifiers, transaction references, entitlement status, renewal and expiration details, refund status, and other permitted billing metadata.

Receiving subscription metadata does not mean MileLedger receives complete payment card numbers.

2.12 Support Communications

Support requests may contain contact information, message content, screenshots, diagnostic details, and attachments.

We process these communications to respond to requests, troubleshoot problems, and maintain appropriate records.

3. HOW WE COLLECT INFORMATION

Information may be collected:

Directly from users: Through account registration, manual entries, receipt uploads, support inquiries, and record modifications.

Automatically through enabled functionality: Through authorized location services, motion sensors, and application diagnostics.

From platform providers: Through authentication, subscription, and operating system interfaces.

From service providers: Where needed to provide authorized services such as account management, infrastructure, or technical support.

Installing MileLedger does not provide unrestricted access to information stored on a device.

Protected information is subject to operating system permissions and applicable laws.

4. HOW WE USE PERSONAL INFORMATION

We may use relevant information to:

1. Provide mileage tracking and trip detection.
2. Record and categorize expenses.
3. Scan receipts and extract transaction information.
4. Generate reports and exports.
5. Create, maintain, and authenticate accounts.
6. Verify subscriptions and paid feature eligibility.
7. Investigate application errors and performance problems.
8. Prevent fraud and unauthorized access.
9. Respond to support inquiries.
10. Provide necessary account and security communications.
11. Comply with lawful obligations.
12. Improve product performance using appropriately limited information.

Where information is aggregated or de-identified, we will not describe it as anonymous if it remains reasonably linkable to identifiable individuals.

5. PRECISE LOCATION DATA: ADDITIONAL PROTECTIONS

5.1 Purpose Limitation

Location information is intended to support mileage tracking and related features.

It must not be repurposed for undisclosed tracking, unrelated behavioral profiling, or advertising without satisfying applicable disclosure and consent obligations.

5.2 User Controls

Users can control location permissions through supported device settings.

On iOS, these controls are generally available through:

Settings → Privacy & Security → Location Services → MileLedger.

Users may also access tracking controls provided within the Application.

5.3 Disabling Tracking

Revoking a location permission prevents further access through the relevant operating system authorization, subject to the operating system's behavior.

Previously stored records are not necessarily deleted automatically.

Users may request deletion of eligible stored information.

5.4 Location Sharing

Location information may be processed by service providers where necessary to support authorized functionality.

Any additional disclosure for advertising or unrelated commercial purposes requires appropriate legal review, notice, and applicable choices.

6. RECEIPT AND FINANCIAL INFORMATION PROTECTION

Receipts and expense records may reveal sensitive financial and business activities.

We seek to limit processing to purposes reasonably necessary for requested functionality and lawful operations.

Access should be restricted to authorized users, systems, and service providers with a legitimate need.

Where third-party OCR or AI providers are used, appropriate retention, use, and security safeguards must be assessed.

This Policy does not authorize unrestricted disclosure of private financial records.

7. ARTIFICIAL INTELLIGENCE AND MACHINE LEARNING

MileLedger may use automated technologies for receipt recognition, transaction parsing, categorization, and other supported features.

Processing may occur locally or through external services.

Where external providers process personal information on our behalf, the applicable arrangements should restrict processing to authorized purposes and require appropriate safeguards.

AI training disclosure: Before publication, the Company must confirm whether user receipt images, transaction information, or extracted text are retained or used for model training by any integrated provider.

The Company does not obtain unrestricted authorization to train general-purpose AI models on private user records merely through this Policy.

Users should verify automated outputs before relying on them for consequential purposes.

8. SHARING AND DISCLOSURE OF INFORMATION

8.1 Service Providers

We may use providers for hosting, storage, authentication, diagnostics, OCR, subscription management, technical support, and related operations.

Information shared should be reasonably limited to the provider's assigned functions.

8.2 Apple and Platform Providers

Apple may process information associated with app distribution, purchases, authentication, and platform services according to its own applicable privacy practices.

8.3 User-Directed Sharing

Users may choose to share reports, receipts, or financial information with accountants, employers, tax professionals, or other recipients.

Such sharing may be subject to the recipient's policies.

8.4 Legal Requests

We may disclose information in response to legally valid orders, subpoenas, or other binding legal process.

Where appropriate, we may review or challenge excessive or defective requests.

8.5 Rights and Safety

Information may be disclosed when reasonably necessary to investigate fraud, respond to security incidents, prevent unlawful activity, or protect legal rights, subject to Applicable Law.

8.6 Business Transactions

Information may be disclosed or transferred as part of a lawful merger, acquisition, restructuring, financing, or business asset transfer, subject to applicable confidentiality, notice, and privacy requirements.

8.7 De-Identified Information

Properly aggregated or de-identified information may be used for legitimate analytics and improvement purposes.

Where legally required, information will remain de-identified and not be reidentified except as permitted by law.

9. SALE OF PERSONAL INFORMATION AND TARGETED ADVERTISING

Implementation verification required: Cytrix Technologies LLC must confirm whether MileLedger or any third-party SDK sells or shares personal information, including identifiers or usage information, for targeted advertising.

The Company should not claim that no sale or sharing occurs until relevant integrations and data practices have been verified.

Where applicable laws recognize a sale or sharing of personal information, the Company will provide legally required disclosures and opt-out mechanisms.

We will not sell or share personal information in ways prohibited by law.

10. DATA STORAGE AND SECURITY

Cytrix Technologies LLC recognizes the importance of protecting mileage records, location histories, receipts, and financial information.

Appropriate safeguards may include:

• Encryption in transit;
• Encryption of stored information;
• Authentication and authorization controls;
• User account isolation;
• Restricted administrative access;
• Secure credential handling;
• Security monitoring;
• Vulnerability management;
• Secure software development;
• Backup and recovery controls; and
• Incident response procedures.

Specific safeguards must be verified against the actual implementation before being represented as active security measures.

No electronic system can guarantee absolute security.

The Company will comply with applicable information security and breach notification obligations.

Users are responsible for maintaining reasonable device and account security.

11. DATA RETENTION

Information is retained only as reasonably necessary for disclosed purposes, subject to legal, operational, security, and contractual obligations.

Retention approaches include:

Implementation requirement: The Company must confirm actual retention periods or meaningful retention criteria, including backup and third-party processing lifecycles, before publication.

We will not retain identifiable information indefinitely without an appropriate purpose or legal justification.

12. ACCOUNT DELETION AND PERSONAL DATA DELETION

12.1 In-App Account Deletion

MileLedger will provide account deletion functionality in accordance with applicable App Store requirements.

Deletion Path: More → Privacy and Security → Delete All Trip Data (erases local trips, vehicles, expenses, and saved places on device). For cloud/account deletion requests, email support@mileledger.io.

12.2 Deletion Requests

Users may contact:

Cytrix Technologies LLC
support@mileledger.io

Suggested Subject: MileLedger Data Deletion Request

We may request information reasonably necessary to verify the account holder's identity.

12.3 Effects of Deletion

Deletion may result in the loss of access to stored mileage records, receipts, expenses, reports, and account preferences.

Users should export important information before deleting an account, where supported.

12.4 Legal Exceptions

Certain information may be retained when reasonably necessary and legally permitted for tax obligations, transaction records, fraud investigations, security, disputes, or legal claims.

12.5 Backup Deletion

Deleted information may remain temporarily in protected backups until those backups expire or are deleted under the established retention schedule.

Such information should not be restored to active use except for legitimate recovery or legal purposes.

12.6 Subscription Cancellation

Deleting an account does not automatically cancel an Apple-managed subscription.

Users must cancel subscriptions through the applicable billing provider.

Account deletion does not eliminate legally protected refund rights.

13. USER PRIVACY CHOICES

Depending on functionality and Applicable Law, users may:

• Review and update account information;
• Correct mileage and expense records;
• Delete eligible records;
• Manage location permissions;
• Disable background tracking;
• Manage notifications;
• Withdraw optional permissions;
• Export supported records;
• Request access, correction, or deletion; and
• Exercise applicable privacy opt-out rights.

Disabling certain permissions may affect functionality.

Withdrawal of consent does not necessarily invalidate lawful processing completed before withdrawal.

We will not unlawfully discriminate against individuals for exercising privacy rights.

14. CALIFORNIA PRIVACY RIGHTS

Where the California Consumer Privacy Act, as amended, applies to Cytrix Technologies LLC, eligible California residents may have rights to:

1. Know what personal information is collected and processed.
2. Request access to specific information.
3. Request deletion, subject to exceptions.
4. Correct inaccurate information.
5. Opt out of qualifying sales or sharing.
6. Limit certain uses of sensitive personal information.
7. Exercise rights without unlawful discrimination.

14.1 Categories of Information

Depending on actual data practices, relevant categories may include identifiers, account details, location data, commercial information, financial records, app activity, user-submitted content, and diagnostics.

14.2 Notice of Collection

Where required, MileLedger will provide the categories, purposes, and relevant retention details at or before collection.

14.3 Recipients

Recipients may include authorized infrastructure, authentication, payment, receipt-processing, support, and related service providers.

Actual disclosures must be verified.

14.4 Exercising California Rights

Requests may be directed to:

support@mileledger.io

Suggested Subject: California Privacy Rights Request

We will respond within legally required periods and may request reasonable identity verification.

Authorized agents may submit requests where permitted.

14.5 Opt-Out Choices

Where applicable, the Company will provide required controls concerning sale, sharing, and certain uses of sensitive information.

15. OTHER UNITED STATES PRIVACY RIGHTS

Residents of certain U.S. states may have additional rights concerning access, correction, deletion, portability, targeted advertising, profiling, and sale of personal information.

These rights depend on the applicable law and whether it covers the Company and the processing activity.

Users may direct requests to support@mileledger.io.

Where required, the Company will provide an appeals mechanism for denied requests.

16. INTERNATIONAL USERS AND GDPR-RELATED RIGHTS

Where the GDPR, UK GDPR, or comparable laws apply, Cytrix Technologies LLC will process personal data according to relevant requirements.

16.1 Data Controller

Cytrix Technologies LLC is the intended controller for personal information processed for its own purposes, unless another entity independently controls a particular processing activity.

16.2 Legal Bases

Depending on the activity and jurisdiction, processing may rely on:

• Performance of a contract;
• Consent;
• Legitimate interests that are not overridden by individual rights; or
• Compliance with legal obligations.

The relevant basis must be determined for each processing activity.

16.3 Individual Rights

Applicable rights may include access, correction, erasure, restriction, objection, portability, withdrawal of consent, and complaints to a competent supervisory authority.

16.4 International Transfers

Data may be processed outside a user's country where international infrastructure or providers are involved.

Where required, appropriate transfer safeguards must apply.

Hosting locations and transfer mechanisms must be verified before publication.

16.5 Automated Decision-Making

Receipt extraction, trip classification, and expense categorization may use automated processing.

These features are intended to support recordkeeping rather than make decisions that determine credit, employment, or similar legally significant outcomes.

If such functionality changes, additional disclosures or protections may be required.

16.6 Representatives and Data Protection Officers

Where applicable law requires an EU or UK representative or Data Protection Officer, the Company will identify the relevant representative and contact information.

17. CHILDREN'S PRIVACY

MileLedger is intended for adults and is not directed toward children under 13 or any higher applicable minimum age.

We do not intend to knowingly collect personal information from children in violation of law.

Where unauthorized collection is identified, we will take appropriate steps, including deletion where required.

Parents or guardians may contact support@mileledger.io.

18. ANALYTICS AND DIAGNOSTICS

MileLedger may use analytics and diagnostic systems to identify crashes, improve reliability, and understand application performance.

This may involve device details, application interaction information, crash reports, and performance metrics.

Third-party SDKs and their collection practices must be verified.

Where consent or opt-out rights apply, corresponding controls will be provided.

Precise location histories, receipts, and financial records should not be sent to analytics providers unless necessary, specifically disclosed, and legally authorized.

19. COOKIES AND SIMILAR TECHNOLOGIES

Where MileLedger offers websites or web-based account functionality, such services may use cookies, local storage, session identifiers, or related technologies for authentication, security, preferences, and analytics.

Applicable notice and choice mechanisms will be provided where required.

Any web or embedded tracking technologies must be verified before publication.

20. THIRD-PARTY LINKS AND SERVICES

The Services may include links or integrations with independent third-party services.

Those services may have separate privacy policies.

Cytrix Technologies LLC is not responsible for independent third-party processing outside its control, except where Applicable Law creates responsibility.

Users should review third-party notices before submitting information.

21. BUSINESS AND ORGANIZATIONAL ACCOUNTS

Where business or organizational use is supported, records may relate to employees, contractors, or other individuals.

Business users are responsible for applicable obligations concerning employee tracking, notice, consent, labor law, confidentiality, and retention.

The Company must determine whether it acts as controller, processor, or service provider for relevant business processing activities.

This Policy does not authorize unlawful or covert location monitoring.

22. DATA ACCURACY AND CORRECTIONS

Location technology, OCR, and automated classification may produce inaccurate information.

Users can correct information using supported features or request correction where required by law.

We will take reasonable steps to address verified inaccuracies according to applicable legal requirements.

23. DATA BREACHES AND SECURITY INCIDENTS

If the Company becomes aware of a security incident affecting personal information, it will investigate and respond according to applicable legal obligations.

Notifications will be issued to affected individuals, regulators, or other parties where required by law.

No electronic system can guarantee that every security incident will be prevented.

Nothing in this Policy waives mandatory information security or breach notification obligations.

24. DO NOT TRACK AND PRIVACY SIGNALS

Certain browsers and devices offer privacy preference signals.

Where required by law, MileLedger will recognize qualifying opt-out signals, including applicable Global Privacy Control signals.

The effect depends on the platform, processing activity, and jurisdiction.

Mobile application permissions remain subject to operating system and in-app controls.

25. MARKETING COMMUNICATIONS

Where MileLedger sends marketing communications, Cytrix Technologies LLC will comply with applicable electronic marketing and consumer protection laws.

Users may unsubscribe through an available link or other disclosed method.

Essential transactional, security, and account communications may continue where legally permitted.

26. CHANGES TO THIS PRIVACY POLICY

Cytrix Technologies LLC may update this Policy to reflect changes in the Services, technology, security practices, providers, or legal obligations.

Updated versions will include a revised date.

Where legally required, users will receive notice and additional consent opportunities for material changes.

Policy updates do not retroactively authorize unlawful or previously undisclosed processing.

27. RELATIONSHIP TO TERMS OF SERVICE

This Policy should be read with the MileLedger Terms of Service and End User License Agreement.

The Terms govern contractual use of the Services.

This Policy addresses personal information practices and privacy rights.

Mandatory privacy and consumer protection laws control where conflicts arise.

28. CONTACT INFORMATION

For privacy inquiries, personal data requests, deletion requests, security concerns, or questions about this Policy:

MileLedger
Operated by: Cytrix Technologies LLC
Email: support@mileledger.io

Suggested Email Subjects:

• MileLedger Privacy Inquiry
• MileLedger Data Access Request
• MileLedger Data Deletion Request
• MileLedger Data Correction Request
• MileLedger Privacy Rights Request

Requests will be addressed according to applicable law and reasonable verification requirements.

29. FINAL PRIVACY STATEMENT

MileLedger is designed to help individuals and businesses manage mileage, receipts, expenses, and related records.

Cytrix Technologies LLC recognizes that these features involve potentially sensitive location and financial information.

We aim to apply appropriate collection limitations, meaningful disclosures, reasonable security safeguards, and legally required user controls.

This Policy does not guarantee risk-free electronic processing or eliminate any legal responsibility imposed by law.

Users retain applicable statutory privacy rights.