privacy at mmore

who we are

mmore is a dating community for adults who create, launching in the United States only. This policy explains how MMORE, INC. handles information in our app and website. Contact contact@createmmore.com or write to MMORE, INC., 45 Boynton Ave SE, Atlanta, GA 30315, United States.

what you share

We collect your account email and sign-in information; name and birthday; application answers, city or region, professional links and uploads; verification photo; and profile details, photos, videos and answers. Profile and matching information includes gender identity, pronouns, sexual orientation, who you are interested in, and relationship goals. Some of this information is sensitive. We use these details to provide the profile and matching features you choose.

When you use an available Apple or Google sign-in option, our authentication service receives the provider's account identifier and the name, email or other basic profile information the provider shares. Apple may supply a private relay email. We do not receive your Apple or Google password or request your inbox or address book.

You can choose a separate email for application receipts and decisions. That letter address does not change your sign-in account. Sign-in and password-reset messages use your account email or sign-in provider. Keep invitation and password-reset links private.

We store saved and published artwork, script drafts and AI requests, uploaded media and its file information, direct messages, room chats, swipes, matches, likes, comments, reports and account settings. Shared creation records include edits, contributions, active creation time, room changes, playback progress and profile-unlock status. Our hosting and security services also process IP address, browser or device information and request logs to operate and protect the service.

We record the version of the terms and community rules you explicitly accept and the time of acceptance. Existing accounts and private demonstration accounts must make the same current choice; we do not create acceptance records on their behalf. Declining leaves privacy, support, reporting, account export and deletion tools available.

We process the files you choose to upload, including their names and any metadata they retain. The current app removes embedded metadata from supported still photos before uploading them. Animated images, videos, documents, older uploads and upload paths outside the current app may retain information such as author, device or location metadata. Visible information in the content and the file name also remains.

We store your complimentary trial’s start and end dates and your membership access status. For App Store subscriptions, we receive and verify purchase information from Apple, including transaction identifiers, the purchased plan, purchase and expiry dates, and renewal, refund or revocation status. We associate this information with your mmore account to provide access, restore purchases and prevent purchase reuse. Apple receives a pseudonymous mmore account identifier with the purchase. We do not receive your full payment card details or Apple Account password.

verification, clearly explained

On supported Apple devices, where Apple's age-assurance requirements apply, the app asks Apple to confirm eligibility for our 18-and-older community. The native app evaluates the minimum age range needed for this check and passes only an eligibility result to mmore's app interface. We do not upload or save the age range or a birthday received through this Apple check. The birthday you separately enter in your application is handled as described above. If required eligibility cannot be confirmed, member access stays unavailable while you can still reach help and account tools.

After you agree and start the guided photo check, the face-check software calculates a temporary map of facial landmarks and head movement on your device to guide the turns. These measurements are used in memory for the check; they are not uploaded or saved by mmore. The verification photo you choose to submit does leave your device: it is uploaded privately for our team to review. It is not a public profile photo. Verification is a review step, not a background check or a guarantee of another member’s identity or safety.

Verification photos are scheduled for deletion 30 days after the review decision. An explicitly documented active safety investigation can extend retention; those holds expire after 30 days unless the team renews them for an ongoing investigation. Verification uploads not attached to an application are removed after 30 days. Pending applications retain their submitted photo until a decision or account withdrawal.

how we use information

We use information to review applications, manage the waitlist and regional availability, introduce compatible members, provide creative tools and communication, manage trial and subscription access, deliver application and account emails, respond to support requests, prevent abuse and investigate reports. Creation activity determines when a matched pair has met the requirements to reveal each other's profiles. Applying does not guarantee admission or a launch date in your area.

public website visits

we count anonymous views of the public createmmore.com landing page to understand where interest in mmore comes from. our hosting supplies an approximate country from the network connection. when city information is missing, our server briefly uses the connection's ip address to look up an approximate city and region in a locally hosted copy of the DB-IP Lite database. the tracker does not send that address to DB-IP or another lookup service, and does not retain it. locations are estimates; a vpn, private relay or mobile network can show a different place. we do not request gps or an exact address.

this tracker stores hourly totals by approximate location and public page, with rounded map coordinates. it also keeps anonymous page-view records containing the date and time our server received the count, the public landing page and an estimated city, region and country. newer records identify the location source, its data edition when supplied, the level of detail available, rounded map coordinates, and an accuracy radius only when the source provides one. older records remain at their original level of detail. recorded time can be later than the page first opened while the website confirms that no account is signed in.

for new public page openings, we also measure active visible time, elapsed time, the furthest introductory scene reached, a small timeline of those scenes, and whether join, sign in or account entry was reached. tracking stops at account entry. time is an estimate reported by the browser; visible time does not prove that someone was reading, and a lost connection or closed page can prevent a final update. a random record number and a temporary key connect updates only within that page opening. the key stays in page memory, only its hash is stored on the server, and updates expire after four hours. these values are not reused to identify a person or connect separate visits. older visits do not acquire timing or progress retrospectively.

the tracker does not store ip addresses, names, emails, account identifiers, identifiers reused across visits, fingerprints, full browser details, referring links, form answers or url query values. it does not count signed-in app activity, native iphone app activity, application forms, messages, creative rooms or safety reports. cam and oliver can view the records and totals in the private operations dashboard. page-view records, their progress updates and older hourly totals are removed after 30 days during routine cleanup.

we use no analytics cookies or advertising trackers for these counts. we honor your browser's global privacy control and do not track signals. you can also turn counting off for this browser below; this saves only your choice on this device. clearing browser storage resets that choice.

what other people see

Published artwork and Explorer comments are reviewed by the mmore team before other members can see them. Artwork updates are reviewed again, and pending content can remain visible to its author and reviewers with its review status. Automated text checks help prevent prohibited content; authorized staff review reports and the content needed to investigate them. We act on reports within 24 hours, remove violating content and suspend offending accounts. Approved Explorer artwork is available to signed-in members with Explorer access through mmore plus or a complimentary trial, independently of dating compatibility or past swipes, subject to account, pause and block controls. It is not a gallery for signed-out visitors.

Candidate cards show permitted profile details and media. Display names use your first name, not your stored last name. Your full birthday, account email, letter email, verification photo and internal application review are not included. Information you put in artwork, images, links or free-text answers can still identify you.

After a match, the matched profile and photo are hidden until both people qualify through shared creation. First names and shared work remain available. Profiles reveal when both qualify, including while the room is open. This does not erase a card someone previously saw, hide identifying details you put in your work, or hide approved Explorer artwork.

Shared rooms show the other participant your saved edits, room changes and latest activity position. The position marker uses only the latest point, with a short expiry, rather than a saved pointer trail. Each room keeps its own chat history. Direct and room messages are available to their participants; authorized staff may access relevant content for safety review. These messages and shared documents are not end-to-end encrypted.

Saving private work is separate from publishing it to Explorer. Shared work is available to the other participant even when it is not published. People may take screenshots, export work or save content they can see.

When your Explorer access ends, your published artwork is hidden from Explorer. Your saved originals and publication choices are retained; eligible published work can appear again when Explorer access returns, subject to moderation and visibility controls. The membership terms explain the trial and plan differences.

services that help us run mmore

Supabase provides authentication and database services. Our Sites hosting and Cloudflare infrastructure serve the app and store uploaded media and collaboration data. Resend delivers application and service emails, including the recipient address and message content. Apple and Google handle their sign-in options when offered. These services receive the information needed to perform their functions.

Apple processes App Store payments and subscription management. Our backend verifies Apple’s signed purchase information and subscription updates to keep your membership status current. Apple handles the payment method and its own billing records under its privacy policy.

Daily connects video calls and processes the live audio, video and technical connection information needed for the call. mmore does not enable call recording; another participant could record using another device. Separately, voice notes and media you choose to record or upload can be saved as content.

The optional script writer uses OpenAI. Before sharing, the app asks permission to send your idea, current draft and writer names. The request also includes a pseudonymous account identifier for abuse prevention. Private chat is not sent automatically. You can turn off future AI sharing under privacy & safety. Revoking permission does not recall information already sent. We request that API responses not be stored as retrievable responses; this is not a promise that the provider retains no data for security or other permitted purposes.

YouTube, Vimeo, Spotify and SoundCloud players in the current app wait for you to tap load before connecting to that provider. This choice belongs to your current view; another member adding or playing a link does not load its player on your device. External links and direct media files can connect to their linked host when opened or displayed. Those providers can receive your IP address, device information, requested media and information associated with their own cookies or account. Their own privacy settings and policies apply. The face-check software and model download from jsDelivr and Google-hosted infrastructure; these downloads do not send your camera frames or facial landmarks to those hosts.

We use YouTube API Services through the embedded player and a server-side video-status check, with YouTube's privacy-enhanced mode. We save media links and shared playback state to support shared rooms. For videos designated made for kids, or whose designation cannot be confirmed, the YouTube player remains available while mmore's playback synchronization and viewing-activity recording stay off. Embedded providers can use their own cookies or similar technologies for playback, security, measurement and, depending on the provider and your settings, advertising. See Google's privacy policy, Vimeo's privacy policy. Spotify and SoundCloud embedded playback is disabled for launch; saved music links are retained without loading those providers. These provider controls do not replace an Apple tracking-permission choice. You can leave a player unloaded or leave the room to remove it from the current view.

Providers process data under their applicable service terms and privacy practices; data may be processed in the United States and other countries where they operate. See the privacy information from Supabase, Cloudflare, Resend, Daily, OpenAI, Apple and Google.

mmore does not operate a targeted-advertising system or send your profile, private messages or creative work to embedded providers to select advertisements. The providers' separate processing of player data is described above. We may disclose necessary information to service providers, to meet legal obligations, or to investigate and respond to threats, fraud and abuse.

on your device

when you enable iphone notifications, we associate apple’s device notification token with your signed-in account to deliver alerts for matches, messages, room invitations, accepted invitations and shared-room arrivals. apple’s push notification service receives the device token and delivery payload, including internal account, match and room identifiers. alert text is generic and does not include message contents, member names or artwork. delivery records are removed after one day and inactive device registrations after 90 days. signing out requests removal of that device registration; deleting your account removes its registrations and delivery records. you can turn notifications off in iphone settings or your in-app privacy preferences.

The app uses local storage for sign-in sessions, unfinished setup, preferences, tour progress, artwork recovery and edits waiting to sync. Clearing app or browser storage can remove unsynced work. Camera, microphone and photo access follow the permission prompts and the feature you choose. You can change device permissions in your device settings. Where device notifications are available and enabled, use system notification settings to control permission and lock-screen previews; in-app unread counts are separate.

your choices and deletion

In the top-right menu, open privacy & safety to edit your profile, pause discovery, manage blocked accounts, reset your password, sign out other sessions, download an account summary, withdraw an application or delete your account. The summary is a limited export; contact us for other personal-data requests or corrections. We may need to verify that a request comes from you.

Deletion or withdrawal immediately hides the account and stops new activity after the request is accepted. Automated cleanup normally finishes within 24 hours and removes the sign-in account, application, profile, uploaded files, boards, conversations, shared-room chats and documents, creation-activity records, comments and likes from active mmore storage. A documented safety hold may retain limited evidence until the investigation hold ends. Deletion cannot remove copies another person has already saved, and provider backups or required security/legal records can have separate retention periods. We keep a minimal cleanup receipt for 30 days to resolve failed requests; anonymous video usage totals remain to enforce the call allowance.

Account deletion removes your trial and account-linked membership records. We retain the original App Store purchase identifier with its link to your deleted account cleared, to prevent the same purchase being reassigned to a different account. We also retain a one-way hash of the deleted account identifier to prevent a delayed Apple sign-in request from saving credentials after deletion; this marker contains no sign-in token, profile or content. Apple retains its own billing records under its policies. Deleting your mmore account does not cancel an Apple subscription; manage cancellation with Apple separately to stop future renewals. Account deletion and safety tools do not require a paid membership.

safety reports and private receipts

Safety requests include your contact email, description, location information and, for intimate-image removal requests, your electronic signature and authority to act. Cam and Oliver and other authorized safety reviewers can access them. A private receipt link shows the status and team updates, not your submitted report. Anyone you share that link with can see those updates. Reports may preserve the most recent 20 messages from the selected conversation or creation room in a private evidence record.

Closed safety cases become eligible for deletion after 30 days; cleanup runs with privacy jobs and when the team opens its review queue. Account deletion removes related case records unless the team has documented an active investigation or legal preservation hold. These holds expire after 30 days unless renewed with a reason. Open cases are kept while the team investigates. You can contact us about access, correction or deletion of a report even without a mmore account.

keeping your information safe

We restrict access by account and role, keep verification files private, and protect service connections with HTTPS. No system can guarantee absolute security. Use a unique password, avoid sharing private addresses or financial details, and report suspicious activity. Sign-out stops session renewal; an issued access token can remain valid until it expires.

adults only and policy updates

mmore is for people 18 and older. If you believe an underage person has an account, report it to our team. Privacy rights vary by location. Contact us to request access, correction, deletion or other rights available where you live. We respond to applicable rights without penalizing you for requesting them. We will update this policy when practices change and provide additional notice where required.