Privacy Policy

1. Who this policy covers

This policy applies to anyone who creates an account or browses FlatJugaad ("we", "us"), a platform for finding flatmates and rooms in India. It's governed by the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000 along with its associated rules.

2. Information we collect

Account and profile: name, phone number, email, date of birth, gender, city/locality, and the lifestyle and compatibility answers you fill in.

Verification data: if you complete identity verification, we process the minimum data returned by our KYC service provider (a match confirmation and a verified badge) rather than storing your Aadhaar number or document images ourselves.

Listings and messages: adverts you post, and the messages you exchange with other users through in-app chat.

Location: the locality or sub-area you select for a listing, used to place a marker on a map. We don't collect continuous or background location.

Device and usage data: basic analytics (pages viewed, actions taken) and crash/error reports, collected automatically to keep the product working.

3. How we use your information

To create and run your account, show your profile and listings to other users, and power compatibility matching.

To verify identity where you choose to complete that step, and to run safety checks (moderation, reports) described in the Safety Centre.

To send you account, safety, and transactional notifications by email or in-app.

To fix bugs and understand product usage, through error monitoring and product analytics.

4. Who we share it with

We do not sell your personal data. We share the minimum necessary data with:

Supabase, our database and authentication provider, which stores your account and listing data.

A licensed KYC service provider, only if you choose to verify your identity.

Amazon SES, to deliver account and notification emails.

PostHog and Sentry, for product analytics and error monitoring, on an aggregated/pseudonymised basis where possible.

Other users, limited to what your profile and listing choose to show — your phone number and email stay hidden until you both agree to talk.

Law enforcement or regulators, only where legally required.

5. How long we keep it

We keep account and listing data for as long as your account is active, and for a limited period after deletion to handle disputes, safety reports, or legal obligations. Verification confirmations are kept only as long as needed to maintain your verified badge.

6. Your rights

Under the DPDPA, you can access the personal data we hold about you, ask us to correct it, withdraw consent, and request erasure of your account and data (subject to what we're legally required to retain). You can also nominate someone to exercise these rights on your behalf in the event of death or incapacity.

To exercise any of these, contact us using the details below, or use the deletion option in your profile settings where available.

7. Security

We use industry-standard measures — encrypted connections, access controls, and row-level security on our database — to protect your data. No system is completely secure, and we'll notify affected users and the Data Protection Board where required if a breach occurs.

8. Children's privacy

FlatJugaad is for users 18 and older. We don't knowingly collect data from anyone under 18; if we learn we have, we'll delete it.

9. Cookies

We use essential cookies to keep you signed in and remember preferences (like theme), and analytics cookies to understand product usage. See the cookie banner on your first visit for details.

10. Grievance Officer

[Placeholder — required under Indian law] Name: ________. Email: privacy@flatjugaad.example. Address: ________, India. We aim to acknowledge grievances within 24 hours and resolve them within 15 days.

11. Changes to this policy

We'll post any changes here with an updated date below. Material changes will also be notified in-app.

12. Contact us

Questions about this policy: privacy@flatjugaad.example.