Privacy Policy
mhm is built around one promise: a signal you set stays private unless the other person chooses the same signal while both are active. This policy explains what we collect to make that work, how we use it and the choices you have.
What we collect
- Account information. Your email address or Sign in with Apple identifier, which our authentication provider uses to sign you in. If you use Hide My Email, we receive Apple's relay address.
- Profile. The display name and username you choose. Any photo you set for another person stays on your device.
- Connections. Who you are connected with, connection requests you send or receive, and blocks or reports you make.
- Signals and matches. The signals you activate, when they start and expire, custom signals you create or approve, matches, reactions and the Moments that record them.
- Device information. A push notification token and limited device tokens that let widgets and Apple Watch show your own status.
- Purchases. If you buy mhm plus, Apple processes the payment. We receive purchase and subscription status through RevenueCat, but never your card details.
- Support messages. Anything you send us when you contact support.
We do not use advertising trackers and we do not sell or rent personal information.
How signals stay private
Unmatched signals are visible only to you. They are not shown to the other person, used in their notifications, sorted into their screens or exposed through our API. When a signal is matched, both people see that match. Match notifications show the emoji only, never the signal label or the other person's name.
How we use information
- To run mhm: sign-in, connections, signals, matching, notifications, widgets and Live Activities.
- To provide mhm plus and Partner Pass benefits you are entitled to.
- To keep mhm safe: rate limits, abuse prevention, reports and blocks.
- To respond to you and to meet legal obligations.
Service providers
We use Cloudflare to host our servers and database, Supabase for authentication, Apple for Sign in with Apple, push notifications and in-app purchases, and RevenueCat to verify purchases. They process information only to provide their services to us.
Retention and deletion
You can delete your account in the app under Settings. When you do, we revoke your sessions and devices, remove your name, username and preferences, end your connections and delete your signal history. A person you matched with may keep their own record of a past Moment, without your name or username. Copies in our providers' backups expire on their backup schedule, generally within 30 days. We may keep limited records longer when the law requires it or to resolve safety reports.
Your choices and rights
You can edit your profile, turn off notifications, remove or block a connection and delete your account at any time. Depending on where you live, you may have rights to access, correct, export or delete your data, or to object to some processing. Contact us at privacy@mhmtoo.app and we will respond within the time required by law.
Age
mhm is for people aged 13 and older. If you are under the age of digital consent where you live, use mhm only with a parent's or guardian's permission. If we learn that a child under 13 has an account, we will delete it.
International transfers
Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for those transfers.
Changes
If we make material changes, we will update this page and let you know in the app before they take effect.