Privacy Policy

Last updated: July 14, 2026

Midas is owned and operated by Speed Labs LLC. Speed Labs LLC is responsible for operating the Service and handling personal data as described in this Privacy Policy.

What we collect

  • Account information: email, password hash, username, display name, optional bio, optional avatar.
  • Profile preferences: optional display name, bio, avatar, city or state, language preference, and precise location if you choose to enable it. These are used to personalize your feed, show nearby communities, and improve local discovery.
  • Content you post: posts, comments, votes, saved-post lists, restaurant reviews and suggestions, event RSVPs, direct messages, group messages, reports, and photos or other images you upload.
  • Live-call data: when you join a voice or video call, your microphone audio and any camera video you choose to enable are transmitted in real time to participants in that room. We also process limited call-session information such as your user ID, room ID, connection status, and safety reports.
  • Device and notification data: push notification tokens, app version, device platform, and related delivery data when notifications are enabled.
  • Technical data: standard server logs (IP addresses, user-agent strings, request paths) retained for security and abuse prevention.

How we use it

  • To operate the Service: render your feed, send your DMs.
  • To connect live voice and video calls and adapt call quality to network and device conditions.
  • To personalize your experience based on your city and language preferences.
  • To show nearby communities and events when you enable precise location. Precise location is optional and can be turned off in the app settings.
  • To moderate the Service and respond to abuse reports.
  • To send transactional emails like email verification and password reset links, and push notifications that you enable.

Who can see what

  • Public: your username, display name, bio, avatar, city (if you set it), posts in public communities, comments on public posts, vote totals, badges, gold score, post and comment counts.
  • Community members only: posts and comments in private communities.
  • Live-room participants: your live microphone audio and enabled camera video while you remain connected to the room.
  • Just you: your email, your saved-post list, your notification list, your direct messages, your block list.
  • Moderators of your communities: reports you file and content you post in their community.
  • Midas administrators: all data, used only for moderation, abuse handling, and operational support.

What we do not do

  • We do not sell your personal data to third parties.
  • We do not run third-party advertising trackers inside the logged-in Service. Our public marketing pages may use the ads measurement described in "Advertising measurement" below.
  • We do not share your email address with other Midas users.
  • We do not record or store the contents of live voice or video calls by default.

Advertising measurement

To measure how well our ads on Instagram and Facebook work, our public marketing pages (such as the landing, sign-up, and log-in pages) may use the Meta Pixeland Meta's Conversions API, operated by Meta Platforms, Inc.

  • Cookies: the pixel may set Meta cookies (such as _fbp and _fbc), and we set a first-party cookie that remembers which campaign brought you here (UTM parameters and the Meta click ID) for up to 90 days.
  • What we share with Meta: page-view events on public pages and, when you complete sign-up after clicking one of our ads, a sign-up event that may include a hashed (irreversibly encoded) version of your email address, your IP address, and browser information. This is used only to measure and improve our ad campaigns.
  • What we do not share: your posts, messages, profile details, or anything you do inside the logged-in Service.

You can learn how Meta uses this data in the Meta Privacy Policy, and manage ad preferences in your Meta account settings. Blocking third-party cookies in your browser also prevents the pixel from setting cookies.

Service providers

We use the following providers to operate the Service. Each one processes a limited subset of your data and is bound by their own privacy terms:

  • Supabase — database, authentication, file storage, realtime messaging, and push-token storage.
  • Vercel — application hosting and edge serving.
  • Resend — transactional email delivery.
  • LiveKit — real-time voice and video transport, media routing, and live-room connectivity.

Retention and deletion

We keep account and content data while your account is active or as needed to operate, secure, and moderate the Service. You can delete your account from the Midas app under Settings → Account deletion, or on the website under Settings → Account. You can also review account deletion options at Account Deletion. Account deletion permanently removes your profile, posts, comments, votes, saves, messages, notifications, and other account-linked data, except where retention is required for legal, security, abuse-prevention, or transaction-record purposes.

Midas does not retain live microphone or camera media by default. Limited call-session metadata, operational logs, and reports may be retained as needed for reliability, security, moderation, and abuse prevention.

Your rights

  • Access: You can view your profile and content from your profile page.
  • Correction: Edit your profile in Settings → Profile.
  • Deletion: Delete your account in Settings → Account, or review the deletion request options at Account Deletion. This permanently removes your profile, posts, comments, votes, saves, messages, and notifications.
  • Export: Contact us if you need a copy of your data.
  • Camera and microphone controls: You can keep your camera off, mute your microphone, leave a call at any time, or revoke permissions in your device settings.

Children's privacy

Midas is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the updated policy at this URL with a new "last updated" date.

California residents (CCPA)

If you reside in California, you have the right to know what personal information we collect about you, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, email us at the address below.

Contact

Questions about this policy or Speed Labs LLC? Email us at support@dearmidas.com. We typically respond within two business days.