1. Data We Collect

HK Miles is designed to help you manage credit card rewards. We process two types of data:

• Local Data: By default, your spending history is stored locally on your device and synced via your private Apple iCloud. We have zero access to this data.
• Cloud Account Data (Opt-in): If you explicitly enable "Cloud Account Sync," we collect your encrypted UID, age group, industry, reward preferences, and transaction records to provide cross-platform backups and personalized advice.

2. How We Use Data

We use the collected information for the following purposes:

• Syncing: Providing access to your records across all your Apple devices.
• Personalization: Offering precise credit card and promotion recommendations based on your habits.
• Optimization: Analyzing anonymized data to improve app performance and user experience.

3. Data Security

We take security seriously. All cloud data is stored on secure Google Firebase servers and transmitted using industry-standard SSL/TLS encryption.

4. HK PDPO Compliance Statement

We are committed to full compliance with the **Personal Data (Privacy) Ordinance (Cap. 486)** of Hong Kong. All data collected is processed fairly and lawfully. We will not disclose your personal data to any third parties unless required by law or with your explicit consent.

5. Third-Party Analytics

This app uses Google Analytics for Firebase. This service helps us understand global trends, such as which credit cards are most popular, which categories are used most frequently (e.g., dining or overseas), and general demographics. All data is anonymized and aggregated; it does NOT include your name, personal notes, or specific transaction amounts. We use these insights to optimize the app experience and improve our "Reward Advisor."

5. User Rights & Data Deletion

You maintain full control over your personal information:

• Opt-out: You can disable cloud sync at any time within the app settings.
• Full Deletion: You can use the "Permanently Delete Cloud Data" feature, which triggers a full wipe of all your records from our infrastructure immediately.

6. Data Retention

We only keep your data for as long as necessary to provide our services:

• Local Data: Stored indefinitely until you delete the app or clear its cache.
• Cloud Data: Accounts inactive for more than 12 months may be marked for deletion after notice. You can trigger an instant wipe at any time via the "Delete Cloud Data" button.

7. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect data from children under 13. If we discover such data, we will delete it immediately.

8. Data Breach Procedures

In the unlikely event of a data breach, we commit to notifying affected users and relevant authorities within 72 hours of discovery via app announcements or email.

9. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us at:
Email: hkmiles.social@outlook.com