Privacy
Your data, in plain words.
MESIOO asks for what it needs to get two people to the same table. Nothing more. This page says what that is, who sees it, and how to make it go away.
Last updated 4 November 2026
The short version
- We never sell your data, and we don't show ads.
- Nobody ever sees exactly where you are. Plans show a venue, and that's all.
- Chat opens only between a host and the one guest they pick. Nobody else reads it.
- Nothing scores you. Reviews go to our safety team, never to other members.
- You can delete your account in the app, any time. Your profile, photos, plans and messages go with it.
Who we are
MESIOO is made in Riga, Latvia. We decide how your data is used, which makes us the "controller" under the EU's GDPR.
Questions, requests or worries: nauris.loginss@gmail.com. A real person reads it and replies within 30 days, usually much sooner.
What we collect
When you sign up
- Your email and a password. The password is stored only as a hash. We can't read it.
- Your date of birth. To check you're 18 or older. Other members see your age, not your birthday, and you can hide it.
- Your name, city, gender and who you'd like to meet. Plus the age range and distance you're open to.
What you add to your profile
- Photos, a short bio and your interests.
- Optional details like drinking, smoking, workouts, pets and kids. Each one has its own switch for whether others see it.
- A safety contact's name, if you add one, for sending a plan to a friend before you go.
When you use the app
- Plans you post: what, when, the venue and its address, a rough cost and a note.
- Requests to join plans, and the host's choice.
- Messages between you and the one person on a confirmed plan.
- Check-ins, reviews, reports and blocks.
- Membership and boosts, once paid features open. Payments will go through the App Store or Google Play. We never see your card.
- How the app is used: which screens open and which buttons are tapped, with a random ID for your device and session. We use this to find what's confusing or broken. It stays in our own database and isn't shared with ad networks.
What we don't collect
- Your phone's live GPS location. You choose your city yourself.
- Your contacts, or anything from other apps.
- ID documents. When we add ID checks, the documents will not be stored. We'll keep only the result: verified or not.
Your gender and who you'd like to meet can say something about your sexual orientation, which the GDPR treats as especially sensitive. We use them only to show you plans you asked for. You give us that information by choosing to add it, and you can change or delete it any time.
Who sees what
If a host picks someone else, the other people who asked are told the plan is closed. They're never told who was picked.
We share data outside MESIOO only with the services that run the app for us (see below), or when the law requires it. If someone may be in danger, we may share what's needed with the police.
Why we use it
- To run the service you signed up for: your account, your profile, plans, requests and chat. (GDPR: performing our contract with you.)
- To keep people safe: checking age, handling reports and blocks, and stopping abuse. (Our legitimate interest in a safe service, and in some cases a legal duty.)
- To make the app better: learning which screens confuse people and what breaks. (Our legitimate interest. You can object, see "Your rights".)
- Sensitive details like who you'd like to meet: only because you chose to give them to us. (Your explicit consent.)
We don't make automated decisions about you that have legal or similarly serious effects. The order plans show up in is based on things like time, distance and your filters, and you can always change the filters.
Where it's kept
- Supabase hosts our database, sign-in and photo storage, in Frankfurt, Germany. Photos are private and shown to members through links that expire.
- Vercel runs the app's servers in Frankfurt, and delivers the app and this website from servers near you.
- Apple and Google deliver the app and, later, handle payments and notifications under their own privacy policies.
Our data stays in the EU wherever we can keep it there. Where a provider may process it outside the EU, that transfer is covered by the EU's Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long we keep it
- While your account is open, we keep what you've added so the app works.
- When you delete your account (Settings → Delete my account), we delete your profile, photos, plans, requests, messages, reviews and reports straight away. Copies in our database backups are overwritten within 30 days.
- Usage events stay after you leave, but they are cut loose from your account, so they no longer point to you.
- If the law makes us keep something (for example, records of a payment), we keep only that, only as long as required.
Your rights
Under the GDPR you can ask us to:
- show you the data we hold about you
- correct anything that's wrong
- delete it
- give it to you in a file you can take elsewhere
- stop or limit using it
- stop using it to improve the app
Where we rely on your consent, you can withdraw it any time. Most of this you can do yourself in the app: edit your profile, switch details off, or delete your account. For anything else, email nauris.loginss@gmail.com.
If you think we've got it wrong, you can complain to Latvia's data protection authority, the Data State Inspectorate, or to the authority where you live. We'd like the chance to fix it first.
Age
MESIOO is for adults. You must be 18 or older to sign up. If we find an account belongs to someone younger, we delete it.
Changes
When this page changes in a way that matters, we'll tell you in the app before the change takes effect. The date at the top always shows the latest version.