Privacy
No account linking. No credentials stored.
You enter your data. We do the maths. We don't log into your loyalty accounts, and we never will. There's no password to lose because we never asked for one.
- No account linking
- No loyalty passwords stored
- We do not sell personal data
- One-click delete
We use Google AdSense and analytics on free-tier and editorial pages. Pro plans are ad-free. The full list of third-party processors is in our privacy policy.
The receipts
Privacy as evidence, not a tagline
Every claim about a competitor links to its source, and was last checked between 28 April 2026 and 4 November 2026. Tap an info icon for the detail.
| Feature | Miles Mosaic | AwardWallet | TripIt | MaxMyPoint | MaxRewards | A spreadsheet | StatusTracker |
|---|---|---|---|---|---|---|---|
| Privacy | |||||||
| No account linking We never connect to your loyalty accounts on your behalf. | Yes | No: Logs into your loyalty accounts to sync balances. Logs into your loyalty accounts to sync balances. | With caveats: Parses email forwards or Gmail/Outlook OAuth, no direct loyalty login. Parses email forwards or Gmail/Outlook OAuth, no direct loyalty login. | Unknown: Sign-in is Google, Facebook or email and the site shows no loyalty account linking; not confirmed by the vendor. Sign-in is Google, Facebook or email and the site shows no loyalty account linking; not confirmed by the vendor. | No: Connects to your card and bank accounts to read balances and transactions. Connects to your card and bank accounts to read balances and transactions. | Yes | Unknown: Inferred from the absence of any documented account-linking feature in either store listing, not confirmed by the vendor: StatusTracker has never stated this directly. Inferred from the absence of any documented account-linking feature in either store listing, not confirmed by the vendor: StatusTracker has never stated this directly. |
| No credentials stored We don't ask for or hold loyalty programme passwords. | Yes | No: Stores loyalty account credentials to enable sync. Stores loyalty account credentials to enable sync. | Yes: Uses read-only OAuth tokens, not stored passwords. Uses read-only OAuth tokens, not stored passwords. | Unknown: No loyalty password field shown on its site; not confirmed by the vendor. No loyalty password field shown on its site; not confirmed by the vendor. | With caveats: Holds connections to your card and bank accounts rather than loyalty passwords. Holds connections to your card and bank accounts rather than loyalty passwords. | Yes | Unknown: Inferred from the absence of any documented credential or password field in either store listing, not confirmed by the vendor: Google Play's data-safety disclosure also declares no Financial info collection, but neither is a direct statement that no credentials are ever stored. Inferred from the absence of any documented credential or password field in either store listing, not confirmed by the vendor: Google Play's data-safety disclosure also declares no Financial info collection, but neither is a direct statement that no credentials are ever stored. |
| No data sold or shared Your activity isn't packaged or sold to advertisers, partners, or data brokers. | With caveats: We never sell personal data. Explorer and signed-out visitors see Google ads, which may use cookies to personalise them if you consent; Pro is ad-free. We never sell personal data. Explorer and signed-out visitors see Google ads, which may use cookies to personalise them if you consent; Pro is ad-free. | No: Its privacy notice, updated 13 October 2026, says it has sold or shared identifiers, internet activity, location data and inferences. Its privacy notice, updated 13 October 2026, says it has sold or shared identifiers, internet activity, location data and inferences. | With caveats: Parent company (SAP Concur) shares trip data with corporate partners. Parent company (SAP Concur) shares trip data with corporate partners. | Unknown: Its privacy policy did not load when we checked. Its privacy policy did not load when we checked. | With caveats: Monetises via card-issuer referral partnerships; spend data informs the business model. Monetises via card-issuer referral partnerships; spend data informs the business model. | Yes | Yes: Google Play's data-safety section states plainly: no data shared with third parties. Google Play's data-safety section states plainly: no data shared with third parties. |
| Delete everything in one click From your settings, delete your account and all stored data. No support ticket required. | Yes | With caveats: Account deletion requires a support request. Account deletion requires a support request. | With caveats: Self-serve closure available; full data deletion requires email. Self-serve closure available; full data deletion requires email. | Unknown: No account-deletion path found on the pages we could read. No account-deletion path found on the pages we could read. | With caveats: Account deletion via in-app request or support form. Account deletion via in-app request or support form. | Yes | With caveats: Neither store listing documents an in-app deletion flow. Google Play's developer account-deletion policy requires some path to exist, but nothing describes it as instant or one-click. Neither store listing documents an in-app deletion flow. Google Play's developer account-deletion policy requires some path to exist, but nothing describes it as instant or one-click. |
From the founder
Why this matters to me
I built Miles Mosaic because I was tired of typing my Marriott number into a spreadsheet every quarter. Every other tool I tried wanted my password. I wanted my evenings back, but not at the cost of handing a third party the credentials to programmes that take 15 years of flying to earn.
So I built it the only way I'd use it myself. You enter the data you want tracked. We calculate the maths, project your tier, and remind you when status is at risk. Nothing more. Nothing leaves your account that you didn't put there. There's no "trust us", there's just less to worry about.
Daan, founder
Plain English
What we do, and don't, collect
Short version. The formal version is in our privacy policy.
What we collect
- Your email at sign-up.
- Loyalty programmes and membership numbers you choose to enter.
- Flights and stays you log.
- Emails you forward, and documents, screenshots and mailbox archives you upload, so we can read the trips and status in them.
- Questions you ask Atlas, and its answers.
- Actions you take in the product so we can fix bugs and tell which features get used.
What we don't collect
- Loyalty programme passwords.
- OAuth tokens to your loyalty accounts.
- Access to your email inbox. We read only what you forward or upload.
- Anything we'd ever be in a position to sell.
Track your status. Keep your passwords.
Join free today and get a clear view of every mile, point, and elite threshold across your programmes.