Privacy Policy

Midpoint ("we", "our", "the app") is a mobile application that helps groups find meeting spots at the midpoint between their locations. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

Information We Collect

Account Information

When you sign in with Google or Apple, we receive and store:

• Your email address
• Your display name
• Your profile picture URL (if available)
• A unique identifier from the sign-in provider

Location Information

Midpoint uses your device's location (with your permission) to calculate midpoints with other participants and to show nearby restaurants and venues. Location data is used in-session to process search requests and is not stored long-term on our servers unless you explicitly save a search.

User-Created Content

When you save spots, searches, or people (participants you meet with), this data is stored on our servers and associated with your account so it is available across your devices.

Technical Information

We log standard technical information (IP address, request timestamps, device type) for security, abuse prevention, and debugging. Logs are retained for up to 30 days.

How We Use Information

• To authenticate you and maintain your account
• To calculate midpoints and search for nearby venues
• To sync your saved data across your devices
• To diagnose technical problems and prevent abuse

Third-Party Services

Midpoint uses the following third-party services:

• Google Maps Platform — for geocoding, place search, and directions. Your location and queries are sent to Google to fulfill these requests. See Google's Privacy Policy.
• Google Sign-In and Sign in with Apple — for authentication. These providers handle your credentials directly; we only receive the profile data described above.
• Railway — our hosting provider for the backend API and database.

Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We share data only with the service providers listed above as necessary to operate the app, or when required by law.

Data Retention and Deletion

We retain your account data for as long as your account is active. You can request deletion of your account and all associated data at any time by emailing obaidur.rashid@gmail.com. We will process deletion requests within 30 days.

Children's Privacy

Midpoint is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us and we will delete it.

Security

We use HTTPS for all network traffic, store authentication tokens in encrypted device storage, and follow industry-standard practices to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted to this page with an updated revision date.

Contact

Questions or requests? Email obaidur.rashid@gmail.com.