Privacy Policy

1. Information we process

• Account information: email address, account identifier, sign-in activity, username, display name, friend code, and an optional profile photo.
• Connections: friend requests, friendship status, and records of directory lookups used to limit abuse.
• Voice messages: the recordings you send, sender and recipient identifiers, duration, timestamps, and whether a message has been heard.
• Notifications: device push tokens and delivery records when you enable notifications.
• Technical information: connection and security logs that may include IP address, device or browser information, request times, and errors. If you send beta feedback or a crash report, we receive the information included in that report.
• Waitlist and support: your email and signup date when you join the waitlist, and information you choose to send when contacting us.

Microphone permission enables recording when you choose to record. Choosing a profile photo shares the selected image; it does not give other users access to your photo library. Room's friend-code flow does not require uploading your address book.

2. How we use information

We use this information to sign you in, maintain your profile, connect you with friends, store and deliver messages, send requested notifications and early-access emails, respond to support requests, prevent abuse, diagnose problems, and meet legal obligations.

Where a legal basis is required, we rely on performing our agreement with you for core service functions, legitimate interests for security and service reliability, legal obligations where applicable, and consent for optional activities where required. You can withdraw consent without affecting processing that occurred before withdrawal.

3. Who receives information

Your friends and people involved in friend requests can see the profile information provided by the service. Voice messages are intended for their sender and recipient. Sharing a friend code lets someone use it to request a connection.

We use Supabase for authentication, database, and file storage; Expo and Apple's notification services for iOS push delivery; and infrastructure providers for hosting and email delivery. These providers process the information needed to perform those services. If you use TestFlight and share feedback or diagnostics, Apple also processes that information under its own policies.

Where a live-room feature is enabled in a separate beta or version, LiveKit infrastructure processes live audio and connection information to connect participants, and participants receive your shared profile information. Live audio is distinct from stored voice messages. This feature is not included in the initial voice-message-only iOS release.

We may disclose information when required by law, to address abuse or protect safety, or as part of a business transfer subject to applicable safeguards. We do not sell personal information or use your recordings for targeted advertising.

4. Storage and security

Recorded voice messages and photos are stored on our service infrastructure, not only on your phone. Room is not an end-to-end encrypted messaging service. We use access controls and protected network connections, but no service can guarantee complete security. Recipients can retain copies outside Room.

Our company is based in the United States. Service providers may process data outside your country, where privacy laws may differ. Applicable international-transfer requirements must be met when transferring personal information.

5. Retention and deletion

Account information, connections, and stored messages remain while your account is active unless deleted. Listening to a voice message does not automatically delete it. Room does not currently apply a fixed automatic expiry period to voice messages.

You can initiate deletion in Settings > Delete account. The deletion process removes the account, profile, connections, push tokens, profile uploads, and stored messages associated with that account from active service storage. If deletion fails, retry or contact us. It does not remove copies made independently by recipients.

Waitlist records are separate from app accounts; contact us to remove a waitlist entry. Security logs, provider backups, and records needed for legal obligations may persist beyond active-account deletion according to applicable retention requirements and provider backup cycles. We do not promise instantaneous removal from every backup.

6. Your choices and rights

You can edit your name and photo in Room, manage microphone and notification permissions in device settings, and delete your account. Disabling notifications does not itself delete your account or stored information.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your information; restrict or object to processing; withdraw consent; and complain to a privacy regulator. Contact us to make a request. We may need to verify that you control the account, but will not ask for your sign-in code. We will respond in accordance with applicable law.

7. Website storage

The web app stores session information on your device to keep you signed in. The landing-page waitlist sends the email address you enter to our server. The current landing page does not include advertising trackers or a third-party analytics SDK. External links lead to services with their own privacy policies.

8. Children

Room is not intended for children under 13 or below the minimum age required in their country. If you believe a child has provided personal information in violation of these requirements, contact us so we can investigate and remove it where appropriate.

9. Updates

We will update this page when our practices change and provide notice of material changes where required. The date above identifies the latest revision.

10. Contact and requests

For support, privacy requests, or concerns about content or another user, contact Takeoff Labs LLC. Include your Room username and enough detail to identify the issue, but never send your sign-in code.

Email: rhai@takeoff-labs.com