Privacy

What we store

• Your email address, display name and password (passwords are stored hashed by our login provider).
• The cards you add to your wallet, and, if you enter them, each card's last 4 digits, expiry month and year, nickname, statement day and annual-fee month.
• Spending you choose to record: expenses, cap tracking, rewards and annual fees.
• Messages you send to the AI chat on the advisor page.

What we never collect

Full card numbers, CVV codes, PINs, bank logins or one-time passwords. MaxTheMiles cannot see your bank account and cannot make payments.

How we use it

• To recommend a card and show your remaining bonus caps.
• To email you reminders you can act on: a cap about to reset, a card about to expire, an annual fee coming up.
• To keep your account secure and fix problems.

We do not sell your data and we do not use it for advertising.

Who processes it for us

• Supabase: login and database. Data is stored in Seoul, South Korea.
• Vercel: hosts the website.
• Brevo: sends our emails.
• OpenRouter: only when you use the AI chat. Your message, the names of the cards in your wallet and your 10 most recent expenses are sent to an AI model to answer you. Last 4 digits and expiry dates are not sent.

Because some of these providers store data outside Singapore, we choose providers that protect it to a standard comparable to the PDPA.

Cookies

We use only the cookies needed to keep you signed in. No advertising or tracking cookies.

Keeping, correcting and deleting your data

We keep your data while your account is open. You can edit or remove cards and records in the app at any time. To get a copy of your data, or to close your account and delete everything, email hello@maxthemiles.com. We reply within 30 days.

Changes

If we change this policy in a way that matters, we'll update the date above and tell you by email.