Privacy Policy
Last updated: June 2026
This policy explains what information RoomPin collects, how we use it, and the choices you have. It applies to the RoomPin website at roompin.in and the RoomPin apps for Android and iPhone, which share the same accounts and backend.
RoomPin is a flat-hunting platform for India that connects people looking for rooms, flats, and flatmates with the owners and brokers who list them. It is operated from India and free to use. We try to collect only what we need to make that matching work, and to keep the language here plain.
1. Information we collect
Information you give us
- Account details:your name, email address, phone number, and whether you are listing a place or searching for one. Your password is stored only as a secure one-way hash; we never store it in readable form.
- Profile photo:optional; only if you add one.
- Listing details:if you post a listing or a search, the location you choose on the map (coordinates and an area label), rent or budget, deposit, maintenance (if you add it), move-in date, property size, furnishing, your gender preference, and what food is allowed (for a place) or what you eat (for a search), for matching. Owners and brokers also upload property photos.
- Roommate compatibility profile ("your vibe"):if you are searching for a flatmate, optional lifestyle details you choose to share so we can suggest roommates you are likely to get along with: your sleep schedule, how tidy you keep your space, whether you smoke or drink, your work style (home, hybrid, or office), how often you have guests, your stance on pets, and a short free-text note about yourself. Every field is optional, and you can edit or remove them anytime from your Profile.
- Messages:the chat messages you send to other users through RoomPin, and any intro note you send when you start a conversation.
- Reports, blocks, and feedback:if you report a user or listing, block someone, request a new area, or send us feedback, we keep what you submit.
Information we collect automatically
- Device and connection data:your IP address, an approximate network range derived from it, and your browser/device user-agent string. We record these when you sign up and on sensitive actions, to prevent fraud, spam, and abuse.
- Activity data:a "last active" timestamp, and basic product-analytics events (such as page views and feature taps) so we can understand how RoomPin is used and improve it.
- Diagnostics:if something errors or crashes, we collect technical error reports to help us fix it.
- Cookies (website):a secure, http-only session cookie that keeps you logged in for up to 7 days, and a separate cookie that protects against cross-site request forgery. For advertising measurement, the website also uses the Meta (Facebook) Pixel, which sets a cookie. See "Advertising and the Meta Pixel" below, including how to opt out.
App push notifications (Android app only)
If you use the RoomPin app and allow notifications, the app registers a device push token with us (via Google Firebase Cloud Messaging) so we can notify you about new messages and matches, even when the app is closed. The token identifies the device, not you personally. You can turn notifications off at any time in your device settings, and logging out removes your device tokens from our servers.
2. How we use your information
- To run the core service: show listings, match owners and searchers, power your chat and inbox, and send you notifications you ask for.
- To send account and service emails (sign-up verification, password resets, and match/message/connection alerts) and app push notifications.
- To keep RoomPin safe: verify accounts by email one-time code, rate-limit requests, and detect and prevent fraud, spam, impersonation, and abuse.
- To understand and improve the product, and to diagnose and fix errors.
We do not sell your personal data. For advertising, we use the Meta (Facebook) Pixel to measure our ads and reach people on Facebook and Instagram (see "Advertising and the Meta Pixel" below), but we never share your name, email address, or phone number with Meta or any advertising partner.
3. What other users can see
RoomPin only works if people can find and contact each other, so some of your information is visible to other users:
- Visible to others: your name, your profile photo (if added), your listing or search details (including the location pin and area), the messages you send them, and a coarse "last active" indicator. When you appear as a potential roommate match, we may also show that person a few compatibility highlights you have in common (for example, "both non-smokers"); your free-text note and your individual lifestyle answers are not shown.
- Your email address is never shown to other users.
Your phone number stays private by default. It is never shown on public listings. Your number is shared only with the other person, and only once you connect (one of you sends a request and the other accepts it). Until then, it stays hidden.
4. Service providers we share data with
We use a small number of trusted companies to run RoomPin. They process data only to provide their service to us, under their own privacy and security terms, not for their own purposes:
| Provider | What it handles |
|---|---|
| Amazon Web Services (AWS), Mumbai region | Server hosting |
| MongoDB Atlas | Database hosting |
| Cloudinary | Hosting and delivery of profile and property photos |
| Google Maps Platform | Maps, place search, and geocoding for the location you enter |
| Google Firebase Cloud Messaging | Delivering app push notifications (device token) |
| Brevo (Sendinblue) | Sending account and notification emails |
| PostHog (EU) | Product analytics |
| Sentry | Error and crash diagnostics |
We may also disclose information if required by law, or where we believe in good faith it is necessary to protect the rights, property, or safety of RoomPin, our users, or the public.
Advertising and the Meta Pixel
On the website, we use the Meta (Facebook) Pixel to measure how our Facebook and Instagram ads perform and to show our ads to people who have already visited RoomPin ("retargeting"). When you visit roompin.in, the pixel reports to Meta the page view and a few non-identifying actions (such as opening a listing, starting a search, sending a connection request, or signing up) along with your IP address, browser information, and a Meta cookie. It does not send Meta your name, email address, or phone number (Meta's "advanced matching" feature is turned off). Unlike the providers in the table above, Meta processes this pixel data for its own advertising purposes under Meta's Privacy Policy. You can opt out using your browser's cookie controls or an ad blocker, and you can manage how Meta uses your activity for ads in your Meta ad preferences. The pixel runs only on the website. The RoomPin Android app does not use it.
5. How we protect your information
Passwords are stored as salted one-way hashes (bcrypt). Connections to RoomPin use HTTPS. Logins use a secure, http-only session token, and non-GET requests on the website are protected against cross-site request forgery. No system is perfectly secure, but we work to protect your data and limit who can access it.
6. Keeping and deleting your data
You can delete your account at any time from your Profile page, or by request. See our account-deletion page. Deleting your account permanently removes your account from RoomPin, so nobody can see your profile or contact you through RoomPin any more. It also removes your listings or search and their photos, your profile photo, your saved preferences, and your registered device tokens. Conversations you had stay in the other person's chat history with your side anonymised ("Deleted user").
What we keep after you delete your account. When you sign up, we keep a record of the sign-up: your name, email address, phone number, account type (owner or tenant), and the network address (IP) and device type you signed up from. When you post a listing or a search, we keep a copy of what you posted, without the photos. These records stay on our servers after you delete your account. We keep them for security, to prevent fraud and misuse (for example, someone who was banned signing up again), and as a record of what was posted on RoomPin. They are not shown to other users. We also keep a log of account actions (such as sign-ups, edits and deletions) for one year. If you have a question about this, email us at contact@roompin.in.
7. Your choices
- Email notifications:every notification email includes a one-click unsubscribe link, and you can turn match/notification emails off in your account.
- Push notifications:controlled by your device's notification permission; turn them off any time in Android settings.
- Advertising:opt out of the Meta Pixel with your browser's cookie controls or an ad blocker, and manage ad personalisation in your Meta ad preferences.
- Access and deletion:you can view and edit your details in the app, and delete your account as described above. To ask a privacy question or make a request, email us at the address below.
8. Children
RoomPin is intended for adults. You must be 18 or older to create an account or use the service. We do not knowingly collect information from anyone under 18.
9. Changes to this policy
We may update this policy as RoomPin evolves. When we do, we will change the "Last updated" date above, and for material changes we will give you notice within the app, by email, or on this page. Continuing to use RoomPin after a change means you accept the updated policy.
10. Contact us
If you have any questions about this policy or your data, email us at contact@roompin.in.