Information We Collect
Midpoint collects information in three ways: information you give us directly, information generated by your use of the platform, and information from third-party sign-in providers.
Account Information
- Your name, email address, and a hashed (never readable) password when you register
- Your display name, profile picture, and role (Reader or Writer)
- Google account email, display name, and profile photo if you sign in with Google
Content You Create
- Articles, drafts, and editorial submissions (Writers)
- Comments and replies on articles and community posts
- Community posts, reactions (likes, shares), and group memberships
- Hashtags you follow or create
Usage & Engagement Data
- Articles you view, click on, or spend time reading
- Episodes and shows you watch, including view counts and likes
- Podcast episodes and reels you engage with
- Breaking-news alerts you open
- Search queries and category preferences
Device & Technical Data
- Firebase Cloud Messaging (FCM) device token for push notifications
- Device type (Android or web browser), app version, and operating system
- IP address, for fraud detection and approximate geographic region
- Session tokens used to keep you logged in
Notification Preferences
- Whether you have enabled or disabled push notifications and email notifications
- Specific preference settings: breaking news, article replies, followed topics, marketing communications
How We Use Your Information
We use the information we collect to operate and improve Midpoint. Specifically:
Deliver the Service
- Create and maintain your account
- Show you news articles, AI-generated shows, podcasts, reels, and sports predictions
- Allow Writers to publish, edit, and manage articles
- Enable community features: posts, comments, group discussions, and reactions
Personalise Your Experience
- Surface content from categories and topics you follow
- Recommend breaking news and featured content based on reading history
- Restore your reading position and preferences across sessions
Send Communications
- Push notifications for breaking news, show releases, and activity on your content (only if you have not disabled them)
- Email notifications for account actions such as password resets
- Newsletter emails if you have subscribed
Process Payments
- Manage your subscription plan and unlocked content entitlements
- Process payments via Paystack (see Section 6)
Safety & Integrity
- Detect and prevent fraud, spam, and abuse
- Enforce our community guidelines through moderation tools
- Maintain audit logs of administrative actions
Analytics & Improvement
- Understand how content is consumed to guide editorial and product decisions
- Monitor platform performance and identify technical issues
Information We Share
We do not sell your personal information. We do not sell, rent, or trade your data to any third party for their own marketing purposes.
We share information only in the following circumstances:
Service Providers
We use trusted third-party companies to help us operate Midpoint (see Section 4). These providers process data on our behalf and are not permitted to use it for any other purpose.
Public Content
Content you post publicly — articles you write, community posts, comments, and reactions — is visible to other users of Midpoint and is accessible via our website. Your display name and profile picture are displayed alongside your public content.
Legal Obligations
We may disclose your information if we are required to do so by law, regulation, or a valid legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of Midpoint, our users, or the public.
Business Transfers
If Midpoint is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
Third-Party Services We Use
Operating Midpoint requires partnerships with specialised service providers. Each has its own privacy policy governing how they handle data we send them.
When AI providers generate content, they receive editorial prompts and series context — not your personal account details. No personally identifiable information is intentionally transmitted to AI generation providers.
Push Notifications
Midpoint can send push notifications to your Android device for events including breaking news, newly published shows, sports predictions, and replies to your content.
Push notifications are delivered through Firebase Cloud Messaging (FCM), a Google service. To enable delivery, your device’s FCM token is stored on our servers and associated with your account.
Managing Notifications
- You can disable all push notifications at the Android OS level via Settings → Apps → Midpoint → Notifications
- You can turn off specific notification categories in the Midpoint app’s notification settings
- Disabling notifications does not affect your account or content access
The notification payload contains a title, body, and content type only — never your password or payment details.
Payments & Subscriptions
Midpoint offers optional subscription plans that unlock premium shows, ad-free content, and other features. All payments are processed by Paystack, a PCI DSS-compliant payment provider.
- Midpoint does not store your card number, CVV, or bank details
- Paystack returns a transaction reference and status confirmation, which we store to manage your subscription entitlements
- Your subscription status (active, expired, plan type) is stored in our database to determine which features you can access
- For questions about a specific charge, contact Paystack directly or reach out to us and we will assist
AI-Generated Content
Midpoint uses artificial intelligence to generate news articles, video show scripts, sports predictions, and episode content. This generation is driven by editorial configuration set by our team — it is not personalised using your private data.
AI providers receive prompts describing the content to generate (topic, tone, series context). These prompts do not include your name, email, reading history, or any information that identifies you.
All AI-generated content is reviewed and published by Midpoint editors before it becomes visible to users.
Community Features
Midpoint includes community features such as groups, posts, comments, reactions, follows, and hashtags. When you use these features:
- Your display name and profile picture are visible to other users alongside your posts and comments
- Your follower and following counts are visible on your profile
- Content you post in public groups is visible to all Midpoint users
- Content reported by other users is reviewed by our moderation team
You can delete your own posts and comments at any time. Deletion removes the content from public view; copies may be retained in backup systems for a limited period.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the service.
- Active accounts: data is retained for the lifetime of your account
- Deleted accounts: personal identifiers are removed within 30 days; aggregated statistics may be retained indefinitely
- Payment records: retained for the period required by applicable financial regulations
- Device tokens: removed when they become invalid or when your account is deleted
- Audit logs: retained for up to 12 months for security and compliance purposes
Security
We take reasonable technical and organisational measures to protect your information. These include:
- Passwords are hashed with a modern algorithm — we never store them in plain text
- All data in transit is encrypted using HTTPS / TLS
- JWT session tokens are signed and expire after a set period
- Our servers use firewall rules, rate limiting, and API key authentication to restrict unauthorised access
- Firebase service account credentials are stored outside the codebase and injected at runtime
- Redis session data and Kafka message queues are confined to our private internal network
No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to us immediately.
Your Rights & Choices
You have the following controls over your information:
Access & Correction
You can view and update your display name, profile picture, and email address from your account settings at any time.
Notification Control
You can enable or disable individual notification categories in your notification preferences without deleting your account.
Account Deletion
You may request deletion of your account and associated personal data by contacting us at the address in Section 14. We will process your request within 30 days.
Data Portability
You may request a copy of the personal data we hold about you in a machine-readable format within a reasonable timeframe.
Withdraw Consent
Where we process data on the basis of your consent (e.g. marketing emails), you may withdraw that consent at any time by updating your preferences or contacting us.
Children’s Privacy
Midpoint is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
Some content on Midpoint, including AI-generated shows, carries age ratings (G, PG, PG-13) to help parents and guardians make appropriate choices for younger family members.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
When we make material changes, we will update the “Last Revised” date and, where the change is significant, notify you at least 14 days before the change takes effect.
Continued use of Midpoint after the effective date constitutes your acceptance of the changes.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Email: sobosabastine17@yahoo.com
- Platform: midpoint.tlsgh.com
We will respond to all privacy-related requests within 30 days. For requests involving account deletion or data portability, please include your registered email address so we can verify your identity before processing the request.