Privacy Policy

Email, username, name, profile photo, login (password or Google)

To create and secure your account, and sign you in.

Location: your start points and nearby GPS, foreground only

The core service. We use it to compute fair meeting points and show nearby venues.

Friends, groups, meet-ups, chat messages

To run the social features you use.

Push token, device, platform

To send the notifications you opt into.

Usage: meet-ups, venues chosen, deal claims, meeting history

To improve and personalise the service, including recommendations that learn from how you use it.

Logs and abuse signals

For safety, fraud prevention, and legal compliance.

We don’t collect your date of birth or phone number.

• Service providers: Supabase (database and login), Google (Maps/Places/Directions and Google Sign-In), OneMap / Singapore Land Authority (transit routing), Expo (push delivery), Upstash (temporary caching), and Vercel and Railway (hosting). Firebase is used transitionally and is being retired.
• Venue partners see only aggregate, de-identified insights. They never see your identity or individual records.
• Legal and business transfers: if required by law, or in a merger or acquisition.

We never sell your personal data, and we don’t allow third-party ad targeting.

We request location only while you’re actively finding a meeting point or browsing nearby venues. We don’t track you in the background. You can deny or revoke location permission in your device settings at any time, though some features won’t work without it.

We store the messages and content you share so we can deliver them to your groups. To be clear, messages are not end-to-end encrypted. They’re stored on our systems and protected by access controls, but they aren’t private from MidWhereAh the way an end-to-end encrypted messenger would be.

If content is reported or breaks our Terms of Service, we may review it to keep the community safe.

• Access and correction. Request a copy of your data or fix it in the app, or by contacting us.
• Deletion. Delete your account and associated data in-app at any time (Profile → Account).
• Withdraw consent. Opt out of notifications in settings, or withdraw other consents by contacting us. We’ll stop the relevant processing unless the law requires us to keep it.

We keep your meeting and location history while your account is active, since it powers fairness-over-time features. When you delete your account, we purge your personal data, apart from limited records the law requires us to keep.

We use industry-standard measures such as encryption in transit and access controls. No system is completely secure, but we work to protect your data, and we’ll notify you and the PDPC of a serious data breach where the law requires.

MidWhereAh isn’t intended for children under 13, and we don’t knowingly collect their personal data. If you believe a child has given us data, contact us and we’ll remove it.

We’ll post any changes here and update the date above. For questions or requests, including to reach our Data Protection Officer, email thiha@midwhereah.com.