Back to Roomify

Privacy

What Roomify stores, what other people can see, and what happens when you leave. Written in plain language on purpose — every claim below is something the database actually enforces.

Last updated 10 August 2026

Draft — not yet reviewed by a lawyer. This describes how the app behaves today. Before Roomify launches publicly it needs replacing with a policy that meets India's DPDP Act, including a named grievance officer and a formal consent notice.

What you give us

  • Your account email or mobile number, and a password you set.
  • Profile details: name, date of birth, gender, bio, employer and role, rent range, move-in date, household size, habits and interests, languages, and optionally your zodiac sign and ethnicity.
  • The area you pick, which we store as a locality and its pincode.
  • Your photos, up to six.
  • If you allow it, a GPS fix rounded to about 100 metres. It is used to make distances honest and is never shown to anyone.
  • A work email, only if you choose to verify your employer.

What other people see

Other users receive one fixed shape, built by the server. It deliberately leaves out your work email, your exact coordinates, your pincode, your GPS fix, and the record of any consent you gave.

  • They see your locality name and a distance rounded to one decimal place — enough to judge a commute, not enough to find an address.
  • They see whether your employer is verified, never the address that verified it.
  • They never see who you passed on. A decline is invisible, and a request only becomes visible to you once you have approved it.
  • Your search filters are yours. They shape who you see and say nothing about you to anyone else.

Your photos are on a public URL

Profile photos live in a public storage bucket, so anyone holding the link can open it without being signed in. Links are long and random and are not listed anywhere, but this is not the same as private. Do not upload a photo you would mind being seen outside the app.

Messages

Messages are stored in plain text and readable only by the two people in the match. They are not end-to-end encrypted — we can read them, and we will if you report someone.

Who else gets your data

  • Supabase hosts the database, storage and authentication.
  • Company logos are fetched from a favicon service by employer domain, so that service sees which domains the app asks about — never who asked.
  • We do not sell your data, and there are no advertising or analytics trackers in the app today.
  • This website sets no cookies and loads nothing from a third party. If you join the waitlist we store the email address and city you typed, and nothing else.

Deleting your account

Profile → Danger zone → Delete my account removes it immediately and permanently. Your profile, photos, requests, matches, messages and blocks all go with it. There is no recovery window and no archived copy.

  • The reason you pick is kept, with no link to you — no user id, no email, no timestamp we could match back.
  • Messages you sent stay visible to the person who received them, the same way a sent SMS does.

Your choices

  • "Show my profile" hides you from Nearby for everyone, without touching your existing chats.
  • Location permission can be withdrawn in your phone settings; the app falls back to the area you picked.
  • Everything on your profile can be edited or emptied at any time.
  • To be removed from the website waitlist, email hello@findyouroommate.com and it is deleted.

Questions about any of this go to hello@findyouroommate.com. Anything about someone's conduct goes to safety@findyouroommate.com.