Privacy
No account linking. No credentials stored.
You enter your data. We do the maths. We don't log into your loyalty accounts, and we never will. There's no password to lose because we never asked for one.
- No account linking
- No loyalty passwords stored
- We do not sell personal data
- One-click delete
We use Google AdSense and analytics on free-tier and editorial pages. Pro plans are ad-free. The full list of third-party processors is in our privacy policy.
The receipts
Privacy as evidence, not a tagline
Every claim about a competitor is sourced and re-checked monthly. Tap an info icon for the detail.
| Feature | Miles Mosaic | AwardWallet | TripIt | MaxMyPoint | MaxRewards | A spreadsheet | SkyCalc | StatusTracker |
|---|---|---|---|---|---|---|---|---|
| Privacy | ||||||||
| No account linking We never connect to your loyalty accounts on your behalf. | Yes | No: Logs into your loyalty accounts to sync balances. Logs into your loyalty accounts to sync balances. | With caveats: Parses email forwards or Gmail/Outlook OAuth, no direct loyalty login. Parses email forwards or Gmail/Outlook OAuth, no direct loyalty login. | No: Account-linked sync model. Account-linked sync model. | No: Links to bank and credit-card accounts (Plaid-style) to detect purchases. Links to bank and credit-card accounts (Plaid-style) to detect purchases. | Yes | Yes: Its own FAQ: "No, SkyCalc does not require direct access to your airline accounts. You manually input your current balances and trips." Its own FAQ: "No, SkyCalc does not require direct access to your airline accounts. You manually input your current balances and trips." | Unknown: Inferred from the absence of any documented account-linking feature in either store listing, not confirmed by the vendor: unlike SkyCalc's own FAQ, StatusTracker has never stated this directly. Inferred from the absence of any documented account-linking feature in either store listing, not confirmed by the vendor: unlike SkyCalc's own FAQ, StatusTracker has never stated this directly. |
| No credentials stored We don't ask for or hold loyalty programme passwords. | Yes | No: Stores loyalty account credentials to enable sync. Stores loyalty account credentials to enable sync. | Yes: Uses read-only OAuth tokens, not stored passwords. Uses read-only OAuth tokens, not stored passwords. | No: Credentials required for sync. Credentials required for sync. | With caveats: Plaid-style tokens, not raw passwords, but tied to bank/card credentials. Plaid-style tokens, not raw passwords, but tied to bank/card credentials. | Yes | Yes: Privacy policy lists only name, email and an optional photo as collected personal information; loyalty credentials appear nowhere in the data it collects or shares with its service providers. Privacy policy lists only name, email and an optional photo as collected personal information; loyalty credentials appear nowhere in the data it collects or shares with its service providers. | Unknown: Inferred from the absence of any documented credential or password field in either store listing, not confirmed by the vendor: Google Play's data-safety disclosure also declares no Financial info collection, but neither is a direct statement that no credentials are ever stored. Inferred from the absence of any documented credential or password field in either store listing, not confirmed by the vendor: Google Play's data-safety disclosure also declares no Financial info collection, but neither is a direct statement that no credentials are ever stored. |
| No data sold or shared Your activity isn't packaged or sold to advertisers, partners, or data brokers. | Yes | With caveats: Privacy policy permits sharing with affiliates and partners. Privacy policy permits sharing with affiliates and partners. | With caveats: Parent company (SAP Concur) shares trip data with corporate partners. Parent company (SAP Concur) shares trip data with corporate partners. | With caveats: Shares aggregated data with airline partners per ToS. Shares aggregated data with airline partners per ToS. | With caveats: Monetises via card-issuer referral partnerships; spend data informs the business model. Monetises via card-issuer referral partnerships; spend data informs the business model. | Yes | Yes: Privacy policy: "We do NOT sell, rent, lease, or trade your personal information... Your data is not a product we monetize." Privacy policy: "We do NOT sell, rent, lease, or trade your personal information... Your data is not a product we monetize." | Yes: Google Play's data-safety section states plainly: no data shared with third parties. Google Play's data-safety section states plainly: no data shared with third parties. |
| Delete everything in one click From your settings, delete your account and all stored data. No support ticket required. | Yes | With caveats: Account deletion requires a support request. Account deletion requires a support request. | With caveats: Self-serve closure available; full data deletion requires email. Self-serve closure available; full data deletion requires email. | With caveats: Account deletion via support form only. Account deletion via support form only. | With caveats: Account deletion via in-app request or support form. Account deletion via in-app request or support form. | Yes | With caveats: Deletable from account settings with no support ticket required, but the privacy policy states data is deleted or anonymised within 30 days rather than instantly. Deletable from account settings with no support ticket required, but the privacy policy states data is deleted or anonymised within 30 days rather than instantly. | With caveats: Neither store listing documents an in-app deletion flow. Google Play's developer account-deletion policy requires some path to exist, but nothing describes it as instant or one-click. Neither store listing documents an in-app deletion flow. Google Play's developer account-deletion policy requires some path to exist, but nothing describes it as instant or one-click. |
From the founder
Why this matters to me
I built Miles Mosaic because I was tired of typing my Marriott number into a spreadsheet every quarter. Every other tool I tried wanted my password. I wanted my evenings back, but not at the cost of handing a third party the credentials to programmes that take 15 years of flying to earn.
So I built it the only way I'd use it myself. You enter the data you want tracked. We calculate the maths, project your tier, and remind you when status is at risk. Nothing more. Nothing leaves your account that you didn't put there. There's no "trust us", there's just less to worry about.
Daan, founder
Plain English
What we do, and don't, collect
Short version. The formal version is in our privacy policy.
What we collect
- Your email at sign-up.
- Loyalty programmes and membership numbers you choose to enter.
- Flights and stays you log.
- Actions you take in the product so we can fix bugs and tell which features get used.
What we don't collect
- Loyalty programme passwords.
- OAuth tokens to your loyalty accounts.
- Travel itineraries scraped from your inbox.
- Anything we'd ever be in a position to sell.
Track your status. Keep your passwords.
Join free today and get a clear view of every mile, point, and elite threshold across your programmes.