Privacy

Draft, 26 September 2026

Middy helps friends find a pub that is fair for everyone to reach. To do that we need to know roughly where people are coming from. This page explains what we collect, why, who helps us run the service, and what you can do about it.

What we collect

  • Your account: your email address, your handle, and your date of birth. We use your date of birth to check you are 18 or over; Middy is not available to anyone younger, anywhere. Once set, it can’t be changed.
  • Your home and named places: if you save them, they are stored encrypted. Other people never see these coordinates; at most they see an area at the precision you choose (exact, 500 m, 1 km, 2 km or suburb).
  • Live location: only when you choose to share it inside a Middy. It stops 60 minutes after you last agreed, and the location is then deleted, not just hidden.
  • Where you’re coming from in a Middy: the start point you give (live, home, an address, or a station or landmark) is used to work out travel times. Other participants see travel times, never your coordinates.
  • Usage events: which pubs were shown, proposed and picked, so we can improve rankings. These events use a hashed user ID and a coarse map cell (an H3 cell), never your coordinates.

If you join a Middy from a link without an account, we keep the start point you enter for that Middy only.

Owner review: legal wording needed here.

Why we use it

To run Middy: to sign you in, to rank pubs by everyone’s travel time, to let you invite people, to send you the emails and notifications you ask for, and to keep the service safe and working.

Owner review: legal wording needed here.

Who helps us run Middy

We use a small number of services to provide Middy. They receive only what they need for their job:

  • Google Places and Google Routes: pub details and photos, and travel times between start points and pubs.
  • Resend: sends sign-in links and account emails.
  • Cloudflare: sits in front of our servers for security and delivery.
  • Expo push notifications: delivers notifications to your phone if you allow them.

Some of these services may process data outside Australia.

Owner review: legal wording needed here.

What we don’t do

  • We never show one person another person’s coordinates.
  • We don’t use passwords: you sign in with a passkey, Google, or an email link.
  • We don’t take payments inside Middy.

Your choices

You can change how precisely each group of people can place your home, stop sharing live location at any time, and delete saved places. You can ask for a copy of your data or ask us to delete your account.

Owner review: legal wording needed here.

Contact and complaints

Questions or requests: [email protected].

Owner review: legal wording needed here.

Changes

If we change this policy in a way that matters, we’ll tell you in the app before it takes effect.