Gate:M8s ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use the Gate:M8s application (the "Service").
1. Data Controller
Gate:M8s operates as the data controller for personal data collected through the Service. For any questions regarding your personal data, contact us at support@gatem8s.com.
2. Personal Data We Collect
2.1 Account Information
- Email address (used for authentication and communication)
- Encrypted password (managed by our authentication provider)
- Account creation date
- OAuth tokens (if using Google sign-in)
2.2 User Profile Information
- Nickname / display name
- Recognition description (short text to help others identify you at the gate)
- Profile photo (optional, if uploaded by you)
- Spoken languages
2.3 Moment Creation and Participation Data
- Moments you create (type, gate, time window, status)
- Moments you join
- Coordination messages sent within a Moment
- Participant tags and recognition details
2.4 Location-Related Information
- Selected airport (user-chosen, not GPS-based)
- Gate selection (user-chosen)
We do not track your GPS location. Airport and gate selections are made manually by you.
2.5 Notification Data
- Push notification subscription endpoints (for delivering push notifications)
- Notification preferences and settings
- In-app notification history
2.6 Authentication Data
- Session tokens for maintaining login state
- OAuth tokens (if using Google sign-in)
3. Data Storage and Security
All data is stored on secure cloud servers with industry-standard encryption in transit and at rest. Authentication data is managed by our identity provider. We do not store payment card information. Access to personal data is restricted to authorized personnel only.
4. Legal Basis for Processing (GDPR)
- Performance of a contract — providing the service you requested
- Consent — push notifications and marketing communications
- Legitimate interests — service improvement and security
5. Your Rights Under GDPR
- Right to access your personal data
- Right to rectification (correcting inaccurate data)
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
To exercise any of these rights, contact support@gatem8s.com.
6. Account Deletion
You can delete your account at any time from Settings → Delete Account. This will permanently remove:
- Your profile and personal information
- Moments you created or joined
- Waitlist subscriptions and notifications
- Push notification subscriptions
This action is irreversible.
7. Data Retention
We retain your personal data only as long as necessary to provide the service. Moment data is automatically expired when moments end. Account data is deleted upon account deletion.
8. Third-Party Services
We use the following third-party services:
- Authentication provider (for secure login)
- Cloud hosting provider (for data storage)
- Google (for optional OAuth sign-in)
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes through the app or via email.
10. Contact Us
For any questions about this Privacy Policy or your personal data, contact us at support@gatem8s.com.