This Privacy Policy describes how mmntm ("we", "us", "our") collects, uses, and protects personal information when you use the mmntm platform ("Platform"). mmntm is operated from the Kingdom of Bahrain. (Company registration is in progress; our commercial registration number and registered address will be added here once incorporation is complete.) We handle personal data in line with Bahrain's Personal Data Protection Law (Law No. 30 of 2018) (the "PDPL").
mmntm is currently in Early Access. The Platform is still evolving, so you may occasionally encounter bugs, interruptions, or errors. We are grateful for your patience — please report anything that looks wrong to support@mmntm.social.
1. Information We Collect
Account information: When you register, we collect your name, email address, phone number, and role (Business or Creator).
Profile information: Businesses provide legal name, commercial registration number, venue details, and contact information. Creators provide their social media handle, profile photo, date of birth, gender, content categories, and two campaign-preference answers (whether you are open to late-night 21+ campaigns, and whether you are a parent) used for campaign matching. Your follower count is retrieved from your public profile rather than supplied by you.
Social profile data: To verify Creator statistics, we retrieve publicly available information about the social account you give us through a third-party data provider — including follower count, whether the account is public, the age and size of the account, and view figures on public posts. We do not access private content or messages, and we never post on your behalf.
Campaign data: We collect information about campaigns you create or participate in, including reservation times, check-in records, content submission links, the view counts on the content you submit, and a record of reliability events such as cancellations and no-shows.
Figures we work out ourselves: From the above we calculate performance figures you did not give us, and an internal standing that affects which campaigns you are eligible for. How that is calculated is internal to us and we do not publish it, but you can ask us what we hold about you — see section 7.
Payment records: We collect payment method, reference numbers, and proof of payment documents. We do not collect or store card numbers or bank credentials.
Screenshots: We no longer ask Creators for a screenshot of their account statistics. Screenshots uploaded under an earlier version of the Platform are still stored on the account that uploaded them, and are deleted when that account is deleted.
Location: If you are a Creator and you choose to sort open calls by distance, your device sends us your coordinates. We deliberately reduce their precision to a rough area before storing anything — your exact position is never written down — and the stored area is deleted automatically after a few hours. It is used only to order the list on your own screen. No Business ever sees it, and you can remove it at any time with "Forget my location". Everything on the Platform works without this.
Notification devices: If you turn on push notifications, we store the address your browser or phone gives us for that device, together with the keys needed to encrypt messages to it. Turning notifications off removes it.
Usage data: We may collect standard technical data including IP address, browser type, and pages visited for platform security and performance purposes.
2. How We Use Your Information
- To operate, maintain, and improve the Platform.
- To verify account eligibility and approve registrations.
- To match Creators with suitable campaigns based on profile data.
- To process and verify campaign payments.
- To send transactional emails and in-platform notifications about your account and campaigns.
- To detect and prevent fraud, abuse, and policy violations.
- To comply with applicable legal obligations.
We rely on the following legal bases: performing our agreement with you (to run your account and campaigns), your consent (for anything optional), compliance with legal obligations, and our legitimate interest in operating and securing the Platform.
3. Sharing Your Information
We do not sell your personal data. We share information only in the following circumstances:
- Within the platform: Businesses see aggregated campaign attendance data. Creator names and slot times are visible to the Business running a campaign they participate in.
- Service providers: We use specialist providers to run the Platform, and they process data only as necessary to deliver their service and only on our instructions. They fall into these categories:
- Database, authentication, file storage and hosting.
- Transactional email delivery.
- A social data provider, for the publicly available profile metrics described above.
- Error monitoring, configured not to send personal details with a report, and aggregate traffic measurement that does not identify you.
- The anti-bot check on our sign-up and sign-in forms.
- "Sign in with Google", if you choose to use it.
- If you turn on push notifications, whichever push service is built into your browser or phone. It delivers the message; the contents are encrypted to your device.
- Legal requirements: We may disclose information if required by law or in response to valid legal process.
International transfers: Some of these providers store or process data on servers outside Bahrain. Where your data is transferred abroad, it is only to deliver the Platform to you, and we take reasonable steps to keep it protected. By using the Platform, you consent to this transfer.
4. Automated Decisions and Checks
Your Creator account is approved or rejected automatically. After you confirm your email address, we retrieve your public social profile through a third-party data provider and apply a fixed rule: the account is approved if the profile is public and its follower count is at or above a minimum we set, and rejected if it is private, below that minimum, or cannot be found. No person reviews this before it happens. We email you the outcome, and a rejection email tells you which of the three it was — including the follower number you would need. If the check cannot get an answer at all — the provider is down, for example — nothing is decided and your account simply stays pending until it can.
You can ask a person to look at any of this. If you believe a decision is wrong — the wrong account was read, your handle was mistyped, your figures are not what we found — write to info@mmntm.social and a person will review it and can set the decision aside. You can also correct your profile and be checked again; the rejection email says so. A decision a person has made is not reversed automatically.
Business accounts are approved automatically as well. We check the commercial registration number you give us against the public register, and the account is approved if that registration is current and matches the details you gave us. If it does not, the account is not approved automatically — it is held and a person looks at it.
These checks also run without a person looking first:
- Creator standing — how recently your figures were confirmed, and whether you qualify for paid campaigns — is calculated from your profile, the metrics we retrieve from your social account, and your campaign history.
- Reliability failures — a no-show, a cancellation close to your slot, rejected proof — are recorded automatically, and enough of them will restrict or suspend a Creator account without a person reviewing it first. You are notified each time one is recorded.
- Where a statistics screenshot exists on your account from an earlier version of the Platform, it was read automatically and checked against the figures you had typed. We no longer ask for these screenshots.
We do not send your data to any third-party AI service, and we do not use it to train anyone's models.
5. Data Retention
We retain your account data for as long as your account is active. Campaign records are retained indefinitely as part of platform history and compliance records, in a form that no longer identifies a deleted account. If you are a Creator and you delete your account in the app, the erasure happens immediately: your login is revoked, your email and personal details are removed, and your uploaded files are deleted. If you ask us to close an account by email instead, we will delete or anonymise your personal data within 90 days, except where retention is required by law. During Early Access, data may also be cleared or migrated as the Platform develops.
Some data has a shorter life of its own. A shared location is deleted automatically within hours. Files you uploaded — profile and venue photos, statistics screenshots, and payment proof documents — are deleted from our storage when your account is deleted. Notification devices are removed when you turn notifications off or delete your account.
6. Security
We use industry-standard security measures, including encrypted data transmission (HTTPS), access controls, and a specialist authentication provider. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.
7. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data, subject to legal retention requirements.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with Bahrain's Personal Data Protection Authority if you believe your data has been mishandled.
To exercise these rights, contact us at info@mmntm.social.
8. Cookies
The Platform uses essential session cookies necessary for authentication and security; these are always on and cannot be declined without breaking sign-in.
We load no analytics or advertising cookies at present, so there is nothing here to accept or decline. We do measure aggregate traffic through Vercel (section 3), which does this without cookies and without identifying you. If we ever add cookie-based analytics or advertising, this section and a consent banner will change with it.
9. Children
The Platform is not directed at persons under 18, and Creators must be at least 21 to join. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new effective date. Continued use of the Platform after changes constitutes acceptance of the revised policy.
11. Contact
For privacy-related questions or requests, contact us at info@mmntm.social.