Who looks after your information?
MileHalo is operated by Darbaz AS, organisation number 931 122 851, Norway. Darbaz AS is the controller of personal information described here. Contact us through our privacy support form.
This policy covers milehalo.com, its accounts and support services. The interactive driving examples on this website use sample data. They do not track your location, journeys or driving behaviour. The MileHalo mobile app is also described below.
What we collect and why
| Information | Purpose and legal basis |
|---|---|
| Your sign-in provider’s identifier, email address, available display name and account creation date. | Creating and maintaining the account you request; performance of our contract with you. |
| Session identifiers and sign-in verification data. For Apple sign-in, an encrypted revocation token. | Keeping you signed in, verifying your identity and disconnecting Apple access when you delete your account; performance of our contract and our legitimate interest in secure accounts. |
| Email, topic and message you send to support. | Answering your request; performance of our contract, our legitimate interest in providing support, or compliance with data protection obligations for rights requests. |
| Connection information processed by our hosting provider, such as IP address and request metadata. We use a one-way keyed representation of your IP for temporary request limits. | Delivering and securing the website, preventing abuse and diagnosing availability; our legitimate interest in operating a reliable service. |
Providing account details is necessary to create an account. A reply email is necessary to answer a support request. You can browse the website without creating an account. We do not sell personal information, run advertising trackers, collect payment details here, or make automated decisions with legal or similarly significant effects.
Sign in with Apple or Google
When a sign-in option is available and you choose it, that provider authenticates you and shares the information you authorise. We never receive your Apple or Google password. Apple may supply a private relay email. Supabase manages your account and verifies your sign-in. Providers sharing the same verified email may be linked to one account; Apple private relay addresses can result in a separate account.
These providers also process data under their own policies: Apple privacy and Google privacy. For authentication, they are contacted when you choose their sign-in option.
Shop details
Opening-hours lookups use the selected shop’s name or map identity and its coordinates, rather than the rounded road-data area, to retrieve public OpenStreetMap information through MileHalo. Opening a shop card does not contact Google. If you choose the external Google Maps reviews link, the selected shop’s name, address and coordinates are sent to Google Maps to find that business. Opening an external website or calling a shop contacts the chosen service.
Mobile maps, road information and reports
In the mobile app, optional location access helps centre your map. Map tiles are requested from OpenFreeMap; those requests reveal the viewed area and your IP address to that provider. Place searches and nearby road-data requests go through MileHalo on Cloudflare. We round the requested area to two decimal places before querying public sources. Exact city names may be answered directly by MileHalo using an adapted GeoNames index under CC BY 4.0, without forwarding the query. Other searches are sent to Photon/OpenStreetMap and, for Norwegian addresses, Kartverket. Fuel and charging locations come from a versioned OpenStreetMap Norway extract, with Overpass used for other supported areas. Norwegian camera, average-speed, toll and wildlife-risk records come from Statens vegvesen/NVDB. Forecasts and weather warnings come from Meteorologisk institutt. These requests are needed to provide the map and information you request; public responses are cached temporarily to reduce provider traffic.
We do not keep a server-side journey history. Saved and recent destinations stay on your device and can be removed in the app. Up to six recent road-information areas can be cached on your device for 24 hours; expired warnings are hidden. Calculating or recalculating a route sends the start and destination coordinates through MileHalo on Cloudflare to our protected routing service. Coordinates are processed to answer the request and are not recorded in route logs. The app displays our MapLibre map using OpenFreeMap tiles. If you explicitly open another navigation app, that provider handles the destination under its own terms. GPS progress and section-average calculations run on your device. While location tracking is active and you are moving, a recent position and travel direction are sent through MileHalo to match the road and obtain a mapped speed limit. These requests are processed without retaining the position in application logs. If you submit a report, Supabase stores your account identifier, category, direction, road description, submission time and, only if you confirm sharing it, the report point. Eligible road and price observations can publish automatically. Publication means a community observation is available, not that we have independently verified it. We retain a contributor score derived from independent location-checked confirmations and moderator findings. Repeated confirmed false reports put future observations into manual review. An expired or cleared report does not count as false. You may contact support to appeal a moderation finding. Published road reports may show their point, category, description and time to other users, without publishing your account identity. Reports expire automatically; confirmations can extend their availability and cleared reports are removed from the public feed. If you confirm or report an observation as cleared, we store your account identifier, the observation, your response and its time for moderation. Other drivers see aggregate feedback without your account identity. When you confirm near a report or station, a recent position and accuracy are sent to check proximity; we retain the result of that check, not the confirming position. Self-confirmations do not count. Price confirmations refer to the particular product and tariff you checked; they do not refresh the original observation time. Expiry does not delete the stored submission; submissions remain associated with your account until account deletion or an erasure request. Submit descriptions that relate to the road, without names or other personal details.
Location is optional; disable it in iPhone Settings and browse an area manually. The website design preview is separate: sign-in, email verification and subscription steps there are simulations. They do not send email, create accounts or charge you.
Community safety and blocking
When you report inappropriate content, we store your account identifier, the contribution reference, your reason and optional details, a snapshot of the reported content, and the moderation decision. This supports our legitimate interest in preventing abuse and keeping the community safe. Only authorised moderators can access complaints; your identity is not shown to the reported contributor. Public contributions use a random contributor reference so blocking works without exposing private account identifiers.
Your blocked-contributor list is stored for your account and cached on your device. You can unblock contributors in Preferences. Account deletion removes your block list and the account links in complaints; evidence needed for moderation remains subject to retention and erasure requests. Resolved complaints are scheduled for deletion 180 days after review, in bounded daily batches. Open complaints remain while they are being handled.
Journey guidance and price alerts
Optional locked-phone guidance uses location while the screen is locked, for an active route or a nearby community report. iOS shows its location indicator. Turn off locked-phone guidance in MileHalo settings to stop background tracking. Live Activities can show route guidance, speed, reports or a pinned station on the Lock Screen and Dynamic Island. You can turn these displays off, select the information shown and hide place names and addresses. Turning off Live Activities does not itself turn off location tracking. Spoken guidance uses the device audio output. Optional driving notifications are generated on your device from road information. These features do not create a server-side journey history.
Price alerts store your selected station, product, blend, charging rate, optional threshold and account identifier. Matching approved price observations appear in your account inbox. Email delivery is off unless you enable it; opted-in messages go through Resend to your verified account address. You can turn email off or remove an alert under You → Price alerts. Removing an alert also removes its inbox history. Account deletion removes these subscriptions and alerts. Provider delivery records follow our email service retention arrangements.
We verify App Store subscriptions directly with Apple. We store the transaction identifiers, product, environment, account association, status, expiry and verification time to provide and restore membership. We do not receive your payment-card details. Deleting a MileHalo account does not cancel an App Store subscription; manage cancellation through Apple.
Price-scanning design preview
If you choose a photo in the app design preview, text recognition happens in your browser using an OCR engine served by MileHalo. The photo and recognised text are not uploaded to us or to an AI service. The photo, draft and sample price contributions remain in the current tab only and are cleared when it is closed or reloaded. No real community price is published from the preview.
Essential cookies
The website uses essential cookies to remember access to the password-protected site (24 hours), maintain an account session (up to 7 days), and complete sign-in securely (10 minutes). These cookies are secure and cannot be read by page scripts. We do not use advertising cookies. On public website pages, Google Analytics is loaded only if you choose to allow analytics. It measures page visits, traffic sources and clicks to the App Store. We do not send account IDs, form contents, precise location, or URL query strings to Analytics. Google receives technical request information such as your IP address; GA4 does not log or store individual IP addresses. Analytics cookies have a configured lifetime of 180 days. Your consent choice is stored locally for up to 180 days. Use Analytics settings on this privacy page to change your choice; withdrawing consent stops future measurement and removes our Analytics cookies. Previously collected data is not automatically erased by withdrawal. We retain user-level Analytics data for two months. Google may process data outside the EEA under its applicable data-processing terms. Analytics is optional and declining it does not prevent you from using the website. Removing cookies signs you out but does not delete your account.
Who handles data and where?
Supabase provides account authentication and stores account records in our Stockholm, Sweden project. Cloudflare provides website delivery, security, backend processing, encrypted website sessions and support storage. Our Cloudflare session and support storage is restricted to the European Union. Website requests and provider sign-in may still be processed outside the EEA through their global infrastructure. EU database storage does not mean every processing activity happens in the EU.
Where international transfers require safeguards, we rely on applicable adequacy decisions or contractual safeguards, including standard contractual clauses in provider terms. You can ask us about these safeguards. See Cloudflare’s data processing terms and Supabase’s data processing terms. We share information only as needed to deliver these services, comply with law or protect the service and people using it.
Reward privacy
We store invitation relationships, contribution history, TikTok usernames and public video links, verification codes, terms acceptance, review decisions and gift assignments to run these programmes and prevent duplicate claims. Referral payments are verified with Apple; we do not receive payment-card details. Records remain while your account exists and are removed with account deletion, subject to the exceptions explained in our privacy policy. Public TikTok videos remain under your control and TikTok's policies; deleting MileHalo does not delete them. We also store your optional leaderboard nickname, outfit choices, XP purchase history and participation consent. Leaderboard participation shares only your nickname, avatar, level and XP; your email and contribution locations are not displayed there.
Personal invitation pages are optional. Avatar, nickname and level each require your choice; leaderboard consent does not enable sharing. Disabling a personal page prevents future access, but cannot remove previously exported images or social platform caches. Referral codes are public and never login credentials. Invitations, reviews and social shares do not earn leaderboard XP.
How long we keep it
- Account details remain until you delete your account.
- Website account sessions expire after 7 days. Sign-in state expires after 10 minutes. Expired records and temporary rate-limit records are removed by hourly maintenance.
- Resolved support threads are scheduled for removal 180 days after their last update; open support requests and appeals remain available while we handle them. Archived email threads are scheduled for removal after 180 days without activity once no support ticket needs them. Completed price-alert receipts are scheduled for removal after 90 days. Cleanup runs in bounded daily batches. Support records matching your verified account email are also removed when you delete that account.
- Deleting an account removes its active record and sessions immediately after identity checks and any required Apple token revocation. Provider backups and recovery history may retain deleted records temporarily under their configured retention periods.
- Hosting-provider security records follow the provider’s applicable retention settings and policies. A record may need to be preserved separately if a specific legal obligation or dispute requires it.
Your choices and rights
You can download your account data and delete your account. You may also request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests where the law provides these rights. Where we rely on consent, you can withdraw it without affecting earlier lawful processing.
Use the privacy form to exercise a right. We may need to verify your identity. We normally respond to data protection requests within one month; if a lawful extension is needed, we will explain it. You may complain to Datatilsynet or your local data protection authority.
Children and changes
MileHalo accounts are intended for adults. We do not knowingly offer accounts to children. Contact us if you believe a child has supplied personal information. We update this policy when the service changes and will explain material changes through the website or account experience.
Android location and price scanning
On Android, starting navigation runs a location foreground service with a trip notification. Location continues while the screen is off or another app is open, until you end the trip. Stop the trip in MileHalo or from its notification. Location access can also be removed in Android settings. Live Activities and CarPlay are iPhone features; they are not Android features.
Optional Android price scanning uses Google ML Kit text recognition on your device. MileHalo does not upload the image or recognised text. You choose the fuel type and confirm the price before submitting a price report. Photos taken for scanning are stored temporarily in the app cache; old scan files are removed on a later scan, and Android may clear the cache. Google ML Kit collects SDK diagnostics and usage information, including device and app information, a per-installation identifier, performance metrics, configuration and event/error information. This is separate from the image content and is sent encrypted.
Google Play membership verification
When Google Play billing is available, Google handles the payment. MileHalo verifies purchases with Google and stores the product, base plan, order reference, account association, state, expiry and verification time. Purchase tokens are encrypted at rest. An obscured identifier derived from your MileHalo account connects the purchase to that account and helps prevent a purchase being claimed by another account. We do not receive your payment-card details. Deleting your MileHalo account does not cancel a Google Play subscription; cancel it in Google Play.
Your analytics choice
You can allow or turn off website analytics here at any time.
Language choice: The homepage uses the country supplied by Cloudflare from your IP address to select Norwegian, Swedish or English. If the country is unknown, your browser language is used when available. We do not request GPS location or store location for this purpose. If you choose a language yourself, only the language code is remembered in a cookie for up to one year. You can change it using the language selector.