Privacy Policy

Last updated: 16 July 2026

This Privacy Policy explains how Roomly ("Roomly", "we", "us") collects, uses, and protects your personal data when you use the Roomly mobile app and related services (the "Service"). We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and Dutch data protection law.

Please read this alongside our Terms & Conditions.

1. Who we are (Data Controller)

The data controller responsible for your personal data is:

{{FULL LEGAL NAME}}, currently operating as a sole trader under the name "Roomly"
{{REGISTERED ADDRESS}}, Netherlands
{{KvK / Chamber of Commerce number, once registered}}
Email: support@roomly-app.nl

Note: Roomly is in the process of being registered as a Dutch private limited company (B.V.). When that is complete, the B.V. will become the data controller and this section will be updated.

If you have any questions about this policy or how we handle your data, contact us at support@roomly-app.nl.

2. Who this policy applies to

This policy applies to everyone who creates a Roomly account and uses the Service. Roomly is intended only for people aged 18 and over. We do not knowingly collect data from anyone under 18 (see Section 11).

3. What personal data we collect

We collect the following categories of data:

a) Account & identity data

• Name and email address

• Your date of birth (used to confirm you are 18+ and to show your age — we never display your exact birth date)

• A unique account identifier

b) Profile data you choose to provide

• Nationality

• A short bio / "about you" text

• Field of study and institution

• Job title and company

• Interests and lifestyle ("vibe") tags

• A profile photo

c) Student verification data

• Your student email address and whether it has been verified

d) Listing and location data (if you create or join a home)

• Your home's address, including its precise location (latitude and longitude), number of rooms and bathrooms, description, rent, size, availability, and photos

e) Activity data

• Your swipes and decisions on rooms (e.g. interested, skipped, accepted, rejected) and when they occurred

• Homes and members you are connected to, and invite / join-request activity

f) Messages

• The content of chat messages you send to other users through the Service

g) Safety data

• Users or homes you block, and any reports you submit — including the reason and any free-text details you write about another user

h) Consent records

• The version of the Terms and Privacy Policy you accepted and when

i) Technical & usage data

• Approximate usage information such as screens viewed and app events, device type, operating system, and app version

• Crash and error diagnostics

We do not collect your device's GPS location, and we do not track you across other apps or websites.

4. How and why we use your data (and our legal bases)

We do not sell your personal data, and we do not use it for third-party advertising.

5. Who we share your data with

Other users. Your profile, listings, and messages are shared with other users as part of how the Service works — for example, seekers see room listings (including the home's location), and home admins see the profiles of people who are interested. Please only share what you're comfortable with others seeing.

Service providers (sub-processors). We use a small number of trusted providers to run the Service. They process data only on our instructions:

Legal and safety. We may disclose data where required by law, to enforce our Terms, or to protect the rights, safety, and security of our users or the public.

We do not otherwise share your personal data with third parties.

6. International data transfers

Some of our providers (notably Clerk and Google) are based in the United States, so your data may be transferred outside the European Economic Area (EEA). Where this happens, we rely on appropriate safeguards required by GDPR — such as the EU Standard Contractual Clauses and/or the provider's certification under the EU–US Data Privacy Framework — to ensure your data receives an equivalent level of protection. You can request more information about these safeguards at support@roomly-app.nl.

7. How long we keep your data

• While your account is active, we keep your data for as long as you use the Service.

• When you delete your account (see Section 8), we permanently delete your personal data — including your profile, photos, messages, swipes, and any home and listings you created — from our systems and our authentication provider. This is usually completed immediately and reflected across backups within 30 days.

• Safety and legal exceptions. We may retain certain information for longer where necessary — for example, reports you or others submitted for safety reasons, or data we must keep to comply with a legal obligation, resolve disputes, or enforce our agreements. Such data is minimised and kept only as long as necessary.

8. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you

• Rectify inaccurate or incomplete data (you can edit most profile data directly in the app)

• Erase your data ("right to be forgotten") — you can delete your account at any time in Settings → Account → Delete account, which removes your data as described in Section 7

• Restrict or object to our processing of your data

• Data portability — receive a copy of the data you provided in a structured, commonly used format

• Withdraw consent at any time, where we rely on consent

• Lodge a complaint with a supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl)

To exercise any of these rights, email support@roomly-app.nl. We will respond within one month. We will not discriminate against you for exercising your rights.

9. How we protect your data

We take security seriously. Measures include row-level access controls so users can only access data they're authorised to see, signed and time-limited links for private images, encrypted connections, verified authentication tokens on our backend, and restricting internal access to personal data. No system is perfectly secure, but we work continuously to protect your information.

10. Analytics and crash reporting

To understand how Roomly is used and to fix problems, we use PostHog (product analytics, hosted in the EU) and Sentry (crash reporting). These collect information such as which screens are viewed, app events, device and OS type, and error diagnostics. We do not capture the content of your taps or use this data for advertising, and crash reports are configured not to include personal identifiers by default.

We process this data on the basis of our legitimate interest in maintaining and improving the Service. You can opt out of analytics at any time by emailing support@roomly-app.nl{{, or in Settings once the in-app analytics toggle is available}}. Opting out will not affect your ability to use Roomly.

11. Children's privacy

Roomly is strictly for users aged 18 and over, and this is enforced at sign-up. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from someone under 18, we will delete it. If you believe a minor is using Roomly, contact support@roomly-app.nl.

12. Sensitive information

Please do not include sensitive personal information — such as data about your health, religion, political views, racial or ethnic origin, or sexual orientation — in your bio, messages, or other free-text fields. If you choose to include such information, you consent to us processing it as part of the Service.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, ask you to review and accept the new version in the app. Your continued use of the Service after an update means you accept the revised policy.

14. Contact us

Questions, requests, or complaints about your privacy:

Email: support@roomly-app.nl