MeetMiddle Privacy Policy

MeetMiddle helps a small group of friends find a fair midpoint between their locations and discover good places to meet nearby. We designed it to need as little personal data as possible. This policy explains what we collect, why, and your rights under UK and EU data protection law (UK GDPR & GDPR).

1. What we collect and why

Locations you enter

The locations of you and the people you’re meeting, used to compute the midpoint and search for venues. UK postcodes are looked up via postcodes.io; free-text addresses are resolved using your device’s built-in (Apple) geocoder. We process these to produce a result. For saved meetups we keep only a coarse area and an approximate (~1 km) coordinate, not the full address you typed.

Your device location (optional)

Only if you allow it, and only to centre the map on you. It is not required; you can type a postcode instead, and we do not store or share it. You can decline or revoke this permission in your device settings at any time.

Account data (only if you sign in)

A user identifier and an optional display name, managed by Supabase (our backend and authentication provider). You can sign in two ways: Sign in with Apple (which lets you hide your email) or email with a one-time code, in which case we store the email address you sign in with so we can recognise your account.

Saved meetups and badges (only if you sign in)

Stored in Supabase and linked to your account, so they sync across your devices.

Subscriptions (MeetMiddle+)

Purchases are handled by Apple (the App Store / StoreKit); entitlement status is managed via RevenueCat. We never see or store your payment card details.

Advertising (free plan only)

The free plan is supported by banner ads served by Google AdMob. Every ad we request is non-personalised: you see ads, but they are not selected on the basis of who you are or what you have done elsewhere. MeetMiddle does not track you across apps or websites, its privacy manifest declares no tracking, and it never reads the advertising identifier (IDFA). There is no App Tracking Transparency prompt, because nothing in the app does anything that would require one. Where UK and EU rules call for it we still show Google’s UMP consent message before ads are initialised. Serving even a non-personalised ad means AdMob processes limited device information (such as IP address, device model, and ad interaction data) to deliver and measure it; see Google’s ads policy. MeetMiddle+ subscribers are never shown ads and the ads SDK is not initialised for them. We never share the locations you enter, your saved meetups, or your account details with advertisers.

2. A note about other people’s data

You may enter a friend’s postcode or area to find a midpoint. Please enter only what you’re comfortable using, and only for people who are happy for you to do so. To protect them, saved meetups keep only a coarse area, never a full address.

3. Who we share data with (processors)

We use a small number of trusted service providers to run MeetMiddle:

We do not sell your personal data.

4. Legal bases (UK GDPR / GDPR)

• Contract / legitimate interests, to provide the midpoint and venue search you asked for.
• Consent, for optional device location, any optional enrichment, and for the ad choices covered by the UK/EU consent message on the free plan. You can withdraw consent at any time. We do not run personalised advertising at all, so there is no version of the app in which declining changes what an ad is based on.

5. Data retention & deletion

We keep account-linked data until you delete it. You can delete your account and all associated data at any time in the app (Settings → Delete account), which removes your profile, saved meetups, badges, and entitlement records. Deleting the app without an account leaves nothing on our servers.

6. Your rights

Under UK and EU data protection law you have the right to access, correct, delete, export, restrict, or object to the processing of your personal data. You can exercise deletion directly in the app, or contact us at privacy@inthelxb.co.uk for any other request. You may also complain to the UK Information Commissioner’s Office (ICO) or your local supervisory authority.

7. International transfers

Some processors listed above may process data outside the UK/EU under appropriate safeguards (e.g. Standard Contractual Clauses). Your account data is stored in London, United Kingdom (AWS eu-west-2); Apple, RevenueCat, and Google may process limited data internationally under their own safeguards.

8. Children

MeetMiddle is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Changes to this policy

We’ll update this page and change the effective date at the top when our practices change.