Privacy Policy

We collect what we need to match you with roommates and keep the place safe, and not much else. We do not sell your data. We do not run ad networks. Your exact address is never public, and neither is your answer sheet from the compatibility quiz.

You give us: your email, name, and password; anything you add to your profile; your listings and photos; your messages; and reports you send us.

We generate: when you were last active, your match scores, and basic analytics about how the site is used.

Verification: we store a one-way hash of your phone number, never the number itself, so we can enforce one account per person without holding your number. If you verify government ID, our provider holds the document. We store only the result.

Active listings and their photos are public, because that is how people find rooms. Your profile is visible to members and is marked so search engines do not index it. Your exact address lives in a separate place that public queries structurally cannot reach. You share it in a conversation when you choose to.

Another member never sees your answer sheet. What they see is the compatibility score and the short phrases that explain it, like “Both night owls” or “They are a night owl”, which means a single answer can show through where it drives the score.

We strip location data from every photo before storing it. A phone photo of your room carries that room’s GPS coordinates, and publishing that would undo the whole point of showing an approximate area.

Messages about your account, your conversations, and your listings are part of the service. Marketing email is separate: it is off unless you opt in, every one has a working unsubscribe, and we keep a record of your consent, as CASL requires.

Under PIPEDA you can ask for a copy of your data, correct it, or have it deleted. Both are self-serve in your account settings with no email and no waiting.

Deleting removes your name, photo, bio, quiz answers, preferences and saved items immediately, and purges the account after 30 days. Messages you sent remain in the conversation under “Deleted user”: they are half of somebody else’s thread, and erasing them would destroy that person’s record. Consent logs and safety reports are kept longer where the law requires it, and a banned account keeps the hashed phone number that enforces the ban.

On Supabase and Vercel infrastructure. Some processing happens outside Canada; where it does, we use providers with appropriate safeguards.

Privacy questions go to privacy@roomycity.com. If we cannot resolve it, you can complain to the Office of the Privacy Commissioner of Canada.