Last updated: October 28, 2026
MetroMeet is operated by DirecTek LLC, an Ohio limited liability company based in Columbus, Ohio. This policy covers the MetroMeet iOS app, the signed-in web app and public location lookups on metromeet.app, and getmetromeet.com.
We use information to sign you in; create and protect your account; show the distance-scoped wall; run profiles, messages, Match, plans, games, MetroSports, MetroBucks, Plus, and other community features; verify Apple purchases; deliver notifications and support; diagnose crashes; and prevent fraud, spam, abuse, and safety violations.
We record which posts you viewed under your account so authors see a seen-by count. We also record visits to member pages for the optional “Who stopped by” roster and per-page tally, which bulletins you have seen, online presence, and chat read receipts to run those features. We also count which kinds of notifications you open, so we can send fewer of the kinds you ignore, and record podcast listening so an episode resumes where you left off.
For National Weather Service alerts, the app on your device requests weather directly from api.weather.gov using an approximate centroid derived from your stored U.S. ZIP, followed by a forecast-zone request. The National Weather Service receives that approximate location, your device IP address and normal request information, but not your name, email, account ID or device-location anchor.
Safety tools include member reports, blocks, mutes, keyword mutes, rate limits, prohibited-term checks, PhotoDNA image matching, and human review. Three independent reports can automatically hide supported content while it is reviewed. With your explicit permission, the hourly AI-assisted safety review sends Anthropic (Claude) item IDs and recent text from posts of every audience and their photo descriptions, replies, profile pages (including display name, bio, about-me text, employer, interests and the “hope to run into” blurb; for profile pages, the item ID is your account ID), profile and photo comments, Collections and their notes, Marketplace posts, photos, comments and ratings, Missed connections posts and answers, Communities, plan chats, milestones, bulletins, mixtape notes, member asks and their answer halves, podcast episode questions and their answer halves, and meeting-spot names. Unanswered member asks, which are visible only to their recipients, are included. It also sends copies of post and reply photos, post and community clip poster frames, and supported Marketplace, community, face-reaction, milestone and bulletin photos. One-to-one chats, ordinary group chats and voice notes are never sent. Full videos are never sent to Anthropic (Claude). Anthropic does not use this content to train its models. It deletes it within 30 days, except that content its own safety systems flag can be kept up to 2 years. You can change your permission any time in Settings > AI safety checks. Anything the review flags goes to human review. If you do not allow AI safety checks, none of your content is sent to Anthropic (Claude), and your new Wall posts and replies wait until a MetroMeet moderator approves them; changing to yes does not automatically publish older held content. One-to-one and ordinary private group message text and voice notes are not scanned; a copy of each photo sent in a chat is sent to Microsoft PhotoDNA for child-safety matching before delivery. If the check is temporarily unavailable, the photo is still delivered.
The wall can show first-party cards labeled Sponsored after a server-set number of posts. These house cards are chosen by area rather than by a behavioral profile, and our server keeps aggregate impression and click counts for them. If you report a Sponsored card, we keep your report and stop showing you that card. MetroMeet does not use a third-party ad network or track members across apps for Sponsored cards. MetroMeet does not ask for permission to track you, so Apple's advertising identifier is not shared. MetroMeet does not sell member data to advertisers.
We do not send an advertiser your MetroMeet profile. If you tap a Sponsored card that opens an advertiser's website, that site receives the normal browser request and follows its own privacy policy.
We share only what is needed to operate, secure, and support MetroMeet:
Supabase, Cloudflare (including R2), Sentry, Resend and Anthropic (Claude) process member data for us under data-processing terms that require them to follow our instructions and to keep the data confidential and secure. We require them to receive only the data their tasks need and to give it the same or equal protection described in this policy and required by Apple’s App Review Guidelines. Anthropic does not use this content to train its models. It deletes it within 30 days, except that content its own safety systems flag can be kept up to 2 years. Expo delivers push notifications and app updates; it receives your device’s push token and the text of each notification, and its terms make it our processor for data covered by EU law. Sentry receives only the limited crash data described above, and Google Analytics runs only on getmetromeet.com, not in the app. Microsoft’s PhotoDNA service turns each checked photo into a digital fingerprint for matching and says it does not keep the photo.
We may also preserve or disclose information when reasonably necessary to comply with law, protect a person from harm, investigate abuse, or defend MetroMeet's rights. We do not sell personal information or give it to data brokers.
We keep account, profile, anchor, content, message, Match, push-token, and feature data while your account is active and as needed to provide the feature. Updating your area or anchor replaces the active setting. Content you delete is removed from the live feature, subject to the exceptions below.
To delete your account in the app, open Profile → Settings → Danger zone → Delete my account and confirm. You can also email [email protected] from the address tied to your account; we may ask you to verify the request.
The in-app request schedules deletion after a 30-day grace period by default; you can cancel during that period or choose immediate deletion. When deletion succeeds, it hard-deletes the authentication account and the live database records that cascade from it, and directly purges profile photos, selfies, post photos, chat photos, voice notes, and stored clips, including clips in separate storage. A separate cleanup removes unreferenced private extra and Match photos, post photos, post videos and R2 clips after its waiting period; it does not cover orphaned chat media. Email us if you need confirmation about a file.
After your account is deleted, we use any stored Apple refresh token to request revocation of MetroMeet's access to your Apple ID. Tokens of deleted members are kept at most 30 days for revocation. We remove a token when Apple confirms revocation, after 20 attempts, or at the retention limit, whichever comes first. If we have no usable token, you may need to remove MetroMeet from Sign in with Apple in your Apple Account settings yourself.
Public meeting spots, including their exact point, name and kind, remain after account deletion; the link to the member who added them is removed.
Communities, artist pages and shows that other members use stay for them after you delete your account, no longer linked to you. A community you started or own passes to one of its remaining members: members in good standing who are not leaving MetroMeet themselves first, then the highest community role, then who joined earliest. If the community already has another owner, that owner keeps the role. It keeps its name, description and rules; a cover photo you uploaded is deleted with your other photos. A community nobody else belongs to is deleted with everything posted in it. An artist page you created passes to its longest-standing other manager, and a show you listed stays on its page, credited to that page's longest-standing other manager. A show you also published as a Plan is cancelled with that Plan, and a page or show with no other manager is deleted.
If you played Metro Megaball, a draw that was already sealed when you delete your account keeps each of your tickets in its sealed record as your random account number, the ticket ID and your picks, so every other player's result stays verifiable.
If you played MetroSports, each league you played in keeps your draft picks, your seat in its draft order, the playoff and Toilet Bowl games you had already played, and your line in a finished season's final table. Leagues also keep anonymous records of your adds and drops, waivers on players you dropped, trades you vetoed, join requests you decided, and messages you took down. None of these records has your name or account ID; the app and league news show "Former member", or nothing, where your name appeared, and awards lines keep scores under "Former member".
A private audit copy of each change to a profile (including its final state when the account is deleted), of reports, of moderation decisions and of preservation holds is kept for 180 days as a legal record, and then deleted. Purchase transaction identifiers, product, amount, and environment may be kept without your user ID indefinitely as a receipt-replay safeguard. Content and records under a safety or legal preservation hold can be kept longer; confirmed PhotoDNA evidence is kept in private quarantine as required for child-safety reporting and preservation.
Email [email protected] to request access to, correction or deletion of, restriction of processing, or a portable copy of your personal information. We respond within 30 days and may verify your identity first. You can also complain to your local privacy or data protection authority; contact us first if you would like us to address the concern directly.
Right to object: If you are in the EEA or UK, you may object at any time to processing based on our legitimate interests, including safety processing. Email [email protected] with your objection; we will assess it under applicable law.
MetroMeet is based in the United States and uses US providers; your data may be processed in the United States even if you live elsewhere. For members in the EEA or UK, our legal bases are contract for account and feature delivery, legitimate interests for safety and abuse prevention, and consent where we ask for it, such as optional location access. Our condition for processing the optional political label and “Hide people who are” checklist (political opinion), and Match gender, who-you-want-to-meet and “Looking for” choices and filter (which can reveal sexual orientation), is explicit consent worldwide, including under Article 9 where it applies. The political filter works as described above; Match gender and who-you-want-to-meet determine Match suggestions, and “Looking for” and its filter narrow them. Before saving new or changed choices, the app asks you to agree to their use. You can clear the political label and checklist in Settings, clear “Looking for” choices in Profile edit, and clear its filter in Settings; change gender and who you want to meet in Match → Preferences. Withdraw at any time in Settings → Your private choices or beside these fields. Political withdrawal deletes the label and checklist; Match withdrawal deletes gender, who you want to meet, “Looking for” choices and its filter, and pauses Match until you set them again and turn it back on, without removing likes, passes, matches or chats. Pausing alone keeps the details. Withdrawal retains the Match photo, blurb and age; email [email protected] to request their removal. We keep a record of each consent and withdrawal, with the text agreed to, until account deletion; withdrawal does not erase earlier evidence. The signed-in web app uses the same consent and withdrawal flow. You may withdraw location consent in app or device settings.
Video, like audio, travels encrypted between participants and is never recorded.
Call audio travels encrypted between the two participants, directly or through a Cloudflare Realtime TURN relay. MetroMeet currently requires the relay so participants do not receive each other's internet addresses. Cloudflare processes connection addresses and timing to provide the relay. MetroMeet never records, transcribes, stores, or sends call audio to its AI safety check. Call signaling (SDP and ICE) is ephemeral and is not stored.
We keep the participants, conversation, start/answer/end times, call status and end reason, and a compact call history row. Call records remain until the conversation or account is deleted; there is no automatic time limit for call history. The server-only timestamp of the first video start, connection liveness timestamps, relay mint counters, and flags marking silenced calls remain with the call record for the same period. These flags keep silenced calls from ringing or appearing for the callee. Your call preference remains until account deletion. Your data export includes the call metadata visible to you and your preference; the private first-video timestamp, liveness timestamps, counters and silencing flags are not exposed to either participant. Reports can include call metadata, never recorded audio, and follow the safety-report retention described above.
MetroMeet is only for people who are 18 or older. Signup asks for a date of birth, and both the app and database reject an under-18 date. If we learn that an account belongs to someone under 18, we remove it, except for information we must preserve for safety or legal reasons.
We may update this policy as MetroMeet changes. We will update the date above and give notice in the app or on the website when a change is important.
DirecTek LLC · Columbus, Ohio · [email protected]