Privacy for local-first mileage records and user-controlled exports.

1. Local-first trip records

MileLedger is designed so trip history, category state, notes, and supporting evidence remain on-device by default. The server is not intended to be the canonical warehouse for a user's mileage history.

2. Permission posture

The product should earn permission with context. Users should be able to understand the purpose of tracking before stronger permissions are requested, and the product should remain manually usable when location access is declined.

3. Exports and sharing

When a user exports or shares a record, that action is initiated by the user. Once an exported file leaves the app, its storage or transmission depends on the destination the user selected.

4. Support communications

If you contact support or request early access, we receive the email address and message content you choose to send. We do not sell trip history or location history.

5. Tax and accounting boundaries

MileLedger helps organize mileage documentation. It does not provide legal, tax, or accounting advice, and users are responsible for reviewing records before using them.

6. User control

The product philosophy assumes pause, export, and explanation paths should remain discoverable. Privacy controls are not treated as a premium-only privilege.

7. Contact

Privacy questions can be sent to support@borealbit.com.