Privacy Policy
The short version
- Your activity file is processed entirely in your browser. It is never uploaded to our servers.
- We don’t require an account and we don’t use advertising or tracking cookies.
- We count anonymous events (like “card created”) to understand usage. These counts contain no personal data.
- PRO payments are coming soon. When they launch, payments are handled by Midtrans, an Indonesian payment gateway (Indonesian Rupiah only), and we store only the order ID: no name, no email.
1. Data you give us
Your activity file. When you open your activities.csv, it is read and turned into a card on your own device. The file and its contents are not sent to us, and we cannot see them. Closing the tab removes them from memory.
Name or handle. If you type a name or handle onto your card, it stays in your browser and is only drawn onto the image you create.
2. Data collected automatically
Anonymous usage counts. When a card is created, downloaded, or shared, or the demo is opened, your browser sends us only the event name. Our host records the time it arrives. We don’t send a user ID, your activity data, or your name. Each event type is sent at most once per browser session.
Security logs. Our hosting provider, Cloudflare, may briefly process IP addresses to protect the service from abuse (for example, rate limiting). We don’t use these to identify you.
3. Payments
PRO payments are coming soon; you can’t buy anything on Kilomile yet. When payments launch, checkout will be handled by Midtrans, an Indonesian payment gateway, in Indonesian Rupiah (bank virtual account, GoPay or QRIS). Midtrans collects your payment details, email, and billing details under its own privacy policy:
From Midtrans we receive only the order ID, payment status, and amount, so we can issue your licence and let you restore it. We store only the order IDs of paid orders. We don’t store your name or email, and we never see your bank account or wallet details.
4. Your licence
After purchase you receive a licence link, and the licence is stored in your browser. It contains your order ID and a signature, with no personal or activity data, and it does not expire. You can restore it anytime with the link or your order ID.
5. Sharing
We don’t sell your data. We share data only with the service providers above (Cloudflare, and Midtrans once payments launch) to run the service, or when required by law.
6. Retention
- Activity files: never stored by us.
- Anonymous usage events: each one (the event name and the time it arrived, nothing else) is stored in Cloudflare Workers Analytics Engine, which deletes it automatically after three months.
- Paid order IDs (once payments launch): kept so you can restore PRO. Purchase records are kept by Midtrans as long as required for tax and accounting.
7. Your rights
Depending on where you live (for example, under the GDPR in the EU/UK or the CCPA in California), you may have the right to access, correct, or delete personal data we hold about you. We hold almost no personal data: at most your order ID if you bought PRO; your payment details are held by Midtrans. Contact support@kilomile.app and we’ll respond within 30 days.
8. Children
The service is not directed at children under 13 (or under 16 where local law requires).
9. Third-party trademarks
Kilomile is not affiliated with, endorsed by, or sponsored by Strava, Inc. “Strava” is a trademark of its owner and is used only to describe file compatibility.
10. Changes
We’ll post changes on this page and update the date above.