Privacy Policy

Last updated: 8/30/2026

Welcome to My Roomie. We respect your privacy and are committed to protecting the personal information you provide when using our platform.

This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, when it may be disclosed, and the rights you have regarding your personal data.

By creating an account, completing a profile, using our services, or continuing to use My Roomie where consent is required, you acknowledge that you have read and understood this Privacy Policy. Where the law requires consent, your continued action after being presented with a consent notice constitutes your consent to the processing described here.

1. Information We Collect

We collect only information that is reasonably necessary to operate, improve, secure, and provide the services offered through My Roomie.

Account Information

• Email address
• Password or authentication credentials
• Full name
• Phone number
• WhatsApp contact information
• Preferred contact method

Passwords are not intended to be stored in plain text. Authentication credentials are handled using appropriate security mechanisms provided by our authentication infrastructure.

Roommate Profile Information

• Profile photo
• Age or age range where provided
• Gender or gender preference where provided
• Roommate preferences
• Preferred location or area
• Budget or rent range
• Expected duration of stay
• Lifestyle preferences
• Bio and other information you voluntarily provide

Payment Information

Where the platform requires payment, we may collect transaction references, transaction codes, payment status, payment amounts, or supporting information you voluntarily submit for verification.

We do not intend to collect or store unnecessary financial information such as your M-Pesa PIN, bank password, card PIN, or other confidential authentication credentials. Never submit your M-Pesa PIN, password, or other authentication secret to My Roomie.

Messages and Communications

If My Roomie provides messaging or communication features, we may process messages, reports, and related information in order to provide the service, prevent abuse, investigate complaints, enforce our policies, and maintain platform security.

Technical Information

We may automatically receive limited technical information such as device type, browser information, IP address, approximate location derived from technical information, access times, error logs, and information necessary to maintain the security and reliability of the platform.

2. Why We Use Your Information

We process personal data for legitimate and disclosed purposes, including:

• Creating and managing your account.
• Creating and displaying your roommate profile.
• Matching users based on their stated preferences.
• Allowing users to communicate where the service permits it.
• Processing and verifying applicable payments.
• Providing customer and technical support.
• Preventing fraud, abuse, spam, and unauthorized access.
• Investigating reports and enforcing platform rules.
• Improving the functionality, reliability, and security of My Roomie.
• Complying with applicable legal and regulatory obligations.

3. Your Consent

Where processing is based on consent, you have the right to understand what you are consenting to before your information is processed.

By selecting a button, checkbox, submitting a form, creating an account, or otherwise continuing with a feature after an appropriate consent notice has been presented, you may be giving consent for My Roomie to collect and process the information necessary for that specific purpose.

Consent does not mean that we obtain unlimited rights over your information. We will use personal data only for legitimate, communicated purposes and in accordance with applicable data protection requirements.

Where consent is the legal basis for processing, you may withdraw that consent subject to applicable legal or operational limitations. Withdrawal of consent does not affect processing that was lawfully carried out before the withdrawal.

4. What Other Users Can See

Certain information is intentionally displayed to other users because it is necessary for the roommate-matching service.

Depending on the features available on the platform, other signed-in users may see information such as your name, profile photo, roommate preferences, budget, preferred area, lifestyle information, and bio.

Your private contact information, including your phone number, email address, and other sensitive contact details, is not intended to be publicly displayed on your profile.

If a feature allows contact details to be exchanged after a match, those details may become available to the relevant matched user. By using such a feature, you acknowledge that the recipient may then be able to contact you outside My Roomie.

5. We Do Not Sell Your Personal Data

My Roomie does not sell your personal data.

We do not sell your name, phone number, email address, roommate preferences, conversations, profile information, payment records, or other personal information to advertisers, data brokers, marketers, or other businesses for their independent commercial use.

6. Sharing With Third Parties

We do not share your personal information with third parties simply for their own marketing or commercial purposes.

However, operating an online platform may require us to use trusted service providers that process information on our behalf. These may include hosting providers, database providers, authentication providers, payment processors, security services, analytics services, communication providers, and other technical infrastructure providers.

Where third-party services are used, we seek to limit the information provided to what is reasonably necessary for the relevant service and, where applicable, require appropriate confidentiality and data protection safeguards.

We may also disclose information where reasonably necessary to comply with a valid legal obligation, court order, lawful government request, prevent fraud or serious abuse, protect the security of the platform, or protect the rights and safety of our users or others.

We will not knowingly disclose your personal information to a third party for an unrelated purpose without an appropriate legal basis or your knowledge where such knowledge or consent is required by law.

7. Data Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, or destruction.

These measures may include access controls, authentication, authorization, secure connections, database security, restricted administrative access, logging, and other safeguards appropriate to the nature of the information being processed.

However, no internet service or electronic storage system can be guaranteed to be completely secure. You acknowledge that transmission of information over the internet carries inherent risks.

8. Data Minimization

We aim to collect and retain only information that is reasonably necessary for the purposes for which it is processed. You should avoid posting highly sensitive personal information in your profile, bio, messages, photographs, or other public areas of the platform.

Do not post passwords, M-Pesa PINs, identification numbers, banking credentials, private addresses, or other information that you would not want other users to see.

9. Data Retention

We retain personal information only for as long as reasonably necessary to provide the service, maintain legitimate business records, resolve disputes, enforce agreements, maintain security, prevent fraud, or comply with applicable legal obligations.

Different categories of information may therefore be retained for different periods.

10. Account Deletion

You may request deletion of your account and personal information through the available account controls or by contacting us.

When an account is deleted, we will take reasonable steps to remove or anonymize personal information that is no longer necessary for a legitimate purpose.

Some information may need to be retained where required by law, necessary to resolve disputes, prevent fraud, maintain security, or otherwise permitted by applicable law.

11. Your Data Protection Rights

Subject to applicable law, you may have rights regarding your personal data, including the right to:

• Be informed about how your personal data is being processed.
• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information where legally applicable.
• Object to certain forms of processing.
• Request restriction of processing in applicable circumstances.
• Withdraw consent where processing is based on consent.
• Exercise other rights provided under applicable data protection law.

We may need to verify your identity before processing certain requests in order to prevent unauthorized access to personal information.

12. Children and Minors

My Roomie is not intended to be used by individuals who are legally prohibited from using the service based on their age or applicable law.

We do not knowingly collect personal information from children in circumstances where such collection is prohibited by law. If you believe that a child has provided personal information to us improperly, please contact us so that appropriate action can be taken.

13. User-Generated Content

Information you voluntarily publish on My Roomie, including profile information, photographs, biographies, preferences, and messages, may be accessible to other users depending on the functionality of the platform.

You are responsible for ensuring that information you voluntarily publish does not expose you or another person to unnecessary privacy, security, or personal safety risks.

14. Third-Party Links and Services

My Roomie may contain links or integrations that direct you to third-party websites or services. Those services operate under their own privacy policies and terms.

We are not responsible for the privacy practices, security, content, or policies of independent third-party services that you choose to access.

15. Cookies and Similar Technologies

My Roomie may use cookies, local storage, session technologies, or similar mechanisms where necessary to maintain authentication, preferences, security, functionality, and platform performance.

Where analytics or other non-essential technologies are introduced, we will seek to provide appropriate information and controls where required by applicable law.

16. Data Breaches and Security Incidents

If we become aware of a personal-data breach that requires notification under applicable law, we will take appropriate steps to investigate, contain, mitigate, and report the incident to the relevant authorities and affected individuals where legally required.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time as My Roomie develops, new features are introduced, our technology changes, or legal requirements change.

When material changes are made, we will take reasonable steps to make users aware of the updated policy. The date shown at the beginning of this policy indicates when it was most recently updated.

18. Contact and Privacy Concerns

If you have a privacy question, believe your personal information has been improperly handled, or wish to exercise an applicable data protection right, please contact the My Roomie team through the available support or report channels on the platform.

We will review legitimate privacy requests and respond within the timeframe required by applicable law.

19. Governing Data Protection Framework

My Roomie is committed to handling personal data in accordance with applicable data protection and privacy laws, including the Kenya Data Protection Act, 2019, together with applicable regulations and amendments.

Where other privacy or data protection laws apply to a user's use of the platform, we will comply with those requirements to the extent applicable to our activities.

By continuing to use My Roomie after being presented with applicable privacy notices and consent requests, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described above, where consent is the applicable legal basis.