Privacy Policy

Last Updated:

Marianito is a small, private app for capturing shared aperitif moments with the people you're actually with. This policy explains exactly what we collect, why, and what control you have. It is written to be read, not to be survived.

The short version: we collect the minimum needed to run the app. We do not sell your data, we do not advertise, we do not track you across other apps or websites, and we never reveal your location to other users — the app tells them "nearby" and nothing more. Some features do send your position to mapping providers to work at all, and the section on location says exactly which and when.

Marianito is operated by Niche Studio LLC, a Wyoming limited liability company doing business as Megamind Labs ("we", "us", "our"), of 30 N Gould St, Ste R, Sheridan, WY 82801, USA. We are the data controller for the information described here. Niche Studio LLC also distributes the app on the App Store, so that is the seller name Apple shows.

Contact: hello@megamindlabs.ai.

What we collect

Your account

  • Email address — used only to sign you in. Marianito has no passwords; we email you a one-time code instead.

  • Display name, username, and profile photo — the things you enter so friends recognise you. Optional beyond a name and username.

Your email address is deliberately unreadable by the app: the database grants exclude that column, so no other user can retrieve it, and your own address comes from your sign-in session rather than from your profile.

What you create

  • Photos and captions you post to a moment.

  • Comments and photos you add to someone else's moment, including comments on a friend's table that you weren't at.

  • A place on a moment — a name you type (e.g. "Plaza Nueva"), and, if you choose to pin it, its coordinates. Both are things you choose to add; neither is read from your device unless you tap "Use current location". A pin is shown to the same people who can see the table — including, on a map on your profile, your friends (see "Who can see your tables").

  • Who was at the table — the people you tag, including "guests" (names you add manually for people without the app).

Your connections

  • Who your friends are, friend requests you have sent or received (and whether they were accepted or declined), which moments you shared, and anyone you have blocked.

  • Reports you submit about a problem or a person, including who filed them.

Your location — only if you turn it on

See the dedicated section below. It is off until you switch it on.

Crash reports — only in some builds

If the build you are running was compiled with crash reporting enabled, a crash sends Sentry a technical report: the error, the device model, and the OS version. It carries no account identifier, no screenshots, no session recording, and no record of the requests the app made. If the build has crash reporting switched off, nothing is sent and errors stay on your device.

Notifications — only if you turn them on

Marianito can send two kinds of notification: a daily reminder around 1 p.m., which your phone schedules itself and which involves no one else, and a note when a friend sets a table ("Ana set a table"). For the second we store a push token for your device — a code Apple and Expo use to reach it — with your phone's language (English or Spanish) so the note arrives in it. The note contains the name of whoever started the table and nothing else: no photo, no caption, no place. It goes only to people who can already see that table. We do not track whether you opened it, and we do not set a number on the app icon.

What we do not collect

  • No contacts or address book.

  • No advertising identifiers, no cross-app or cross-site tracking.

  • No analytics, and no profiling of your behaviour. There is no analytics library in the app at all.

  • No payment information. Marianito is free.

How we use it

Only to make the app work: to sign you in, to show your journal, to let the people at a table co-author a moment, to show your tables to your friends (below), to show who is nearby, to honour your privacy settings, to keep the app safe, and to act on reports. That's the whole list.

We do not use your content to train machine-learning models, and we do not sell or rent data to anyone.

Who can see your tables

The people seated at a table, and their friends. That is the whole rule, and there is no setting behind it.

  • The people at a table see all of it: the photo, the caption, the place, who was there, and the comments, including comments from their friends who weren't there.

  • Your friends can open your profile and see the tables you have sat at: the photo, caption, place name, date, and the names of the people seated who have accounts, and — on a map on your profile — where each table was pinned, if whoever posted it put a pin on it. That pin is the place picked for the table when it was posted, never anyone's live position. They also see the table's comments, and can add their own, even though they weren't at the table. Photo comments stay with the people at the table. Guests are shown only as a number ("and 2 more"), never by name.

  • This means the friends of the people you sit with can see the tables you shared with them, even if those friends are strangers to you. If you sit at a table with Ana, Ana's friends can see that table on Ana's profile, and you are in the photo and named on it.

  • A comment you write on a table can be read by everyone who can see that table: the people at it, and their friends. That includes comments written before 5 October 2026, when comments were shown only at the table.

  • Anyone who is not your friend sees none of this. They can find your name, username and profile photo (see "Your privacy controls"), and ask to be your friend. That is all.

  • There is no feed. Nothing is sent to anyone; a friend sees your tables only by opening your profile.

Friendship is always a yes from both sides. You become friends by accepting a friend request, by someone accepting yours, or by accepting an invitation to a table — never just because someone added you. People you are seated with at a table by a mutual friend become your friends too. The app says "Friends can see each other's tables" at each of the places you say yes.

What you can do about it:

  • Remove a friend from their profile. You stop seeing each other's tables straight away, and it sticks: sitting at a table together later will not make you friends again. That only happens if one of you asks and the other accepts, or you accept an invitation to their table. We keep a record of the removal for that purpose; the other person cannot see it.

  • Leave a table and you are no longer at it, for everyone.

  • Delete a table from your journal and it no longer shows on your profile. (It still shows on the profiles of the others who sat there.)

  • Block someone and they cannot see any table you are sitting at, on anybody's profile.

One delay to know about: a link to a photo that the app had already loaded keeps working for up to an hour before it expires. All of the rules above are enforced in the database, not by the app.

We do not record who looks at whose profile. The dot that marks a friend's new table is worked out on your own device and never sent to us.

Keeping the app safe

Text you post — captions, place names, comments, display names, and the names you give guests — is automatically checked against a list of prohibited terms before it is saved. Content that matches is refused: it is not posted and it is not stored. Nothing about that check is kept, and no human sees the text because of it.

Photographs are not automatically screened. If you see something that shouldn't be there, report it from the moment or comment itself. We review reports and act within 72 hours. What you write in a report is sent to us straight away through the alerting services listed under "Who else touches your data", so that a person sees it quickly. It is never shown to the person you reported, and reporting someone in good faith never counts against you.

You can block any user at any time; they disappear from your lists and searches.

Your location

Location is off until you turn it on, in Settings → Location consent, and the app is fully usable with it off.

What happens with it on

  • The app reads your position only while it is open on screen. There is no background tracking, and it does not read your position more than once every couple of minutes.

  • Your last position is stored so we can work out which friends are near you. It is replaced each time it updates, not accumulated into a history, and it is ignored after 45 minutes.

  • Where you are is never shown or sent to other users. (A pin you put on a table is different — it is the place of that table, not you; see "Who can see your tables".) The comparison happens on our server, and other people only ever learn "this person is nearby" — never where you are, never how far away, never in which direction. This is enforced in the database: the query that answers "who is nearby" returns a list of user identifiers and is structurally incapable of returning a coordinate. The search radius is fixed by us and cannot be widened by anyone's app.

  • Turning Location consent off deletes your stored position immediately, in the database itself rather than as something the app remembers to do.

  • Who can see you're nearby is your choice — everyone near you, or friends only. It changes only what other people can discover; your own "Nearby" view works the same either way. The choice is enforced on our server, not in the app, so it holds even for a modified client.

Where your location does leave us

Two features can't work without asking someone else, and both send data to companies we do not control. This is the one place your position goes beyond us, and it happens only in these situations:

  • Searching for a place. When you type a place name on a moment or on the map, the text you type is sent to a mapping provider — Google Places, Komoot's Photon, or OpenStreetMap's Nominatim, depending on what is available. If you have Location consent on, your approximate position is sent with it, so that searching "café" finds cafés near you instead of famous ones. With consent off, the search text is still sent, but no position goes with it.

  • "Use current location". Tapping that turns your coordinates into a place name. On a phone this is usually done by the device itself, with nothing leaving it. When it can't be — on the web, or if the device can't answer — your exact coordinates are sent to OpenStreetMap's Nominatim to be named.

  • The map screen. Map imagery is served by CARTO. Loading the map tells CARTO your IP address and which part of the world you are looking at, the same as any online map.

These providers receive that data as independent companies under their own privacy policies, not as processors working to our instructions. We send them the minimum the feature needs, we do not send them your name, your email, your account identifier, or anything you have posted, and none of it is linked to your account on their side.

If you would rather none of this happened: leave Location consent off, type place names rather than searching for them (a typed name is stored as text, with no lookup), and don't open the map.

Your privacy controls

Inside the app under Settings you can:

  • Blocking, for being found at all. Your profile — your name, your username and your photo — can be found in search by anyone else using Marianito, the way it works on most social apps. There is no switch for this. If you don't want a particular person to find you, block them: blocking hides you from them and them from you, and it is enforced in the database rather than by the app.

  • Use my location — the one location switch. Off means we don't read your position at all, nobody sees you as nearby, and the position we had stored is deleted.

  • Share my location with — while location is on, choose whether it is everyone near you or friends only who can see that you're nearby. Neither option shows anyone where you are.

  • Friends — who can see your tables is decided by who your friends are, not by a switch. Remove a friend from their profile at any time. See "Who can see your tables" above.

  • Notifications — one switch in Settings. Off means no daily reminder, and your push token is deleted from our database. You can also switch them off for Marianito in your phone's settings.

  • Blocked accounts — block someone and they vanish from your lists and searches.

  • Report a problem — flag a person or content to us.

Location is off by default, and onboarding asks for it with the switch starting off. We don't pre-tick consent. Saying yes to it does two things at once — we read your position, and people can see you're nearby — and the screen that asks says so in those words rather than burying the second half. Who "people" means is the next question, and it arrives with neither answer selected.

One exception, and we'd rather tell you than not. If you joined the beta before we changed this, your account may still have Location consent switched on from that earlier version — turned on without us asking you, which is not how it should have been done. Nothing about it is hidden from you: it appears as an ordinary switch in Settings, other people still never learn your coordinates, and turning it off deletes the position we've stored. If you'd rather it were off, switch it off; it will not come back on by itself.

Deleting your account

You can delete your account at any time from Settings → Delete my account. This is immediate and permanent. It removes your profile, photos, journal, stored location, friendships, settings, and any guests you created. Moments you started are removed for everyone who was at those tables; moments where you were only tagged remain for the others, without you.

If you'd rather we did it for you, email hello@megamindlabs.ai.

Who else touches your data

We use a small number of outside services. The first group process data on our behalf, under their own security obligations:

  • Supabase — hosts our database, file storage, and sign-in system. Data is held in their EU region.

  • Brevo — sends the sign-in code emails, and therefore handles your email address. It also delivers our safety-report alerts, which contain the text of the report.

  • Slack — receives those same safety-report alerts, so that a person sees them quickly. The alert contains the text of the report. It does not contain your email address, your username, or the username of anyone reported.

  • Sentry — receives crash reports, in builds that have crash reporting switched on. No account identifier is attached.

  • Apple — distributes the app, runs TestFlight during the beta, and delivers push notifications through its push service.

  • Expo — passes friend-table notifications on to Apple. It receives your push token and the text of the note (the starter's name and a fixed sentence).

The second group are independent companies that receive data when you use a particular feature, as described under "Your location":

  • Google (Places), Komoot (Photon), or OpenStreetMap (Nominatim) — place searches, and reverse geocoding for "Use current location".

  • CARTO — map imagery.

We do not share your personal data with anyone else, except where we are legally required to, or where it's needed to investigate a safety report.

Some of these providers are outside the UK/EU, including in the United States. Where that applies we rely on the transfer mechanisms in their own terms, typically the EU Standard Contractual Clauses.

How long we keep it

Your content is kept until you delete it or delete your account. Your stored location is only ever your latest position, is unused after 45 minutes, and is deleted the moment you withdraw consent. Reports are kept while a safety issue is open and for a reasonable period afterwards, because a report has to outlive the content it is about. Backups may persist for a short period after deletion before being overwritten. Your push token is deleted when you switch notifications off, sign out, or delete your account, and when Apple tells us the app has been removed from your phone.

Your rights

Depending on where you live (including under UK/EU GDPR, and under US state privacy laws such as California's), you may have the right to access, correct, export, or delete your personal data, to object to processing, and not to be discriminated against for exercising those rights. You can do most of this yourself in the app — edit your profile in Settings, and delete everything with Delete my account. For anything else, email hello@megamindlabs.ai and we'll respond within 30 days.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in US state privacy laws.

Our lawful basis for processing is performance of a contract (running the account you asked for) and, for location, your explicit consent — which you can withdraw at any time in Settings. If you are in the UK or EU you may also complain to your local data protection authority.

Age

You must be 18 or older to use Marianito — or the legal drinking age where you live, if that is higher. This is the same cutoff as our Terms of Use; the two documents are meant to agree, so if one changes, change the other.

Marianito is built around aperitif culture and is intended for adults. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe someone under 18 has created an account, email hello@megamindlabs.ai and we'll remove it.

Security

Data is encrypted in transit. Access to your data is enforced at the database level, per user — the rules are written so one account cannot read another's private data, including location. Photos are stored privately and served through short-lived links. A photo can be read only by the people who were at that table and their friends, and cannot be reached at all without an account. No system is perfectly secure, but we keep the amount of data we hold deliberately small.

Beta software

Marianito is currently in beta. Things may break, and data may occasionally be reset while we're building. Please don't treat it as your only copy of a photo you care about.

Changes

If we change this policy we'll update the date at the top, and tell you in the app if the change is significant.

Niche Studio LLC (dba Megamind Labs)
30 N Gould St, Ste R
Sheridan, WY 82801, USA

Questions? hello@megamindlabs.ai