1. Who We Are
ZenMiles is a travel loyalty management application operated by PT Inovasi Berkat Modern, a company registered in Indonesia. As the Data Controller under Law No. 27 of 2022 on Personal Data Protection (UU PDP), we are responsible for how your personal data is collected, used, and protected.
Contact: support@zenmiles.app
2. Data We Collect
We only collect data necessary to provide the service:
- Account data: name, email address, phone number, country.
- Loyalty program data: program name, membership number, points balance, expiry dates.
- Credit card data: card name, last four digits, validity period, statement and due dates, annual fee dates. We never store full card numbers.
- Optional profile data: your date of birth, if you choose to provide it. The app works without it.
- Usage data: a log of actions you take in the app — adding or removing a program or card, updating your profile — recorded against your account so we can support you and understand how the app is used.
- Messages in the app: when we show you a message inside the app (for example about a new feature), we record that you saw it and, if it asks a question, your answer (Yes or No), so we show it only once and can count the answers. It is stored against your account and deleted with it.
- App analytics: which screens you open and which buttons you tap, with the app version and device type, sent to Firebase Analytics without your name or account, so we can see where the app is hard to use. It never includes anything you type, your balances or your statements. You can turn it off in You → Share usage analytics.
- Device data: device model, operating system version, and a push notification token, stored against your account so notifications reach the right device.
- Crash data: anonymised error reports including device model, OS version, and stack traces via Firebase Crashlytics, used solely to identify and fix bugs.
3. What Stays On Your Phone
When you scan a screenshot or a statement to fill in a balance, the image is read entirely on your own device. The picture is never uploaded, never sent to us, and never reaches any third party. Only the values you confirm on the review screen are saved to your account.
We never see or store a full credit card number. The app reads at most the last four digits, and discards the rest before anything is saved.
4. Email Sync and Website Sync (optional)
Email Sync updates your balances from the statement emails your airline and bank already send you. It does nothing until you link a mailbox, and you can remove a mailbox at any time.
- It runs on your phone. Your phone connects directly to your email provider (for example Gmail, iCloud, Yahoo or Outlook.com) over an encrypted connection. Your email never passes through ZenMiles servers, and we never see it. Your email provider is not our service provider; its own privacy policy applies.
- Hotmail and Outlook.com sign in with Microsoft. Microsoft does not accept app passwords for these mailboxes, so you sign in on Microsoft’s own page instead. ZenMiles never sees your Microsoft password: Microsoft gives the app a sign-in token for that mailbox, which stays in your phone’s secure storage and is never uploaded. Microsoft’s permission screen calls this “read and write” access because it offers no read-only option; ZenMiles only reads, as described below.
- What is kept on your phone: the address and app password (or Microsoft sign-in token) of each mailbox you link, and for each program or card the words you set to find its statement — plus, for a card, the password of its statement PDF. Passwords are held in the phone’s secure storage (the iOS Keychain, or Keystore-backed encrypted storage on Android) and are never uploaded.
- Shared with your other phones: so a phone you sign in on later is set up for you, your account also keeps, for each program or card, the address of the mailbox it uses, the words you set, the sender its statements come from, and whether a program uses Email Sync or Website Sync. No password or sign-in token goes with it: on each phone you type the mailbox’s app password (and any statement PDF password) yourself, or sign in with Microsoft again.
- What it reads: only emails from the last 90 days whose subject or sender contains the words you set for that program or card. Nothing else in your mailbox is opened. Choose words that only your statement emails use, such as your bank’s name, and leave out dates, which change every statement.
- What leaves your phone: only the figures read from a statement — a program’s balance and miles expiry date, or a card’s points balance, statement day and payment due day — saved to your account exactly as if you had typed them. Emails, attachments, statement PDFs, amounts owed and passwords are never uploaded.
- Syncing by itself: once linked, the app checks for new statements each month. On iPhone, our server sends a silent notification that wakes the app to do this; it carries no content and nothing about your mailbox.
- Your record: every change a sync makes is listed in You → Activity, which is kept on your phone only.
- Stopping it: remove a mailbox in You → Email Sync, which erases its address, passwords and sign-in token from your phone, and revoke the app password at your email provider — or, for a Microsoft mailbox, remove ZenMiles at microsoft.com/consent.
Website Sync
For programs that send no statement email, Website Sync updates your balance from the program’s own website, opened inside the app. It does nothing until you choose it for a program, and only one of Email Sync or Website Sync is used per program.
- You log in on the program’s own page. The login page belongs to the airline or hotel program, and its web address is shown. ZenMiles never reads, fills in or stores your username, password or one-time codes.
- It runs on your phone. After you log in, the app reads your account page on your phone to find the balance, membership number and tier. The page never passes through ZenMiles servers.
- What is kept on your phone: the program’s login session, as a web browser keeps it, so the next sync can skip the login until the program ends the session.
- What leaves your phone: only the figures you see on the review screen — balance, membership number, tier — saved to your account exactly as if you had typed them.
- Stopping it: use Forget login on the program, or sign out of ZenMiles, which erases every saved session from your phone.
5. Legal Basis for Processing
We process your personal data on the following grounds:
- Contract performance — to deliver the ZenMiles service you requested.
- Legitimate interests — to improve security, fix bugs, and maintain service quality.
- Consent — for marketing communications, which you can withdraw at any time.
6. Sharing Your Data
We do not sell your data. Data is shared only with the following service providers who help us operate ZenMiles:
- Supabase — database, sign-in, and server functions (servers in Tokyo, Japan).
- Google — sign in with Google.
- Apple — sign in with Apple.
- Bird — delivers your verification code by WhatsApp, or by email if you ask for it. Receives your phone number, and your email address only if you choose the email option.
- Firebase (Google) — push notifications, feature flags, and usage analytics.
- Firebase Crashlytics — anonymised crash reporting and error tracking (part of the Firebase platform).
- Midtrans — payment for one-time Plus purchases on zenmiles.app. Receives your name, email address and phone number with the order; your card or e-wallet details are entered on Midtrans' own page and never reach us.
Each provider processes data only as necessary to deliver their specific service and is bound by their own privacy policies and data protection obligations.
7. Your Rights
Under UU PDP, you have the right to:
- Know what personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data — deleting your account removes your profile, cards and programs from ZenMiles immediately. To have the retained copy erased permanently, email us and we will destroy it. Full instructions, including how to delete without the app installed, are on our account deletion page.
- Withdraw marketing consent at any time.
- Data portability — export your data in a structured format.
To exercise any of these rights, email us at support@zenmiles.app.
8. Data Security
We apply appropriate technical and organisational measures including TLS encryption in transit, encryption at rest, role-based access controls, and continuous security monitoring.
9. Data Retention
Active account data is retained for as long as your account is active. When you delete your account, your profile, cards and programs are removed from the app immediately and retained only as an internal archive, which nothing in the app can read. That archive is kept so that a deletion made in error can be reversed on request. It is destroyed permanently when you ask us to, or where we are legally required to erase it, unless we are legally required to retain it longer.
Two things stay after you delete your account, because they are needed after it: records of your subscription payments, as tax law requires; and a one-way coded form of your phone number (not the number itself), so that referral rewards and free trials cannot be claimed twice by deleting the account and signing up again. The coded phone number is destroyed with the rest of your data when you ask us to erase it permanently.
10. Children
ZenMiles is not intended for anyone under the age of 17. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
11. Changes to This Policy
We will notify you of material changes to this policy via in-app notification and email at least 14 days before they take effect.
12. Contact
For privacy questions or to exercise your rights: support@zenmiles.app