Privacy Policy

What we collect

• Account information: email, password hash, username, display name, optional bio, optional avatar.
• Profile preferences: city, primary language, year arrived in the US, what brought you here. All of these are optional and used to personalize your feed and surface relevant communities.
• Content you post: posts, comments, votes, saved-post lists, direct messages, group messages, reports.
• Technical data: standard server logs (IP addresses, user-agent strings, request paths) retained for security and abuse prevention.

How we use it

• To operate the Service: render your feed, send your DMs.
• To personalize your experience based on your city and language preferences.
• To moderate the Service and respond to abuse reports.
• To send transactional emails like email verification and password reset links.

Who can see what

• Public: your username, display name, bio, avatar, city (if you set it), posts in public communities, comments on public posts, vote totals, badges, karma, post and comment counts.
• Community members only: posts and comments in private communities.
• Just you: your email, your saved-post list, your notification list, your direct messages, your block list.
• Moderators of your communities: reports you file and content you post in their community.
• Midas administrators: all data, used only for moderation, abuse handling, and operational support.

What we do not do

• We do not sell your personal data to third parties.
• We do not run third-party advertising trackers on the Service.
• We do not share your email address with other Midas users.

Service providers

We use the following providers to operate the Service. Each one processes a limited subset of your data and is bound by their own privacy terms:

• Supabase — database, authentication, file storage, realtime messaging.
• Vercel — application hosting and edge serving.

Your rights

• Access: You can view your profile and content from your profile page.
• Correction: Edit your profile in Settings → Profile.
• Deletion: Delete your account in Settings → Account. This permanently removes your profile, posts, comments, votes, saves, messages, and notifications.
• Export: Contact us if you need a copy of your data.

Children's privacy

Midas is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the updated policy at this URL with a new "last updated" date.

Contact

Questions about this policy? Contact the Midas team via the in-app messaging system.

Notice: This document is a starting template, not legal advice. Have a lawyer review and customize it before public launch.