MSITI.

Privacy Policy

Last updated: July 14, 2026

MSITI ("MSITI", "we", "us", or "our") is a community app built for Albanians around the world. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using MSITI you agree to this Policy.

1. Information We Collect

We collect only what we need to run the app:

Account information — when you sign up with email or with Sign in with Apple, we receive your email address and a unique account identifier. During onboarding you provide a display name, gender, and height; you may add profile photos.

Face verification data — if you choose to verify your profile (or where verification is a required step when creating a profile), your device camera captures a short live view of your face, which is used only to confirm you are a real person and that you match your first profile photo. See "Face Verification" below.

Stories (photos & captions) — the photos and optional captions you choose to post as Stories.

Location — when you post a Story, we collect your device's precise location (latitude and longitude) at that moment so the Story can be placed on the map. See "Location" below.

Messages — the content of direct messages you send to and receive from other users, so we can deliver them.

Subscription status — if you purchase MSITI Pro, we receive your subscription status from Apple and our subscription provider. We never receive or store your full payment-card details.

Device & usage data — basic technical information (such as device type, app version, and a push-notification token if you enable notifications) needed to operate and secure the service.

2. How We Use Your Information

To create and manage your account and profile.

To verify profiles and protect the community from fake or impersonated accounts.

To let you post Stories and display them on the map and in the Stories tab.

To deliver direct messages between users.

To manage subscriptions and unlock MSITI Pro features.

To keep the community safe — reviewing reports, enforcing our Terms, and removing content or accounts that violate them.

To send service notifications (for example, new messages), if you enable them.

3. Location

Location is collected only when you choose to post a Story. A Story is shown on a public map, so a location is required to post one — if you deny location access you cannot post a Story, but you can continue to use the rest of the app.

The location attached to a Story is visible to other users on the map and within the Story. Stories, including their location, are automatically deleted approximately 24 hours after posting. We do not collect your location in the background, and we do not use your location for advertising or to track you across other apps or services.

4. Face Verification

To protect the community from fake profiles, MSITI offers face verification. In some cases, verification is a required step when creating a profile.

How it works: with your explicit consent, given in the app before the camera opens, your device camera performs a short live check to confirm a real person is present, and the resulting facial imagery is compared with your first profile photo. This processing is performed on our behalf by Amazon Web Services (Amazon Rekognition) in the European Union (Ireland).

What we keep — and what we don't:

The live camera imagery used for verification is processed in memory only. It is never stored and is discarded immediately after the comparison.

If verification succeeds, we keep a private security copy of the profile photo that matched your face (a "verification anchor"). It is used solely to check that photos you add to your profile later show the same verified person, and it is never visible to other users or to anyone else.

We keep a log of verification attempts (pass/fail results and similarity scores — never images) to prevent abuse and secure the feature.

Verification is based on your explicit consent. You may withdraw consent at any time by deleting your account, or by contacting us at support.msiti@gmail.com — in which case your verification anchor is deleted and your verified status is removed.

5. What Is Visible to Others

MSITI is a social app, so some information is shared with the community by design:

Your profile (display name and profile photo) is visible to other users.

If your profile is verified, a verification badge is visible to other users. The imagery used for verification is not.

Your Stories (photo, optional caption, and location) are visible to other users until they expire after about 24 hours.

Direct messages are visible to the people in the conversation.

6. How We Share Information

We do not sell your personal information, and we do not use it for cross-app tracking or third-party advertising. We share information only with service providers that help us run the app, under agreements that limit their use of it:

Supabase — secure cloud hosting, database, authentication, and media storage.

Amazon Web Services (AWS) — face verification processing (Amazon Rekognition, EU region — Ireland). AWS processes verification imagery on our behalf and does not retain it.

Apple — Sign in with Apple, subscription purchases, and push notification delivery.

RevenueCat — subscription management.

Expo — app delivery (updates) and push-notification infrastructure.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users or the public.

7. Data Retention

Stories and their attached location are deleted automatically about 24 hours after posting. You can delete your own Story at any time before then.

Live verification imagery is never retained — it is discarded immediately after the check. Your verification anchor is kept only while your account exists (or until you withdraw consent) and is then deleted. Verification logs (results and scores, never images) are kept only as long as needed to secure the feature.

Account information, profile, and messages are kept while your account is active and removed when you delete your account, except where we must retain limited records to comply with legal obligations or resolve disputes.

8. Your Choices & Rights

Edit your profile and display name at any time in the app.

Delete any of your own Stories at any time.

Control location, camera, photos, and notification permissions in your device Settings.

Report a Story or block another user from within the app.

Withdraw your consent to face verification at any time (see "Face Verification" above).

Depending on where you live, you may have rights to access, correct, or delete your personal data, or to object to certain processing. Contact us to exercise these rights.

9. Deleting Your Account

You can delete your account and associated personal data at any time from within the app (Profile → Settings → Delete account). When you delete your account, your profile, Stories, messages, and face-verification data (including your verification anchor) are removed from the active service. You can also email us at support.msiti@gmail.com and we will help you.

10. Age Minimum

You must be at least 18 years old to use MSITI. By using the app you confirm that you are 18 or older and that you can form a binding agreement with us. We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Security

We use industry-standard measures, including encrypted connections and access controls, to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and to limit access to it.

12. International Data Transfers

MSITI serves a worldwide community, so your information may be processed and stored in countries other than the one you live in. Face verification is processed within the European Union (Ireland). Where required, we take steps to ensure your data receives an adequate level of protection.

13. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of MSITI after changes take effect means you accept the updated Policy.

14. Contact Us

If you have any questions about this Policy or your data, contact us at support.msiti@gmail.com.