Mado Privacy Policy
Last updated September 26, 2026
Mado tells you when bookings open for places in Tokyo, in your own time zone, and alerts you when it’s time to book. This policy explains what we collect to do that, who helps us, and the choices you have. We don’t sell your data, we don’t show ads, and we don’t track you across other companies’ apps or websites.
What we collect
- Your account: your email address, which you sign in with and which we use for alert emails, and a display name if you add one.
- Your trips: dates, party size, budget, where you’re staying, the kinds of places you like, any dietary needs you choose to tell us, and the places and visit times you add. Dietary choices such as halal can reveal a religious practice; they’re optional and used only to suggest places.
- Your phone number, only if you turn on text alerts. We store it encrypted and keep a record of your consent to receive texts.
- Your device: an install identifier and the push and Live Activity tokens Apple gives the app, plus whether notifications are allowed, so alerts reach this phone.
- Your time zone, to show booking times in your time. The app never asks for your location. Transit times in “Why this place” come from Apple Maps on your phone and never reach us.
- Subscription status: whether you have Pro and when it renews or ends. Apple handles payment; we never see your card.
- How you use the app: events such as screens opened, places viewed and places added, tied to your account, so we can see which features and recommendations help.
- Technical logs: our servers record requests, including IP addresses, to keep the service secure and working. We don’t log your phone number or the contents of texts.
How we use it
To run the app: working out booking times, sending the alerts you ask for by notification, text and email, recommending places, and keeping your account and subscription in sync. To improve the app from usage data. To keep the service secure and prevent abuse. To answer you when you contact us.
Who helps us
We share data only with the companies that run parts of the service for us, and only what each needs:
- Supabase (database and sign-in) and Railway (our servers)
- Apple (push notifications, Live Activities and in-app purchases)
- RevenueCat (subscription status)
- PostHog (product analytics)
- Sendblue (text alerts and phone number verification)
- Resend (sign-in codes and alert emails)
When it’s time to book, the app opens the venue’s booking partner or website, such as TableCheck or OMAKASE. We don’t send them your data; what you share there is covered by their own policies. We may also disclose data if the law requires it.
How long we keep it
We keep your data while you have an account. When you delete your account, we delete your profile, trips, alerts, phone number, consents, devices and settings right away. Subscription records that RevenueCat and Apple keep for billing and tax follow their retention rules, and backups roll off within 30 days.
Your choices
- Delete your account in the app: Settings › Delete account.
- Turn off alert emails in Settings, or with the unsubscribe link in any alert email.
- Stop text alerts in Settings, or reply STOP to any text.
- Turn off notifications in iOS Settings at any time.
- Ask for a copy of your data, a correction, or anything else about your privacy: email jordan@getmadoapp.com.
Children
Mado isn’t directed to children under 13, and we don’t knowingly collect their data. If you think a child has given us data, contact us and we’ll delete it.
Changes
If we change this policy in a way that matters, we’ll tell you in the app before it takes effect. The date at the top shows the latest version.
Contact
Questions about this policy: email jordan@getmadoapp.com.