Privacy Policy

Milli ("Milli," "we," "us," or "our") builds financial tools for independent workers. Your trust is the foundation of everything we do. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the Milli mobile applications, drivemilli.com, Milli AI, the Milli Elite Card, and related services (the "Services"), and the choices and rights you have.

This policy works together with our GLBA Privacy Notice (for consumer financial information), our California Privacy Rights Notice, our Cookie Policy, and, for users in the European Economic Area, United Kingdom, or Switzerland, our Data Processing Agreement.

The short version: we collect what we need to run Milli, we never sell your personal information, we never store your bank login credentials, and you can access, correct, or delete your data at any time.

1. Information We Collect

Information you provide - Account information: name, email address, phone number, password, and profile details. - Work and tax profile: filing status, state of residence, type of independent work, estimated income, deductions, and tax preferences. - Identity information (Milli Elite Card features only): legal name, date of birth, residential address, Social Security number or ITIN, and government ID images, collected as described in our KYC/AML Disclosure. - Content: receipts, documents, notes, support messages, and questions you ask Milli AI. - Payment information: subscription billing details, processed by Apple, Google, or our payment processor. Milli does not store full card numbers.

Information from connected accounts (via Plaid) When you choose to connect a bank, card, or payroll account, our partner Plaid Inc. ("Plaid") collects and transmits account information to Milli with your authorization. This may include account and routing numbers (masked where possible), account names and types, balances, transaction history, deposits and payouts, and account holder name and contact details. Milli never receives or stores your financial institution login credentials; those are handled by Plaid. Plaid's handling of your data is governed by the Plaid End User Privacy Policy. You can disconnect an account at any time in the app. Connecting accounts through Plaid is optional; when you connect, Milli uses the deposit and transaction data you authorize to show earnings and payouts from your driving apps as they arrive in your connected accounts, and Plaid's End User Privacy Policy applies. Milli does not connect directly to Uber, DoorDash, Instacart, Lyft, Amazon Flex, Spark Driver, or other driving apps. If you prefer not to connect, you can enter earnings and offers manually.

Information collected automatically - Device and usage information: device type, operating system, app version, IP address, language, crash logs, and feature interactions. - Location information: with your permission, precise GPS location is used to log trips for mileage tracking. You can turn this off at any time in your device settings. - Website information: cookies and similar technologies as described in our Cookie Policy. drivemilli.com uses the Meta Pixel, a tool provided by Meta Platforms, Inc., for advertising and analytics, which collects information about your visit, such as pages viewed and browser and device details, and shares it with Meta.

Biometric information. If you enable Face ID or Touch ID, authentication is performed entirely on your device by Apple. Milli does not receive, collect, or store biometric identifiers. See our BIPA Notice.

2. How We Use Information

Provide the Services: calculate tax reserves and quarterly estimates, track mileage, organize expenses, generate reports, power Milli AI insights, and operate your plan features.
Provide tax preparation services and electronically file the returns you review and approve.
Verify identity, prevent fraud, and meet legal obligations, including anti-money laundering and sanctions requirements.
Secure accounts, monitor for suspicious activity, and debug and improve performance.
Communicate with you about your account, security alerts, transactions, and, with your choice, product updates.
Improve and develop the Services, including using de-identified or aggregated data that cannot reasonably identify you.
Comply with law, enforce our terms, and protect the rights and safety of users and Milli.

Milli AI. Your questions and relevant account data are processed to generate responses. We do not allow third-party AI providers we use to train their general models on your personal information. Milli AI personalizes its answers over time using the information you share with it and the account data you choose to connect, and you can review, correct, or delete what Milli AI has learned about you at any time.

3. Legal Bases (EEA, UK, and Swiss Users)

We process personal data on the following legal bases: performance of a contract (providing the Services); legitimate interests (security, fraud prevention, and service improvement, balanced against your rights); compliance with legal obligations (tax, AML, and record-keeping); and consent (location, marketing, and optional features), which you may withdraw at any time.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows: - Service providers that process data on our behalf under contract, such as cloud hosting, data security, customer support, analytics, communications, and AI infrastructure providers. - Financial data and identity partners, including Plaid Inc. for optional account connectivity at your direction (subject to the Plaid End User Privacy Policy) and identity verification providers for KYC. - Financial services partners, such as the bank that issues the Milli Elite Card, payment processors, and investment partners, when you enroll in features they provide. - App platforms (Apple and Google) for distribution and subscription billing. - Legal and safety: to comply with law, subpoenas, court orders, or regulatory requests; to protect against fraud or harm; or to enforce our agreements. - Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this policy. - With your direction or consent, such as when you export a report or share it with your accountant.

Tax return information. As a tax preparation platform, Milli uses and discloses tax return information only as permitted by Internal Revenue Code section 7216 and its regulations. We will not use your tax return information for any other purpose, or disclose it, without your separate, written consent where the law requires it.

5. Your Rights and Choices

Depending on where you live, you may have the right to: - Access the personal information we hold about you and receive a portable copy; - Correct inaccurate information; - Delete your personal information, subject to legal retention requirements; - Restrict or object to certain processing, including processing based on legitimate interests; - Withdraw consent at any time, without affecting prior processing; - Opt out of marketing communications using the unsubscribe link or in-app settings; - Lodge a complaint with your local data protection authority (EEA, UK, Switzerland).

California residents have additional rights described in our California Privacy Rights Notice. To exercise any right, email support@drivemilli.com or use the privacy settings in the app. We will verify your identity before fulfilling a request and respond within the time required by law (generally 30 days under GDPR and 45 days under California law). Authorized agents may submit requests with proof of authorization. We will not discriminate against you for exercising your rights.

6. Data Retention

We keep personal information only as long as needed for the purposes described in this policy: - Account and profile data: for the life of your account, then deleted or de-identified within 90 days of account closure, unless a longer period is required. - Financial, transaction, and tax records: up to 7 years after the relevant tax year to support your tax obligations and our legal obligations. - Identity verification and AML records: at least 5 years after account closure, as required by the Bank Secrecy Act. - Location and trip data: until you delete the trip or your account, or as retained in your tax records. - Support communications: up to 3 years.

7. How We Protect Information

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (TLS 1.2 or higher) and at rest (AES-256), multi-factor authentication, least-privilege access controls, continuous monitoring, and vendor security reviews. Learn more in our Data Security Policy and Security Policy. No system is perfectly secure, and we will notify you of a breach as required by law.

8. International Transfers

Milli is based in the United States and processes data in the United States. When we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

9. Children

The Services are not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Do Not Track and Global Privacy Control

Our website honors Global Privacy Control (GPC) signals as a valid request to opt out of any sale or sharing of personal information, to the extent applicable.

11. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you in the app or by email before they take effect. The "Last updated" date above shows when it was last revised.

12. Contact Us

Milli, Michigan, United States Email: support@drivemilli.com Phone: (888) 645-5114, Monday through Friday, 9AM to 6PM ET