Michi — Privacy Policy

Effective date: 23/05/2026

Michi ("Michi", "we", "us") is a social app for finding, creating, and joining real-world activities, coordinating through chats, and building a small, genuine friend graph. This Privacy Policy explains what we collect, how we use it, who we share it with, and the choices and rights you have. We've kept it short and plain on purpose.

Michi is operated by legal entity name, based in Quebec, Canada, and is intended for users in Canada. We handle personal information in line with Quebec's Act respecting the protection of personal information in the private sector (Law 25) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information we collect

Information you give us

• Account and profile: name, username, email address, password (stored encrypted, never in plain text), date of birth (to confirm you're 18+), profile photo, and bio.
• Content you create: events you post, messages you send in group as well as private chats, and any photos, video, audio, or text you upload.
• Activity: the events you join or host, side quests you complete, and the "third places" you add to your profile.
• Messages to us: when you contact support or report something.

Information we collect automatically

• Connections: who you connect with, as well as basic interaction signals we use to keep your friend list current (see auto-decay in Section 5).
• Device and technical: when your app connects to our servers, we receive standard technical information such as your IP address, which we use to deliver, secure, and troubleshoot the Service.
• Staying signed in: to keep you logged in, we store a secure session token on your device, in the device's protected storage (iOS Keychain / Android Keystore). We delete it when you log out. We don't use advertising trackers, third-party analytics, or device-identifier tracking.
• Diagnostics: crash and error data that helps us fix problems.

Location : handled in Section 3.

We do not collect government ID, biometric, health, or payment-card information, because Michi doesn't offer ID/face verification, health features, or paid purchases.

2. How we use your information

We use your information to:

• create and secure your account and confirm you meet our 18+ requirement;
• show you nearby events and help you connect with people through shared activity;
• run chats and deliver the content you post to the people you intend;
• keep Michi and its community safe, and enforce our Terms;
• understand and improve how the app works (Section 7); and
• respond to you and meet our legal obligations.

We use your information only for these purposes, and won't use it for a new, unrelated purpose without asking you first.

3. Location and permissions

Michi asks for your device's location permission, and we only use location while the app is open:

• Events and recommendations: to show you events and activities near you and to suggest things to do, we check your location when you open those screens. We don't need pinpoint precision for this.
• Sharing your location in a chat: if you choose to share your live location in a chat, we share it with the people in that chat while you're sharing, and you can stop at any time.

You can grant or turn off location any time in your device settings, and we ask before using it. Location-based features won't work without it. We don't track your location in the background, we don't show a live map of where users are, and we don't sell location data.

4. How we share your information

We don't sell your personal information, and we don't use it for advertising. We share it only in these situations:

• Service providers who help us run Michi under contract and on our instructions. For example, cloud hosting and infrastructure, and a server-side error-monitoring service. They may use the information only to provide their service to us.
• Other people on Michi, but only what you choose to share like your profile, the content you post, and what you share in chats and events.
• Safety and legal reasons: To comply with the law, respond to a valid legal request, enforce our Terms, or protect the safety and rights of our users, the public, or Michi (including investigating reports and incidents).
• A business transfer: If Michi is part of a merger, acquisition, or sale of assets, your information may transfer as part of that deal, subject to this policy.

5. How long we keep it

Michi keeps personal information only as long as it needs it:

• Friend connections (auto-decay): connections you don't interact with for about 12 months drop off automatically.
• Usage analytics: up to 24 months, then aggregated or anonymized.
• Personal data: deleted when you delete your account, except for limited records we're required to keep for legal or safety reasons.

6. How we protect it

We use security measures suited to the sensitivity of the information, including encryption in transit, encrypted (hashed) passwords, and access controls that limit who on our team can see your data. No system is perfectly secure, but we work to protect your information and to respond quickly if something goes wrong (Section 11).

7. Analytics and error monitoring

Michi doesn't use third-party product-analytics or advertising trackers, there's no analytics SDK in the app. To keep Michi working, we use a server-side error-monitoring service that records crashes and technical errors so we can fix them. An error report may be linked to your account ID so we can investigate it, and the tool is configured to minimize personal data (for example, it drops email and IP addresses in our production environment). This data is used only to diagnose and fix problems, never for advertising and never sold.

Michi's event and connection suggestions are generated automatically to help you find things to do; they're suggestions, not decisions with a legal or similarly significant effect on you, and you can tell us if something looks wrong.

8. Your rights and choices

Under Law 25 and PIPEDA, you can:

• access the personal information we hold about you;
• correct information that's inaccurate or incomplete;
• withdraw consent (for example, by turning off a permission or unsubscribing);
• get a copy of your information in a portable, commonly used format;
• delete your account and information, subject to the limited records we're allowed or required to keep (Section 5); and
• ask about any automated processing that affects you.

To make a request, email contact email. We respond within the time the law requires (generally 30 days under Law 25).

9. Communications

Messages about your account, events, chats, and security are part of using Michi. We send marketing messages only if you've opted in, and you can unsubscribe at any time. Consistent with Canada's Anti-Spam Legislation (CASL), our commercial messages identify us and include a working unsubscribe link and our mailing address (mailing address).

10. Where your information is stored

We store and process your information to run Michi. Some service providers we rely on (such as our error-monitoring service) may process information outside Quebec. Before relying on a provider outside Quebec, we assess that your information will receive protection comparable to Quebec's standards, as Law 25 requires.

11. Confidentiality incidents (data breaches)

If a confidentiality incident happens, we take reasonable steps to limit the harm and prevent it from recurring, and we keep a register of incidents. If an incident creates a risk of serious injury, we'll notify the people affected and the Commission d'accès à l'information du Québec (CAI), as the law requires.

12. Age requirement

You must be 18 or older to use Michi. We don't knowingly collect personal information from anyone under 18; if we learn that we have, we'll delete it.

13. Changes to this policy

If we make a material change, we'll post the new version with an updated effective date and let you know in the app or by email before it takes effect.

14. Contact and complaints

Questions or requests? Email contact email. If you're not satisfied with our response, you can contact the Commission d'accès à l'information du Québec (CAI) or the Office of the Privacy Commissioner of Canada (OPC).

15. French version

A French-language version of this Privacy Policy is available and applies to our Quebec users. The Charter of the French Language requires it; publish the French version alongside this one and keep them in sync.