Privacy

No account linking. No credentials stored.

You enter your data. We do the maths. We don't log into your loyalty accounts, and we never will. There's no password to lose because we never asked for one.

Get started — free See pricing
The receipts

Privacy as evidence, not a tagline

Every claim about a competitor is sourced and re-checked monthly. Tap an info icon for the detail.

Feature Miles Mosaic AwardWallet TripIt MaxMyPoint A spreadsheet
Privacy
No account linking We never connect to your loyalty accounts on your behalf. Yes No: Logs into your loyalty accounts to sync balances. Logs into your loyalty accounts to sync balances. With caveats: Parses email forwards or Gmail/Outlook OAuth — no direct loyalty login. Parses email forwards or Gmail/Outlook OAuth — no direct loyalty login. No: Account-linked sync model. Account-linked sync model. Yes
No credentials stored We don't ask for or hold loyalty programme passwords. Yes No: Stores loyalty account credentials to enable sync. Stores loyalty account credentials to enable sync. Yes: Uses read-only OAuth tokens, not stored passwords. Uses read-only OAuth tokens, not stored passwords. No: Credentials required for sync. Credentials required for sync. Yes
No data sold or shared Your activity isn't packaged or sold to advertisers, partners, or data brokers. Yes With caveats: Privacy policy permits sharing with affiliates and partners. Privacy policy permits sharing with affiliates and partners. With caveats: Parent company (SAP Concur) shares trip data with corporate partners. Parent company (SAP Concur) shares trip data with corporate partners. With caveats: Shares aggregated data with airline partners per ToS. Shares aggregated data with airline partners per ToS. Yes
No third-party tracking on the dashboard Once signed in, your dashboard loads no ad networks or analytics beyond first-party essentials. Yes No: Dashboard loads ad and analytics scripts. Dashboard loads ad and analytics scripts. With caveats: Loads analytics + remarketing scripts on signed-in surfaces. Loads analytics + remarketing scripts on signed-in surfaces. No: Ads and tracking present on signed-in pages. Ads and tracking present on signed-in pages. Yes
Delete everything in one click From your settings, delete your account and all stored data — no support ticket required. Yes With caveats: Account deletion requires a support request. Account deletion requires a support request. With caveats: Self-serve closure available; full data deletion requires email. Self-serve closure available; full data deletion requires email. With caveats: Account deletion via support form only. Account deletion via support form only. Yes
From the founder

Why this matters to me

I built Miles Mosaic because I was tired of typing my Marriott number into a spreadsheet every quarter. Every other tool I tried wanted my password. I wanted my evenings back — but not at the cost of handing a third party the credentials to programmes that take 15 years of flying to earn.

So I built it the only way I'd use it myself. You enter the data you want tracked. We calculate the maths, project your tier, and remind you when status is at risk. Nothing more. Nothing leaves your account that you didn't put there. There's no "trust us" — there's just less to worry about.

— Daan, founder

Plain English

What we do — and don't — collect

Short version. The formal version is in our privacy policy.

What we collect

  • Your email at sign-up.
  • Loyalty programmes and membership numbers you choose to enter.
  • Flights and stays you log.
  • Actions you take in the product so we can fix bugs and tell which features get used.

What we don't collect

  • Loyalty programme passwords.
  • OAuth tokens to your loyalty accounts.
  • Travel itineraries scraped from your inbox.
  • Anything we'd ever be in a position to sell.
Ready?

Track your status. Keep your passwords.

Join free today and get a clear view of every mile, point, and elite threshold across your programmes.

Get started — it's free See pricing