Local first, always
Your journeys live in this phone’s storage. There is no server to breach because there is no server at all.
No account, no cloud, no analytics. Milometry only sends your data where you point it.

Settings. No account, because there is nothing to sign in to.
There is no account, no cloud and no analytics, because there is no server. Your journeys live in this phone's storage. The map tiles and the place names on a trip come from Apple or Google as you drive, the same as any map app, and everything else stays put unless you point it somewhere yourself.
When you do want a copy elsewhere, you choose where: always-current CSVs into iCloud Drive, Google Drive, a folder on the phone, or your own NAS over WebDAV. Each destination reports whether it actually worked, so a silent failure cannot cost you a year of records.
A full backup file is written alongside those exports every time they refresh. Put the whole app behind Face ID, a fingerprint or your screen lock if you like. Recording carries on underneath, only the screen is covered.
Your journeys live in this phone’s storage. There is no server to breach because there is no server at all.
Put the whole app behind Face ID, a fingerprint or your screen lock, whichever your phone has. Recording carries on underneath; only the screen is covered.
Always-current CSVs into iCloud Drive, Google Drive, a folder on the phone, or your own NAS over WebDAV. Each destination reports whether it worked.
A full backup file is written alongside your exports every time they refresh, so a lost phone never means a lost year.