Privacy Policy

THE RUMII CO PTY LTD, TRADING AS RUMY · Last updated: 2 September 2026

THE RUMII CO PTY LTD (ABN 67 698 338 813) (“RUMY”, “we”) operates the RUMY app, r-u-my.com and rumy.online. This policy explains what we collect, why, and your choices. We handle personal information in line with the Australian Privacy Principles (Privacy Act 1988).

What we collect

• Account: name, email and/or phone number (for sign-in), profile photo.
• Profile: bio, occupation, suburb, lifestyle/compatibility answers, interests, and any optional details you add.
• Listings (if you list a room): room details, photos, house info.
• Usage: matches, messages, in-app actions, and device identifiers.
• Reviews & outcomes: peer reviews you give and receive, and whether a match led to living together (move-in confirmations, check-ins, move-out dates).
• Purchases: subscription/purchase status (processed by Apple, Google, RevenueCat and Stripe — we don’t store card numbers).
• Diagnostics: crash and performance data.
• Waitlist (this website, historical): this website previously collected waitlist email addresses (with a source tag, the referring page and your browser’s user-agent string) and no longer does. Addresses already collected are kept and used only as this policy describes. Ask us to delete yours at ted@r-u-my.com.

Location

We use the suburb you provide to show nearby rooms. We do not collect precise GPS location.

How we use it

To create your profile, generate compatibility matches, enable discovery and messaging, process subscriptions, keep RUMY safe, and improve the app. We match on lifestyle and habits — never on sensitive personal attributes, which are used only for self-expression and are never used to rank, filter or score people.

Sharing & overseas disclosure

We don’t sell your data. We share only with service providers that run RUMY on our behalf: Supabase (database, sign-in and file storage — Singapore, our primary data store), Anthropic (AI processing in the United States: photo moderation, listing scam-screening, onboarding assistance and match-explanation text — never your chat messages or your consent-gated sensitive fields), Stripe + RevenueCat + Apple/Google (payments), Vercel (web hosting), Expo (push notifications and app-update checks), Resend (transactional email), PostHog (analytics), Sentry (crash reporting), and Cloudflare (bot protection on web sign-in). Apart from Supabase in Singapore, these providers are in the United States.

Our primary data store is Supabase in Singapore (AWS ap-southeast-1) — RUMY does not claim Australian data residency. By using RUMY you acknowledge that your information is disclosed to these overseas recipients; we take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles. We may disclose where required by law or to protect users’ safety.

Security & retention

Data is encrypted in transit; we keep it while your account is active and delete it on request.

Your choices

You can edit your profile, control visibility, browse privately, and delete your account in-app (Profile → Account), which removes your personal data. You can request access or corrections at ted@r-u-my.com.

Age

RUMY is for users 18+.

Changes

We’ll post updates here and adjust the “last updated” date.

Contact

ted@r-u-my.com · THE RUMII CO PTY LTD (ABN 67 698 338 813), 7 Bourne Road, Glen Iris VIC 3146, Australia.