Your privacy comes first

This policy explains what personal data Midofo collects, why, who we share it with, how long we keep it, and what control you have. It applies to the Midofo mobile app — dating and social discovery (Android package com.forgesoftgh.midofo) — and the services that power it.

Applicable law includes Ghana's Data Protection Act, 2012 (Act 843). Where you are covered by other privacy laws (for example the EU GDPR or UK GDPR), you have the additional rights described in section 7.

Account & identity

First and last name, email address, phone number (if you sign in with OTP), date of birth / age, gender, Firebase user ID. From you at sign-up (Google Sign-In, phone OTP). Required — the app cannot function without an account.

Profile content you publish

Profile and gallery photos, bio, interests, relationship-style preferences, dating preferences (age range, distance, gender), HeartLoop videos. Photos, age and general location are required to appear in discovery; the rest is optional.

Precise location

Foreground GPS coordinates, reverse-geocoded to city / region / country; a location you share inside a chat. Only after you grant permission, or typed in by you. Optional, but Near You and distance features are limited without it.

Messages & social activity

Chat text and shared media, match / swipe / like history, date plans you create or join, feedback and support messages.

Voice calls & video calls

Call metadata (who called whom, when, audio vs video, duration, outcome — stored per-user call log). Live audio/video travels directly between the two devices (peer-to-peer) and is not recorded or stored by us; temporary connection data is exchanged only to set the call up.

Voice input & AI Buddy chats

Voice recordings sent for speech-to-text, your Buddy conversation history, and the profile context Buddy uses to reply (name, city, interests — never your password or payment details). Only if you use Buddy.

Verification & safety data

Identity-verification material you submit (photos of ID), reports you file about other users, users you block, moderation decisions. Only if you verify, report, or are reported.

Device & diagnostics

Device model, OS version, app version, push-notification token, crash reports with pre-crash event breadcrumbs, aggregated usage events (screens opened, features used), IP address and network information seen by our servers in the course of providing the service.

Purchases & subscriptions

Subscription tier / entitlement status, purchase and restore events, platform order identifiers (via RevenueCat and Google Play). Only if you subscribe. Your card details go to Google, never to us.

We do not access your phone contacts — invites are links that you choose to share. We do not collect precise location in the background: location is read only while the app is open and only after you grant permission.

Create and secure your account; sign you in

Contract — this is the service you asked for.

Show your profile in Swipe / Near You / Suggested and rank matches

Contract + legitimate interest in running a dating service.

Deliver chats, date plans, notifications, and calls

Contract.

Power the Buddy AI companion

Contract (the feature) + consent for voice input, given when you tap the microphone.

Verify identities, review reports, block abusive accounts, enforce 18+

Legal obligation + legitimate interest in user safety.

Process subscriptions and restore purchases

Contract.

Fix bugs, measure stability, improve matching (aggregated)

Legitimate interest.

Comply with lawful requests and protect rights and safety

Legal obligation.

We do not use your data for third-party advertising, and we do not sell personal information to anyone.

Midofo is a dating app: your name, age, photos, bio, interests, relationship style, general location (city/region/country — never your live GPS pin), and HeartLoop videos are visible to other users through matching and discovery. Profiles missing a photo, age, or location are treated as incomplete and are hidden from discovery feeds.

Chat messages, shared photos, and locations you send inside a chat are visible to the other participant(s) in that chat. During a call, your voice/video and your network address are exchanged directly with the other caller so media can flow — inherent to peer-to-peer calling and only while you are on the call.

Other Midofo users

Your public profile and chat content — the core service of discovery and communication.

Google (Firebase)

Authentication, Cloud Firestore, Cloud Storage, Cloud Messaging (FCM), Crashlytics, Vertex AI: account identifiers; profile, chat, and app data you store; push tokens; crash reports; Buddy conversation history and profile context sent to the Gemini model for reply generation. Processed under Google's terms and our instructions.

Google network services

STUN servers and speech-recognition service: IP address / network path during call setup; voice audio when you dictate to Buddy.

Expo

Over-the-air updates and push-notification routing: app version / update identifiers; push tokens and message payloads.

RevenueCat

App user ID, subscription tier, purchase/restore events — managing subscriptions across devices.

Google Play (billing)

Order and payment information for subscriptions. Google handles your payment credentials; we only learn that the purchase succeeded.

Our moderation / support reviewers

Reported profiles and messages, verification submissions, support tickets. ID images are deleted after the verification decision is made.

Law enforcement / regulators / courts

Only what is lawfully required.

A buyer or successor

The whole account base, only if the business is sold or merged — you would be notified and could delete your account first.

We share the minimum necessary in each case. Service providers act on our instructions and may not use your data for their own purposes. Data may be processed outside Ghana — notably Firebase and Vertex AI run in Google Cloud regions including the United States (us-central1 for AI) — under the providers' contractual safeguards.

• Encrypted in transit (HTTPS/TLS) for all client–server traffic; authenticated, participant-scoped database rules so users can only read data they are entitled to.
• Firebase Authentication with verified sign-in methods (Google, phone OTP); secrets are kept out of the app bundle and managed as server-side environment values.
• Access to moderation tooling is limited to authorised reviewers.
• No method is 100% secure. If we discover a breach affecting your data, we will notify you and the relevant authority as the law requires. See our safety guide for how to protect yourself.

• Active account: everything above for as long as you keep the account.
• Account deletion (Settings → danger zone → Delete Account): your profile, photos, videos, matches, messages, and preferences are removed from our active databases; deletion is staged (pending_deletion) so an accidental tap can be recovered, then completed. Call setup records are transient and vanish with the call.
• Backups and logs: anonymised backups may persist up to 90 days after deletion for legal and operational purposes, then age out.
• Verification IDs: deleted after the approve/reject decision, not kept on file.
• Crash/diagnostic data: kept per Google's Crashlytics/Analytics retention, in aggregated or de-identified form.

• View / correct: edit your profile, photos, and preferences any time in Settings.
• Delete: delete your account any time in Settings (see retention above for what happens next), or follow our account-deletion guide.
• Opt out: disable non-essential notifications in-app or in device settings; revoke camera, microphone, photo, location, or speech permissions in device settings (the related features stop working until re-granted).
• Export / erase / restrict / object (GDPR/UK GDPR and Ghana Act 843 requests): email midofodating@gmail.com stating what you want; we respond within 48 hours and complete verifiable requests within 30 days.
• Complain: to us first at the address above, or to your data-protection authority (in Ghana, the Data Protection Commission).

Midofo is strictly 18+. We do not knowingly collect data from anyone under 18; if we learn an account belongs to a minor, we terminate it and delete its data. By creating an account you confirm you are at least 18.

Camera

Recording HeartLoop videos; video calls. Asked when you record or start a video call.

Microphone

HeartLoop audio; voice/video calls; talking to Buddy. Asked when you record, call, or tap Buddy's mic.

Photos / media library

Uploading profile photos and HeartLoop clips from your gallery. Asked when you pick a photo or video.

Location (foreground)

Near You, distance display, manual location, chat location shares. Asked when you enable discovery location or share a place.

Notifications

Match, message, call-ring, and reminder alerts. Asked on first launch / when enabling.

Speech recognition

Converting your dictated Buddy messages to text (processed by Google speech services). Asked when you first dictate to Buddy.

We may update this policy when features, providers, or laws change. Material changes are announced in-app or by email; continued use after the effective date means you accept the update. The current version is always at https://www.midofo.com/privacy and in the app at Settings → Privacy.

The full Terms of Use apply alongside this policy.