Privacy Policy
This policy explains how Midl handles personal information when helping people find a sweet spot and discover places and experiences in London.
Information we use
- Account details such as email address, username, authentication provider and verification status.
- Profile images, places, preferences, saved folders, social relationships and locations you choose to enter.
- Search words, returned-place summaries and limited actions on search results, stored without an account or device identifier for service evaluation.
- Reports, support messages and limited security and operational logs.
- A record that you passed our 16+ check and accepted current policies. We check but do not store your birth date.
Why we use it
We use this information to provide and secure Midl, calculate routes and suggestions, deliver verification email, support users, prevent abuse and meet legal obligations. We do not sell personal information or use it for cross-app advertising.
Profile-image safety checks
Uploaded profile images are checked by Amazon Rekognition for inappropriate content. Rejected images are not saved by Midl or used to replace your current image; we retain only limited operational records. Contact support to request a review.
Service providers and AI processing
We use AWS for hosting and image safety, Google for maps, places and routes, Google or Apple for sign-in, and Brevo for email. With your explicit agreement, OpenAI processes selected interests, and Voyage AI processes search text, preferences derived from interests and saved venues, and public venue or event details to improve recommendations. Account identifiers, contact details, profile photos, social relationships and saved starting locations are excluded from AI requests. Free text may contain personal information you enter. These providers may process data outside the UK under their applicable safeguards. Our AI data policy explains provider retention, training use and consent controls.
Visibility
Your username, profile image, follow relationships and content you deliberately make public may be visible to other users. Common locations remain private. Blocking and privacy controls limit social visibility.
Search reliability diagnostics
To investigate failures, we keep encrypted group-search text, entered starting locations and search options for up to 7 days, accessible only to operational support. These records exclude participant names, account identifiers and credentials, but free text and locations may contain personal information. We also keep limited technical diagnostics, including a random search reference, app version/platform, errors and timing, for up to 14 days. These diagnostic records are not sent to AI providers.
Retention and deletion
Account information is kept while your account exists. Unverified accounts expire automatically. Short-lived caches may persist for up to 24 hours. Search evaluation records and other operational logs are deleted after no more than 30 days; the shorter search-diagnostic retention periods above apply separately. Deleting your account removes associated user data; pseudonymised abuse records may be retained for up to 24 months where necessary for safety, fraud prevention and enforcement.
Your choices and rights
You can give or withdraw AI consent in settings, update your profile, make content private, disable event recommendations, block users and delete your account. Deletion also removes your associated preferences, recommendation inputs and matching records. UK users may request access, correction, restriction, portability, objection or erasure, and may complain to the ICO.
Age
Midl is for people aged 16 and over. Ineligible birth dates do not create an account and are not retained.
Contact
Email hello@findyourmiddle.com for privacy questions or requests.