Service provider: Partnership between Eunchan Park and Minh Son Truong
Contact: service@roommatesplus.ca
This Privacy Policy explains how roommates+ / RoommatesSwipe ("we", "us", "our") collects, uses, discloses, and protects personal information when you use our app and related services (the "Service"). The Service is a roommate-matching app that helps people find compatible roommates by creating a profile, swiping on other users, matching when interest is mutual, and chatting in-app. By using the Service, you acknowledge this Privacy Policy.
1. Scope
This Privacy Policy applies to personal information processed through the Service, including account creation and authentication, profile and roommate-preference setup, photo uploads, swiping and matching, in-app messaging, reporting, subscriptions and payments, and location features.
2. Information We Collect
- Account and authentication data: email, phone number, account/user ID, login credentials, and session/security metadata (Supabase Auth). If you use Sign in with Apple, the identifier and relay email Apple provides.
- Profile and identity data: name, profile and gallery photos, date of birth and age, gender, pronouns, occupation, employer, school/study program, student status, languages, hometown, and city/neighbourhood.
- Roommate-matching attributes: sleep schedule, cleanliness, noise level, guest frequency, social orientation, cooking, work-from-home, pets, hobbies, budget, and move-in timing.
- Sensitive attributes you choose to provide (see Section 5): sexual orientation / LGBTQ+ identity or friendliness, smoking, drinking, cannabis and other substance use, allergies (health), and origin/background details. Optional, but the matching algorithm uses them; if blank, you may not be matched with or shown to others.
- Housing preferences and search criteria: the housing you want and the criteria you set to filter other users (age range, genders, occupations, origins, languages, lifestyle ranges, "verified only," "LGBTQ-friendly only").
- Content you create: profile prompt answers, chat messages, feedback you submit, and the reason and details you include when reporting a user.
- Activity and interaction data: swipe (like/pass) decisions, matches, chats and messages, in-app notifications, and daily usage counters used to enforce plan limits.
- Subscription and payment data: subscription status, plan/interval, trial and renewal/cancellation dates, Stripe customer/subscription identifiers, and payment history (invoice IDs, amounts, currency, status, invoice PDFs). Full card details are handled by Stripe, not stored by us.
- Device and location data: with your permission, device location to centre the map and label a city, and camera/photo-library access to upload photos. Location text you search is sent to Google Maps Platform.
- Reports and moderation data: reporter and reported user IDs, names and emails, reason, free-text details/context, and report status.
- Operational, log, and security data: service logs, request metadata, and diagnostics from infrastructure providers.
3. How We Collect Information
- Directly from you when you register, build your profile, set preferences, upload photos, chat, submit feedback, report a user, or subscribe.
- From your activity in the Service (swipes, matches, messages, usage counts).
- From your device (location, camera, photos), only with the permissions you grant.
- From our service providers (for example, subscription/payment events from Stripe and authentication events from Supabase Auth).
4. How We Use Information
- Operate the core Service — profile, swipe/matching algorithm, matches, and in-app chat.
- Authenticate you and keep your account and sessions secure.
- Process payments, manage subscriptions and trials, and enforce free/premium usage limits.
- Keep the community safe — review reports, investigate abuse and fraud, and enforce our Terms.
- Provide location-based features (map and city search).
- Communicate with you (in-app notifications, feedback/support responses).
- Maintain, troubleshoot, and improve the Service.
- Comply with legal obligations and respond to lawful requests.
5. Sensitive / Special-Category Information
Some optional profile fields reveal information that certain laws (such as the GDPR/UK GDPR and Canadian privacy law) treat as sensitive — for example sexual orientation or LGBTQ+ identity, health details (allergies), substance use (smoking, drinking, cannabis, other drugs), and information that may reveal racial or ethnic origin (such as origin/background and languages).
- Providing this information is voluntary. You decide whether to add it.
- Where we rely on consent, your explicit consent is the legal basis. By entering these details you explicitly consent to our processing them for compatibility matching and to displaying them to other users as part of your profile.
- They are used for matching and shown to others. Because the algorithm relies on these attributes, they are visible to users who view your profile and affect who you are shown to. If blank, you may be excluded from matches that require them.
- You can withdraw consent at any time by editing or clearing those fields, or by deleting your account. Withdrawal does not affect prior processing and may limit or prevent matching.
Please do not include sensitive information about yourself or others in free-text fields (prompts, chats, reports) beyond what is necessary.
6. Legal Bases (Where Applicable)
- Contract — to create your account and provide the matching, chat, and subscription services you request.
- Consent — for optional and sensitive profile attributes, and where else required (revocable at any time).
- Legitimate interests — to secure the Service, prevent abuse and fraud, and maintain and improve the platform.
- Legal obligation — compliance, lawful requests, tax/accounting for payments, and dispute handling.
7. How Information Is Shared
- With other users in-Service: your profile (photos, prompts, matching and sensitive attributes you add, approximate city/area) is shown to other users so they can decide whether to match, and your messages are shared with the users you match with.
- With service providers/processors under contractual safeguards: Supabase (authentication, database, photo storage, edge functions, realtime, logs); Stripe (subscription billing and payment processing, handling card data under its own privacy policy); Google Maps Platform (map display, place/city autocomplete, geocoding — your searched location text is sent to Google); Resend (sending feedback emails you submit, which include your user ID and email); and Apple (Sign in with Apple, if used).
- For legal/safety reasons when required by law or to protect the rights, safety, and integrity of users and the platform.
- In a business transfer (reorganization, merger, or asset transfer), subject to applicable law.
We do not sell personal information and do not share personal information with third-party advertisers for cross-context behavioral advertising. We do not use third-party advertising or analytics SDKs in the app.
8. Information Visible to Other Users
The Service is built around showing your profile to potential roommates. Your photos, profile details, roommate-matching attributes, any sensitive attributes you add, and your approximate location/city are visible to other users in the swipe and match experience. Messages are visible to the user(s) you match and chat with. Photos are stored in cloud object storage and may be retrievable by direct URL. Please consider what you are comfortable sharing.
9. Payments
Paid subscriptions are processed by Stripe. When you subscribe, you provide your payment details directly to Stripe through its checkout, and Stripe processes your card/payment information under its own terms and privacy policy. We receive subscription status, billing dates, and limited payment metadata (such as invoice amounts and identifiers) to manage your subscription and entitlements — not your full card number.
10. International Transfers
Your information may be processed in countries other than your own (including the United States, where several of our providers operate). Where required, we use reasonable safeguards for cross-border transfers consistent with applicable privacy laws.
11. Retention and Deletion
- Account deletion. You can delete your account from within the app. Deletion removes your profile, photos, preferences, prompts, swipes, matches, and messages from active systems.
- Backups. Residual copies may persist in encrypted backups for a limited period before being overwritten.
- Safety and legal records. We may retain certain records — such as reports and payment/tax records — for longer to keep the community safe, resolve disputes, or comply with legal, accounting, and tax obligations.
Retention may otherwise vary by data type, legal requirements, backup cycles, and operational needs.
12. Security
We implement reasonable administrative, technical, and organizational measures, including authentication controls, row-level access controls in the database, and storage access policies. Payment-card data is handled by Stripe under PCI-DSS. No method of transmission or storage is completely secure.
13. Your Privacy Rights
Depending on your location (including Canada, EEA/UK, and certain U.S. states), you may have rights to:
- Access personal information.
- Correct inaccurate information.
- Delete information (subject to legal/operational exceptions).
- Receive a portable copy of information.
- Restrict or object to certain processing.
- Withdraw consent where processing is consent-based.
- Appeal a rights decision where local law provides that right.
You can exercise many of these rights directly in the app by editing your profile or deleting your account. For other requests, contact service@roommatesplus.ca. We may need to verify your identity before fulfilling requests.
14. U.S. State Privacy Disclosures
For residents of applicable U.S. states, we process the personal information categories listed in Section 2 for the business purposes in Section 4, and disclose information as described in Section 7. We do not sell personal information or share it for cross-context behavioral advertising. You may exercise applicable rights by contacting service@roommatesplus.ca.
15. Children
The Service is intended for users 18+ and is not directed to children. We do not knowingly collect personal information from anyone under 18.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Updates become effective when posted (or as otherwise required by law). Continued use of the Service after updates means you accept the updated policy.
17. Contact
Privacy questions or requests: service@roommatesplus.ca