Draft, not yet reviewed by a lawyer. Questions: [email protected].
middlemeet Privacy Policy
Effective date: 12 November 2026
middlemeet is run by Clementine Valley LLC ("we"). It finds a fair place for friends to meet, judged by each person's travel time. This policy says what the app collects, why, who else handles it, how long we keep it, and what you can do about it.
What we collect and why
Your account. You sign in with Apple. We receive an Apple user identifier, which is how we recognise you. We do not ask Apple for your name or email address. You choose a username, a display name and a pixel avatar, and you can set how you usually travel (walk, bike, transit or drive).
Your location. While location sharing is on, the app sends your latest position to our database, with its accuracy and speed, about once a minute in the foreground (every 10 seconds while you are moving), and on significant moves in the background. Each update replaces the previous one. We also keep a short location history, which is deleted after 7 days. You choose who sees you for each friend and group: off, approximate (about 1 km), or precise. You can pause sharing for an hour, until tomorrow morning, or until you turn it back on. While sharing is paused, the app sends no position to our database, and no one else can see the last one it sent. When sharing resumes, it sends your current position.
A saved meeting spot (optional). In Settings, you can choose an address or landmark to meet from. Your typed search text goes to Apple. The exact spot and its name stay on this iPhone; only a spot rounded to about 1 km is saved in our database. Live location uploads stop while a spot is set. Friends see no spot name or pin. Their meets use your rounded spot; pausing stops them including you. You can still start meets while paused. Meets you start send the exact spot from this phone for that request only, without storing it with the result. People in those meets see your exact travel minutes and may infer the spot more closely. Another phone has only the rounded spot and shows estimated times. Signing out clears the exact spot and name on this phone; returning to live location or deleting the account removes the saved database spot.
Friends and groups. We store your friend requests, friendships, blocks and group memberships.
Contacts (optional). If you use "Find from contacts", the app turns each phone number in your address book into a one-way code (a hash) on your iPhone and sends only those codes to find people already on middlemeet. We do not store the codes you send; we count how many you send each day, to limit lookups. The hash uses a fixed, public method, so someone with enough computing time could work out a number from its code. We call it hashed, not anonymous.
Your phone number (optional). If you add your number in Settings, only its hash is sent and stored, so friends who have your number can find you. A number can be on one middlemeet account at a time. Anyone who knows your number can then see your middlemeet name and avatar. You can remove it at any time.
Meets and meetups. When you look for a place to meet, our server receives the current positions of the people in the meet from our database, works out travel times and suggests venues. We keep the meet's result for 30 days: the venues, each person's travel time and mode, and the fairness of each option. We do not keep anyone's position with it. When you invite people, the meetup (venue, time, who is invited, their answers and travel times) is kept until 14 days after the meetup's time. People in a meetup can see each other's travel times and modes, with limits for larger groups.
Replays. If you make a Replay of your trip, it is kept for 24 hours.
Calendar and photos. The app can add a meetup to your calendar, and it cannot read your calendar. It can save Replay videos to your photo library, and it cannot read your photos.
Notifications. If you allow notifications, we store your device's push token so we can send you invites and updates. Notification text can include people's names and venue names.
Diagnostics. We use no analytics or advertising tools. Crash reports reach us only if you share them with developers through Apple.
Who else handles your data
| Service | What it does for us | What it receives |
|---|---|---|
| Apple | Sign in with Apple; push notifications; Apple Maps on your iPhone (maps, venue search, venue details, street-level pictures); Apple Maps Server API on our server (travel times, routes, venue search) | Your Apple sign-in; notification text; the map areas you view and searches you make in the app; the positions in a meet, sent from our server to compute travel times and routes |
| Supabase | Our database and sign-in sessions | Everything stored in "What we collect" |
| Google Cloud (Cloud Run and Cloud Logging) | Hosts our server | Requests to our server pass through it. Our server sends no positions in web addresses, so they do not appear in its request logs. |
Apple's and Supabase's privacy policies cover their handling: Apple, Supabase.
We do not sell your data and do not share it for advertising.
How long we keep it
| Data | Kept |
|---|---|
| Latest location | Until it is replaced by the next update, or you delete your account |
| Location history | 7 days |
| Rounded saved meeting spot | Until you return to live location or delete your account |
| Exact spot and name on this iPhone | Until changed, removed or signed out |
| Meets | 30 days after they are made |
| Meetups | 14 days after the meetup's time |
| Replays | 24 hours |
| Push tokens | Until Apple reports them invalid, or you delete your account |
| Account, friends, groups | Until you delete your account |
Deleted data may stay in our database provider's backups for up to 30 days.
Your choices
- Turn location sharing off or pause it at any time, and choose who sees you and how precisely.
- Remove your phone number in Settings.
- Delete your account in Settings. This deletes your profile, location, friendships, group memberships, push tokens and meetup answers, and your sign-in record.
- Turn notifications off in iOS Settings.
Children
middlemeet is not directed at children under 13, and we do not knowingly collect data from them.
Changes
If we change this policy, we will update the effective date and, for important changes, tell you in the app.