Privacy Policy

Effective date: October 11, 2026 · Updated October 11, 2026 (in-app account deletion, 21+ age check, Meet at venue, blocking and reporting, venue accounts and following)

This policy explains what information the Craic app ("Craic", "we", "us") collects, why, who it is shared with, how long it is kept, and the choices you have. Craic is operated by MInd. You can contact us at shop@mellyindustries.com.

1. Information we collect

Account

• Email and password if you sign up with email, or your Sign in with Apple identifier. With Sign in with Apple you can choose to hide your email; Apple then gives us a private relay address.
• Technical sign-in data our hosting provider records to keep your account secure, such as sign-in times and IP addresses in authentication logs.

Age check (21+)

• After you sign up or sign in, Craic asks for your date of birth to confirm you're 21 or over. The date is sent once to our server, which works out your age. We don't store your date of birth; we only keep that you confirmed you're 21+ and when. If you're under 21, nothing is stored and you can't use Craic. This is a self-declaration, not ID verification.

Profile (visible to other signed-in Craic users)

• Username, display name (required), optional short bio and optional profile picture. Other users can find you by username.

Contact details (optional, private)

• You can add phone, email, address, Instagram, X, TikTok, Snapchat, Facebook or LinkedIn. These are never public. You choose, field by field, which details each friend can see, and you can change or revoke that at any time. Unfriending someone removes all sharing between you both.
• Friend requests and friendships, including the fields a requester asked for and an optional message.

Location

• Precise location, while you use the app, to show bars near you or near a neighborhood you search, and to confirm you're inside a bar's check-in zone. Your location and its GPS accuracy are sent to our servers when you check in or post to a bar's Mightiness feed; that check-in or post stores the location.
• Craic can check you in automatically when you're inside a bar's zone while the app is open.
• Live location sharing with friends (opt-in, off by default). If you turn it on in Me → Location sharing, your exact location is updated while Craic is open (about every 60 seconds or when you move about 50 m). Only the friends you choose (all friends, or selected friends) can see it. Each location expires 2 hours after its last update, and turning sharing off deletes it immediately.
• Neighborhood and place searches and bar/ATM lookups on the map are done on your device with Apple Maps (MapKit). These requests go from your device to Apple. Bars that Apple Maps finds may be added to Craic's shared list of bars (name, address, coordinates and an Apple place ID), with a note of which account added them.

Content and activity

• Mightiness photos and videos (including any audio in videos) that you post at a bar, with the bar, time and location. The media file and the post are deleted 2 hours after posting. A single dominant color from each post, calculated on your device, plus its view count, is kept for 6 hours to color the bar's "Mightiness" ring. It contains no image or link to you.
• Views: which posts you viewed, used for unique view counts. Deleted with the post.
• Venue chat and direct messages (available while you're checked in), and check-ins. Deleted after 24 hours.
• Bar ratings (🔥) and, for bar staff, headcount reports. Deleted after 7 days.
• Live music listings you add (act, bar, start and end time). Deleted 1 day after the set ends.
• Facebook Pages you link to a bar, so its public events can be checked for live music.
• Calendar: events you create, and possible events Craic finds in messages you've loaded. Detection runs on your device; a detected event is saved privately to your account with a short excerpt of the message text, so you can confirm or dismiss it. Only you can see your calendar. If you choose to add an event to Apple Calendar, Craic asks for write-only calendar access; "Add to Google Calendar" opens a Google link; ".ics" export creates a file you share yourself.
• Camera, microphone and photo library are used only when you choose to capture or pick media or a profile picture, or to save your own media to your library.

Facebook (only if you connect it)

• If you tap Connect Facebook on the Friends screen, you log in with Facebook and allow Craic to see your public profile and friends list. We store your app-specific Facebook user ID, linked privately to your account, plus the Facebook login details our authentication provider keeps for linked logins.
• We use your friends list only to show which of your Facebook friends also use Craic and have connected Facebook. Facebook only returns friends who also use Craic. We don't store your friend list, we don't keep your Facebook access token, and we never post to Facebook.
• For bars with a linked Facebook Page, our servers read that Page's public upcoming events to list live music. This doesn't involve your Facebook account.

Venue (business) accounts

• If you register a venue, we collect the venue you claim (picked from Apple Maps), your role (owner or manager), a business contact email and phone number, and optionally a website, Facebook Page link and capacity, plus your confirmations that you're authorized to represent the venue and that it serves people aged 21 or over. We also record the verification outcome (pending, verified, rejected or revoked), when it happened, how we checked (for example a phone call), and review notes. The business contact details are private: only MInd. sees them, to verify you and contact you about the venue.
• A verified venue's public information (name, photo, cover image, hours, description, website, follower count, venue posts and announcements) is visible to Craic users.
• Venue posts (photo/video + caption) are visible to all signed-in users and kept for 30 days or until the venue deletes them. Announcements appear in the venue's chat and follow the chat rules (visible to people checked in, deleted after 24 hours).

Following venues

• When you follow a verified venue, we store that you follow it. Only you can see which venues you follow; venues and others see only the total follower count. If you add a venue post to your calendar, the detected event is saved privately to your calendar like other detected events.

Meet at venue, blocks and reports

• Meet at venue: while you're checked in at a bar (for 2 hours after check-in), other Craic users checked in at the same bar can see your display name and profile picture in a list, and can message you or send you a friend request. This list doesn't show your username or contact details. It's on by default, and you can turn it off at any time with the Show me in Meet at venue switch (on the bar's check-in card, on the Friends tab, or under Me). While it's off you aren't shown to others, and you don't see them either. The setting is stored with your profile.
• Blocks: if you block someone, we store that so you and they are hidden from each other in Meet at venue, people lists, venue chat and direct messages, and can't send each other friend requests.
• Reports: if you report someone, we store the report (who reported whom, the reason, any details you add, and the bar if relevant) so MInd. can review it and act on it.

2. How we use information

• To run Craic: accounts, profiles, friends, check-ins, posts, chat, ratings, live music, the calendar and the map.
• To estimate how busy bars are and the wait. These estimates use aggregated, recent check-ins, posts and ratings.
• To enforce rules like check-in zones and rate limits, to review reports and act on abuse (for example by removing content or accounts), and to keep the service secure.
• To respond to you when you contact us.

We don't use your information for advertising, we don't build marketing profiles, and we don't sell or rent your personal information. We don't "share" it for cross-context behavioral advertising, as California law defines that term.

3. Who can see what

• Other users: your username, display name, bio and picture. Your posts and venue chat messages are seen by people at that bar (chat requires a check-in), and your ratings feed bar scores anonymously.
• People checked in at the same bar as you: your display name and picture in Meet at venue, unless you turn it off or have blocked each other. Friend requests you send from there show the recipient only your display name and picture until they accept.
• Friends: only the contact fields you share with them, and your live location only if you turned sharing on for them.
• Service providers (processors), who handle data for us:
  • Supabase hosts our database, authentication, file storage and server functions, in the United States (AWS us-east-1).
  • Apple: Sign in with Apple (when you delete your account, we ask Apple to revoke Craic's Sign in with Apple access), and Apple Maps searches made from your device.
  • Meta (Facebook): only if you connect Facebook, or for reading public events of Pages linked to bars.
• Legal reasons: if required by law, or to protect the rights, safety and property of our users, the public or MInd.
• Business transfers: if MInd. or Craic is involved in a merger or acquisition, under a privacy policy at least as protective as this one.

4. How long we keep it

Our hosting provider may keep backups and security logs for a limited period after deletion.

5. Your choices and rights

• In the app: edit or remove your profile and contact fields, change who sees each field, unfriend people, delete your live music listings, turn location sharing off, turn Show me in Meet at venue off, block, unblock and report people, and disconnect Facebook. You can also turn off location, camera, microphone, photos and calendar access in iOS Settings, though some features won't work without them.
• Delete your account in the app: Me → Delete account permanently deletes your account and data right away. See Delete your data.
• Access, correction, deletion and portability: you can also email shop@mellyindustries.com from (or naming) your account email. See Delete your data. We'll verify the request and respond within 30 days.
• Depending on where you live (for example under the GDPR/UK GDPR, or US state laws such as the CCPA/CPRA), you may also have the right to object to or restrict processing, withdraw consent, appeal a decision about your request, and complain to your local data protection authority. We won't discriminate against you for using these rights. You can use an authorized agent; we may ask them for proof.
• Legal bases (EEA/UK): we process data to provide the service you asked for (contract), with your consent (live location sharing, Facebook connection, camera/photos/calendar access), and for our legitimate interests in security and abuse prevention.
• International transfers: data is stored in the United States. Where required, we rely on appropriate safeguards such as our providers' standard contractual clauses.

6. Age requirement

Craic is about bars and is only for adults: you must be 21 or older (and at least the legal drinking age where you live). Craic asks for your date of birth after sign-up and blocks anyone under 21; it stores only the 21+ confirmation, not the date. Craic is not directed at children, and we don't knowingly collect data from anyone under 21. If you think a minor is using Craic, contact us and we'll delete the account.

7. Security

Data is encrypted in transit (HTTPS/TLS). Access in our database is restricted per user with row-level security. For example, contact fields, live locations, calendars and Facebook links can only be read by the people allowed to see them. Our server keys are never shipped in the app. No system is perfectly secure, so please use a strong password and contact us if you suspect a problem.

8. Changes to this policy

We may update this policy as Craic changes. We'll post the new version here with a new effective date, and tell you in the app or by email if the changes are significant.

9. Contact

MInd. · shop@mellyindustries.com

This policy was prepared from a template that describes how the app currently works. It is not legal advice.