Privacy policy

Last updated 4 October 2026

The short version

We collect what we need to count your miles and run a community, and nothing else. We don't sell data, we don't run ads, and your routes are yours. The app has no analytics or tracking of any kind. The only analytics is on this website, where Umami counts visits without cookies (see This website below).

What we collect

• Account details: your username, email address and a hashed password (we never see the password itself). If you opt in, whether you'd like the monthly community email.
• Activities: for each walk or run: when it started, how long it took, the distance, an estimate of calories, the route as a series of map points, and how the height changed along the way (measured with your phone or watch's barometer), so you can see them on your own activity page.
• Location while recording: the app uses your phone's GPS only while an activity is being recorded, including while the phone is locked. It stops when you finish. We do not track your location at any other time.
• Apple Health (optional): if you turn on Apple Health sync in Settings, the app reads walks and runs that have a GPS route from Apple Health, with their heart rate and height along the route, and adds them as activities, and saves activities you record in the app back to Apple Health. Health data is used only to create those activities; we never use it for advertising or share it with anyone else, and you can turn the sync off at any time in Settings or in the Health app.
• Heart rate zones (optional): to show you which zone you're in, the app reads your date of birth, sex and resting heart rate from Apple Health (or uses a date of birth or maximum heart rate you type in). Your zones are worked out on your phone, and those details never leave it. While you record with an Apple Watch, the app reads your heart rate. Your heart rate through the activity (a reading every few seconds), your average and the time you spent in each zone are saved with the activity, so you can see your heart rate chart afterwards. Only you can see them, and they're deleted when you delete the activity or your account.
• Community activity: challenges and teams you join, messages you post in challenge and team chats, and cheers you give.
• Notifications (optional): if you turn on notifications, we keep your phone's notification token so we can tell you when the community passes a milestone, a challenge you're in is completed, someone cheers you on, or something happens in your team. You choose which of these you get in Settings and in each team. It's deleted when you turn notifications off or sign out.
• Technical basics: the app version, and standard server logs (IP address, timestamps) kept briefly for security and debugging.

This website

millionmiles.app counts visits with Umami, a privacy-friendly analytics service. It uses no cookies, doesn't identify you or follow you to other sites, and only tells us things like how many people visited, which pages they read and which buttons they pressed. The app itself has no analytics or advertising trackers.

What we do with it

• Add your distance to the community total and to any challenges you've joined.
• Show you your own history, stats and badges.
• Show other members your first name or username, your initial, and what you post or cheer. Your routes and exact locations are not shown to other members.
• Email you about your account (welcome, password resets) and, only if you opted in, the monthly community update.

Who else sees it

We use a small number of service providers to run the app, each bound by their own privacy commitments: our hosting provider (OVHcloud, with servers in London), our email delivery provider (Resend) for account emails, Sentry (stored in the EU), which receives technical information from our servers to help us diagnose errors and performance problems, TelemetryDeck (stored in the EU), which receives anonymous usage statistics from the app, such as which parts of it are opened (they don't include your name, email address, location or anything else that identifies you, aren't used for advertising, and can be turned off in Settings), Apple's App Store for distribution and Apple's Push Notification service to deliver notifications, and Umami for website visit counts. We don't share your data with anyone else unless the law requires it.

How long we keep it

For as long as you have an account. Delete your account and your personal data and activities are removed within 30 days; anonymous totals (the community mile count) are kept.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, by emailing [email protected]. If you're in the UK or EU you also have the right to complain to your data protection regulator.

Children

Million Miles is for people aged 13 and over.

Who we are

Million Miles, . Questions to [email protected].