Privacy Policy

By using Dormeet, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use the app.

1. Information We Collect

1a. Information You Provide

• Account information: Email address and password (your password is securely hashed and we never have access to it in plain text).
• Profile information: Full name, gender, pronouns, college year, major, college/university, hometown, ethnicity, religion, hobbies, bio, Snapchat username, and profile photos (up to 6).
• Preferences and lifestyle: Sleep schedule, cleanliness level, noise preference, social preference, study habits, guest frequency, budget range, Greek life interest, and looking-for intent (roommate, friends, transfer student, or exploring).
• Live status: Your current availability status (e.g., “Available,” “Looking for roommate,” “Open to connect”).
• Messages: Content of messages you send to other users through roommate, friend, and marketplace conversations.
• Marketplace listings: Item title, description, price, category, condition, images, brand, tags, and pickup location for items you list for sale.
• AI-generated content: When you use our AI bio generator, the information you provide (such as your name, major, year, and hobbies) is sent to our AI service provider to generate a suggested bio.

1b. Information Collected Automatically

• Device information: Device type, operating system, and app version, collected through the Expo framework.
• Push notification tokens: A unique identifier for delivering push notifications to your device.
• Usage data: Swipe actions (likes and passes), match data, marketplace item views, saved items, and message read status.
• Local storage: Theme preferences, AI chat history, and cached data stored locally on your device.

1c. Optional Information

• Location: If you grant permission, we may access your approximate location to help you find roommates and listings near your campus. You can revoke this at any time in your device settings.

1d. Sensitive Personal Information

We collect certain information that may be considered sensitive, including ethnicity, religion, gender, and gender preferences. This information is collected with your explicit consent during profile creation and is used solely to improve your matching experience. You may choose not to provide this information or remove it at any time by editing your profile.

2. How We Use Your Information

We use your information for the following purposes:

• Account creation and authentication: To create and secure your account.
• Profile matching: To show you compatible roommate and friend matches based on your preferences, lifestyle, and interests.
• Messaging: To deliver messages between matched users and marketplace participants.
• Marketplace: To facilitate listing, browsing, and purchasing items from other students.
• AI-powered features: To generate bio suggestions using a third-party AI service.
• Push notifications: To alert you about new matches, messages, and marketplace updates (with your permission).
• Safety and moderation: To automatically screen uploaded photos for objectionable content, investigate reports, enforce our terms, and maintain a safe environment.
• App improvement: To understand how features are used and improve the Dormeet experience.

3. How We Share Your Information

3a. With Other Dormeet Users

Your profile information (name, photos, bio, major, year, hobbies, preferences, live status, and Snapchat username) is visible to other Dormeet users. Matched users can exchange messages. Marketplace listings are visible to all users at your college.

3b. With Service Providers

We share information with third-party service providers who help us operate the app:

• Supabase: Provides our database, user authentication, and file storage (profile and marketplace photos). Data is hosted on secure servers in the United States.
• Amazon Web Services (Rekognition): Photos you upload (profile, marketplace, and chat photos) are automatically screened for objectionable content (such as nudity, graphic violence, or hate) before they are stored, to keep the community safe. Images are processed transiently for this check and are not used to train models. See AWS Privacy Notice.
• Anthropic (Claude API): Processes your name, major, year, and hobbies to generate AI bio suggestions. See Anthropic’s Privacy Policy.
• Expo: Delivers push notifications and collects basic device information. See Expo’s Privacy Policy.
• OpenStreetMap/Nominatim: Processes location queries for campus mapping features. No personal information is sent.

3c. For Legal Reasons

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect the safety, rights, or property of Dormeet, our users, or the public.

3d. Business Transfers

If Dormeet is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

3e. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Data Retention

• Active accounts: We retain your data as long as your account is active.
• Messages: Retained as long as both users have active accounts.
• Marketplace listings: Retained until you delete them or your account is deleted.
• Swipe and match data: Retained for the duration of your account.
• Account deletion: When you delete your account, we will remove your personal data within 30 days. Certain data may be retained in anonymized form for safety and analytics, or as required by law.

5. Your Rights and Choices

All Users

• Edit your profile: Update or remove any profile information at any time.
• Delete your account: Request account deletion directly within the app through Settings. Your data will be permanently removed within 30 days.
• Manage notifications: Enable or disable push notifications in your device settings.
• Manage location: Grant or revoke location access in your device settings.
• Block and report: Block or report other users at any time.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know: Request details about what personal information we collect and how it is used.
• Right to delete: Request deletion of your personal information.
• Right to correct: Request correction of inaccurate personal information.
• Right to opt-out of sale: We do not sell your personal information. No opt-out is necessary.
• Right to limit use of sensitive information: You may request that we limit the use of sensitive personal information (ethnicity, religion, gender) to what is necessary for providing the service.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at privacy@dormeet.com. We will respond within 45 days.

European Users (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data.
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Receive your data in a machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time for processing based on consent.
• Right to lodge a complaint: File a complaint with your local data protection authority.

To exercise these rights, contact us at privacy@dormeet.com. We will respond within 30 days.

Legal Bases for Processing (GDPR)

• Consent: For sensitive data (ethnicity, religion, gender preferences), location, push notifications, and AI features.
• Contract performance: For account creation, profile matching, messaging, and marketplace functionality.
• Legitimate interests: For app security, fraud prevention, and service improvement.

6. Data Security

We take reasonable measures to protect your information, including:

• All data transmitted between the app and our servers is encrypted using TLS/HTTPS.
• Passwords are securely hashed and never stored in plain text.
• Database access is controlled through row-level security policies.
• Photos are stored in authenticated, access-controlled storage.
• Authentication tokens are securely stored on your device.

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you become aware of a security issue, please contact us immediately.

7. Children’s Privacy

Dormeet is intended for college students who are 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 13. If we learn that we have collected information from a child under 13, we will delete that information immediately. If you believe a child under 13 has provided us with personal information, please contact us at privacy@dormeet.com.

8. AI Features Disclosure

Dormeet uses a third-party artificial intelligence service to power one feature:

• AI Bio Generator: When you use this feature, your name, major, year, and hobbies are sent to Anthropic’s Claude API to generate a suggested bio. You can review, edit, or discard the result before it is saved to your profile.

AI-generated content may not always be accurate. You are responsible for reviewing any AI-generated bio before saving it to your profile.

Our AI provider processes data in accordance with its own privacy policy. We do not authorize it to use your data for training its models beyond what its standard data usage policies permit.

9. International Data Transfers

Dormeet is operated from the United States. If you access the app from outside the United States, your information may be transferred to, stored in, and processed in the United States where our servers and service providers are located. By using Dormeet, you consent to the transfer of your information to the United States.

For users in the European Economic Area, we rely on Standard Contractual Clauses and your consent as the legal basis for these transfers.

10. Third-Party Links

The app may contain links to third-party services (such as Snapchat profiles). We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies before providing them with your information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by other means before the changes take effect. The “Last updated” date at the top reflects the most recent revision. Continued use of Dormeet after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@dormeet.com
• Support: support@dormeet.com

© 2026 Dormeet. All rights reserved.