Privacy

What we collect

Information you give us

• Account: your school email address, used to sign you in and to confirm you're a current student.
• Profile: first name, last name (private — only your last initial is shown), pronouns, gender, class year, major, bio and photos.
• Preferences: budget, neighborhoods, move-in date, lease length, housing type, roommate gender preference, lifestyle answers (sleep, cleanliness, noise, guests, smoking, drinking, pets, study habits), dealbreakers and how important each factor is to you.
• Messages and activity: intros, chat messages, groups, saved profiles, blocks and reports you file.

Optional connections

If you connect Spotify, we receive read-only access to your top artists and genres and your Spotify display name. We store the access tokens encrypted and never post anything or read your playlists.

Collected automatically

Basic technical information needed to run the service — when you were last active, session cookies that keep you signed in, and server logs (IP address, browser type) kept for security and abuse prevention. We don't use third-party advertising or tracking cookies.

How we use it

• To compute compatibility scores and rank matches for you and for other students.
• To deliver intros, messages and notifications you've turned on (in the app and by email).
• To keep Rumi safe: verifying students, detecting scams and abuse, and reviewing reports.
• To operate, secure and improve the service.

Who can see what

Other verified students at your school can see your first name and last initial, photos, pronouns, class year, major, bio, and the housing and lifestyle answers that drive matching, plus your compatibility score with them. They never see your email address, your last name, your notification and privacy settings, or who you've saved or blocked.

• Hide your profile any time in Settings → Privacy & safety. You'll disappear from matches and groups; existing chats keep working.
• Verified students only (on by default) limits your profile to students whose school email is currently verified.
• Blocking hides you from each other everywhere on Rumi and closes any chat between you.

A small team of Rumi moderators can access account information when reviewing reports or investigating abuse. Messages are only reviewed when they're reported or automatically flagged for safety.

Service providers

We share data only with providers that help us run Rumi, under contracts that limit how they use it:

• Supabase — database, authentication, file storage and real-time messaging.
• Vercel — application hosting.
• Our email delivery provider — sign-in codes and notification emails.
• Spotify — only if you choose to connect it.

We don't sell or rent personal information, and we don't share it with your school. We may disclose information if required by law or to protect someone's safety.

Retention and deletion

We keep your information while your account is active. When you delete your account (Settings → Delete account), we permanently remove your profile, photos, preferences, matches, saves, intros, direct messages, Spotify data and notifications. Messages you sent in a group chat are removed with your account. Server logs are kept for up to 30 days, and backups roll over within 30 days.

Your choices and rights

• Access and portability: download everything we store about you as a JSON file from Settings → Your data.
• Correction: edit your profile and preferences any time in Settings.
• Deletion: delete your account in Settings, or email us.
• Notifications: choose exactly which in-app and email notifications you receive.

Security

Data is encrypted in transit, row-level security rules ensure students can only read what they're allowed to, third-party tokens are encrypted at rest, and sign-in uses one-time codes instead of passwords. No system is perfect — if you notice something off, tell us.

Students and age

Rumi is for current ASU students who are at least 18. We don't knowingly collect information from anyone younger.

Changes and contact

If we make material changes we'll let you know in the app before they take effect. Questions or requests? Email support@rumimatch.app. See also our Terms.