Privacy Policy
Effective date: March 26, 2026
1. Personal Information We Collect
roommes collects the following personal information when you register or use our services:
- Name and display name
- Email address
- Nationality and age
- Profile photo (avatar)
- Lifestyle preferences (sleep pattern, cleanliness level, social level, budget range, preferred areas)
- Languages spoken
- Self-introduction (bio)
- Message content exchanged with other users
- Device and access log information generated during service use (IP address, browser type, access time)
2. Purpose of Collection and Use
We use the collected information for the following purposes:
- Roommate matching — calculating compatibility scores and recommending suitable profiles and groups
- Service operation — account management, identity verification, customer support
- Notification delivery — new message alerts, group activity updates, service announcements
- Service improvement — usage analysis, new feature development, bug resolution
- Legal obligation compliance
3. Retention and Use Period
Personal information is retained for as long as your account is active. Upon account deletion, your information is destroyed within 30 days, subject to the following exceptions required by law:
- Records on contracts and subscription withdrawal (Consumer Protection Act): 5 years
- Records on payment and supply of goods (Consumer Protection Act): 5 years
- Records on consumer complaints and dispute resolution (Consumer Protection Act): 3 years
- Website visit records (Protection of Communications Secrets Act): 3 months
4. Disclosure to Third Parties
roommes does not provide your personal information to third parties in principle. However, we entrust the following processors to operate our service:
| Processor | Entrusted Task | Retention |
|---|---|---|
| Supabase, Inc. | Database storage, authentication, real-time messaging infrastructure | Until membership termination |
| Resend, Inc. | Transactional email and notification delivery | Until membership termination |
Both processors are contractually bound to use your data only to provide services to roommes and to maintain appropriate technical and organisational security measures.
5. Your Rights
You may exercise the following rights at any time by contacting us at privacy@roommes.com:
- Right to access — request a copy of your personal information we hold
- Right to rectification — request correction of inaccurate information
- Right to erasure — request deletion of your account and associated data
- Right to restriction of processing — request that we limit how we use your data
Profile information can also be updated directly on the profile settings page. We will respond to all requests within 10 business days.
6. Cookies
roommes uses cookies and similar session tokens solely to maintain your login session and provide a secure, personalised experience. We do not use cookies for advertising or cross-site tracking. You may disable cookies in your browser settings, but doing so will prevent you from staying logged in.
7. Contact
For questions, requests, or complaints regarding this Privacy Policy or the handling of your personal information, please contact:
Privacy Contact: privacy@roommes.com