Capture drives
Trip drafts stay visible before details fade.
Product
MileLedger is organized around one loop: capture trips, review business versus personal versus commute, add purpose and job context, then export with confidence.
Product proof
Capture, review, classify, and export are separate enough to stay clear, but close enough that records keep moving.
Trip drafts stay visible before details fade.
Unfinished records are grouped for quick cleanup.
Business, commute, and personal choices stay explicit.
Reports package mileage totals for sharing and review.
App surfaces
Trips
Shows tracking health, recent captured drives, pending review, and the manual fallback when the day needs a quick correction.
Review
Turns captured trip drafts into cleaner records through category, purpose, client, job, and site context.
Reports
Previews monthly, quarterly, and yearly totals with CSV and readable summary exports.
Settings
Keeps saved places, vehicle, profession, mileage rate, permissions, and privacy controls understandable.
Operating loop
Capture
Automatic capture is the main path, with manual entry kept as a real fallback when tracking is paused, incomplete, or not available.
Review
The review queue keeps unfinished records visible so category, purpose, and confidence issues can be corrected before export season.
Add context
MileLedger is shaped for service work where a customer visit, job site, estimate, or supply run needs more context than miles alone.
Export
Reports are built around monthly, quarterly, and yearly mileage records with completeness checks before the user shares them.
Design laws
The interface should read quickly and explain itself without product theater.
No scare tactics, no panic paywalls, no manipulative savings language. The product sells certainty, not adrenaline.
Trip records stay on-device by default. Privacy controls, export, and pause states are part of the information architecture, not hidden settings.
Permissions
Show why tracking matters before asking for background behavior. The product should earn permission, never ambush for it.
If a user declines location access, the app still needs a credible manual path so basic use is never held hostage.
A calm product still explains whether capture is working, paused, or needs attention. Silent failure erodes trust faster than visible friction.
Access