Privacy

Your email address, and the profile you build: name, age, gender, the city and areas you want to live in, your budget, interests, and how you describe your habits at home. Optionally a phone number, photos, and which university you attend.

If you connect a calendar, we receive only the times you are busy — never event titles, attendees, locations or descriptions. We request a permission scope that cannot return them.

Your profile decides who you are matched with. That is the whole purpose of the service, and it is the processing you should understand best: the algorithm compares your city, budget, habits and interests against other people's and chooses two matches for you a day.

Busy times are used once, to suggest a slot for an intro call. Your email is used to sign you in and to tell you about your account.

People you are matched with see your name, age, gender, life stage, university if you gave one, budget range, preferred areas, interests, how you described your habits, and your photos.

They never see your email address, your phone number, how you have tuned your own matching preferences, or whether you have set a gender filter.

We strip location data from every photo you upload before storing it. Phone photos routinely contain GPS coordinates, which would otherwise reveal where you live. Photos are screened automatically before they are stored, and are only served to signed-in users.

In the United Kingdom. Our database and file storage are hosted in a UK region. If you opt in to usage data, that goes to PostHog's European servers.

If you tick the optional box when you sign in, we send PostHog — our analytics provider, hosted in the EU — a record of things you do here: signing in, completing your profile, receiving matches, arranging a call. We use it to work out which parts of the product actually help people find a flatmate.

We never send your messages, your bio, your photos or anything you have told us about your sexual orientation. Events about a match are sent without either person attached to them, so they cannot be traced back to you.

This is off unless you turn it on, and nothing about the service changes if you leave it off. Deleting your account deletes your usage data too.

Your profile for as long as your account exists. A match that goes nowhere expires after seven days. Sign-in links expire after fifteen minutes and are stored hashed, never in a readable form.

You can download everything we hold about you, and delete your account and all of its data, from your account page. Deletion is immediate and permanent — we do not keep a hidden copy.

You can edit or correct your profile at any time, and withdraw consent for optional processing without losing your account.

You can block or report anyone you are matched with. Blocking is immediate and works in both directions — they will not see you either, and you will never be matched again. Reports go to our safety team.