Last updated: October 17, 2026

1) Introduction

At RoomiGro, we respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, store, and share your data when you use the RoomiGro website and applications (iOS and Android), including third-party services such as the Kashier online payment gateway, App Store purchases on iOS, Firebase Cloud Messaging, Google AdMob for in-app advertising, WhatsApp-based verification providers (such as Wasage and/or Meta WhatsApp Cloud API), and SMS providers (such as Mocean).

By using the website or application, you agree to the practices described in this policy.

2) Data We Collect

  • Account data: name, email address, phone number, and password (stored hashed).
  • Profile and content data: photos, bio, preferences and lifestyle information, city/governorate (user-entered; not GPS location), in-platform messages, ratings, room listings, and roommate profile data.
  • Reports and blocks: when you use “Report or block”, we store the reason, the optional note, the reporter and the reported user, the place (chat, room, or roommate profile), the review status, and who you have blocked. You can see your reports and the people you blocked, and unblock them, from the Contact Us page.
  • Subscription and payment data: subscription requests, package, amount and currency, payment status, the selected payment method (online, manual, or an App Store purchase on iOS), transaction number or payment reference, payment time, and your payment attempts history (successful, failed, or incomplete attempts and the failure reason, if any).
  • App Store purchases on iOS: the product identifier, Apple’s transaction identifier, and the purchase result, used to activate the package. Payment is completed inside the App Store, and we do not receive your card details from Apple.
  • Online payment data received from the payment gateway: the transaction result, the gateway transaction number, the payment method type (bank card or mobile wallet), and masked card details only when available (such as card brand and last four digits).
  • Manual payment data: the selected manual payment method, transfer reference, and the payment proof images/files you upload.
  • Verification and security data: OTP codes, verification status, login records, IP address, browser/device type, and verification logs for payment notifications.
  • App and notification data: push device tokens (FCM), platform type (iOS/Android), notification badge-related data, and presence/online status when using chat.
  • On-device storage: such as session/auth tokens stored locally on the device.
  • Usage data (mainly website): pages visited, usage duration, and traffic sources when analytics tools are enabled on the website.
  • In-app advertising data (Google AdMob): advertising identifiers, ad impression/interaction data, technical device information, and approximate location inferred from IP address when applicable, as described in the advertising section below.
  • Technical data: cookies on the website, session identifiers, and error logs.

What we do not collect: we never receive or store your full card number, security code (CVV), card expiry date, your mobile wallet PIN or password, or bank verification codes (OTP/3-D Secure). This information is entered directly on the payment gateway’s secure payment page.

3) How We Use Data

  • Creating, managing, and authenticating accounts.
  • Identity verification and phone/email confirmation.
  • Operating core services (rooms, roommates, chat, notifications).
  • Showing online/offline presence to other users during chat when applicable.
  • Creating online payments, automatically confirming their result, and activating your subscription as soon as the payment succeeds.
  • Reviewing manual payment proofs and approving or rejecting them.
  • Showing your payment details and payment attempts history on the order page in the website and app.
  • Sending emails and notifications related to your account, messages, rooms, or order and payment status (such as payment confirmation, subscription activation, or proof rejection), and alerting administrators about new orders and payments.
  • Account recovery (forgot password).
  • Improving performance and user experience.
  • Showing in-app ads via Google AdMob to non-paid subscribers and measuring ad performance.
  • Preventing fraud/abuse and protecting platform security, including limiting repeated payment attempts.
  • Receiving user reports for administrator review, hiding profiles, rooms, and chats when someone is blocked, and letting you unblock later.
  • Activating packages purchased from the App Store on iOS.
  • Complying with legal and accounting obligations.

4) Photos and App Permissions

The app may request notification permission on first launch to deliver chat, room, and subscription alerts. On iOS, the app may also request App Tracking Transparency (ATT) permission to deliver personalized ads via AdMob; you may decline and continue using the app. For profile photos, room photos, and payment proofs, we typically use the system photo picker with optional cropping, without requiring full photo-library access in most modern OS flows. For your profile photo you can also take a picture with the camera. Camera permission is requested only at that moment, when you tap the camera button, not when the app opens, and we do not use the camera in the background.

When you choose online payment in the app, the payment gateway’s payment page opens in a secure in-app browser (such as Chrome Custom Tabs or Safari), and the app cannot read the information you enter on that page.

5) Online Payments via Kashier

We use the Kashier payment gateway to process online payments by bank card and mobile wallet. When you choose online payment:

  • Data we send to Kashier: the order number, package description, amount and currency, display language, your email address, and an internal account reference, in order to create the payment, send its receipt, and prevent fraud.
  • Payment details you enter: card or wallet details are entered directly on Kashier’s secure payment page, are subject to card security standards (PCI DSS) and additional verification (3-D Secure) when required, and never reach us.
  • Data we receive from Kashier: the transaction result (successful/failed), transaction number, payment method type, masked card details when available, and the decline reason if the payment fails.
  • Confirmation and security: we verify the result of every payment using digitally signed notifications from Kashier and by querying the gateway directly before activating a subscription.

Payment data is processed by Kashier under its own privacy policy and terms: kashier.io

App Store purchases on iOS

On the iOS app, paid packages are purchased through the App Store (Apple). Apple processes the payment and the card details under its own policies. We do not receive your card number or security code. We receive only what is needed to activate the package, such as the product identifier, the transaction identifier, and the purchase result. Purchase confirmation may be processed by our in-app purchase provider, which receives the account identifier and the transaction result, not card data. Refund requests for Apple purchases are handled by Apple.

6) Manual Payments and Payment Proofs

If you choose a manual payment method, we ask for the transfer reference and a payment proof image. Only authorized administrators access the proof to review and approve or reject the payment, and it is kept as part of the payment records.

7) Firebase Cloud Messaging and Google Services

We use Firebase Cloud Messaging (FCM) to deliver push notifications to iOS and Android devices. Device tokens and related delivery data may be processed by Google/Firebase. On the website we may also use Google reCAPTCHA to protect forms from automated abuse, and Google Analytics/Google Tag Manager to analyze usage when enabled. This processing follows Google’s Privacy Policy:

Google Privacy Policy

More than one device may be linked to the same account. When you log out from a specific device, we aim to remove that device’s token so it stops receiving your push notifications.

8) In-App Advertising (Google AdMob)

We may show ads inside the RoomiGro iOS and Android apps to users who do not have an active paid subscription (guests and free-package users only). Users with an active paid subscription do not see these ads. Ads are served by Google AdMob and Google’s advertising network. We may also show a rewarded ad that unlocks chat for a period after you watch it; that ad is processed by AdMob in the same way.

Data that may be processed for advertising:

  • Advertising identifiers (such as IDFA on iOS after you grant App Tracking Transparency permission, and GAID on Android).
  • Advertising data and ad interactions (impressions, clicks, ad format).
  • Technical device and app information (device model, OS, app version, language).
  • Approximate (coarse) location, typically inferred from IP address for ad targeting—not precise GPS location. RoomiGro does not request precise location permission for ads.
  • Usage and diagnostics-related data used to serve and measure ads.

How we use it: to display third-party ads, personalize ads where allowed, measure ad performance, and prevent advertising fraud or abuse.

Tracking on iOS: on Apple devices we may request App Tracking Transparency (ATT) permission. If you decline, we may still show non-personalized ads without using the advertising identifier for cross-app tracking.

Your choices / ad-free access: you can limit ad personalization in your device privacy settings, or subscribe to a paid package for ad-free browsing in the app.

Advertising data is processed under Google’s policies, including:

9) WhatsApp and SMS Verification

We may use WhatsApp-based verification (Wasage and/or Meta WhatsApp Cloud API) or SMS (such as Mocean) to send verification codes (OTP) or for password recovery. Data such as phone number, verification message content, send time, and delivery status may be processed.

Processing follows the provider’s policies, which may include:

We do not use OTP messages for marketing without your explicit consent.

10) Legal Basis for Data Processing

  • Performance of a service/contract (including payment processing and subscription activation).
  • Explicit consent (where required, such as analytics and advertising tools).
  • Legal obligation (such as keeping financial records).
  • Legitimate interest (such as platform security and payment fraud prevention).

11) Sharing Data with Third Parties

  • The online payment gateway (Kashier) and its related financial institutions, to complete payments.
  • Hosting, file-storage, and email service providers.
  • Verification/communication providers (such as Wasage and/or Meta/WhatsApp and Mocean).
  • Notification providers (such as Google/Firebase).
  • In-app advertising networks (Google AdMob / Google) to serve, measure, and protect ads.
  • Website security, analytics, and advertising providers when enabled (such as Google reCAPTCHA, Google Analytics, and Meta Pixel).
  • Apple / the App Store to complete in-app purchases on iOS, and our in-app purchase confirmation provider to activate the package, without receiving card details.
  • Legal/regulatory authorities when legally required.

We do not sell your personal data to third parties.

12) Data Retention

We retain your data only as long as necessary to provide the service and fulfill the purposes above, or to comply with legal obligations. Retention periods vary by data type; for example, we keep payment records, payment attempts, payment proofs, and payment-gateway notification logs for as long as required for accounting, legal, dispute-handling, and fraud-prevention purposes.

13) Data Protection

  • HTTPS encryption.
  • Hashed password storage.
  • Encrypted storage of payment-gateway keys, and digital-signature verification of every payment notification before it is accepted.
  • No storage of full card data or secret wallet credentials on our servers.
  • Access control, so that payment records, payment proofs, and user reports are only accessible to authorized administrators.
  • Security monitoring and audit logs.
  • Rate limiting of OTP requests and repeated payment attempts, and abuse prevention.

14) Your Rights

  • Access your data.
  • Correct your data.
  • Delete your data.
  • Restrict or object to processing.
  • Withdraw consent (where applicable).
  • Data portability (where applicable).

Contact: info@roomigro.com

15) Account and Data Deletion

You can delete your account yourself at any time via:

  • On the RoomiGro website: Account menu → Delete account, or Edit profile → Delete account tab (open the delete-account page). Eligibility is checked first. If you still have rooms, you need to delete them before the account can be deleted. An unpaid pending order can be cancelled. An active free package can be cancelled from your subscription requests, with a notice that a free package is granted only once and cannot be subscribed to again after cancellation. An active paid subscription cannot be cancelled inside RoomiGro and must run until it ends. After those items are resolved, you confirm deletion with your password.
  • In the RoomiGro mobile app: Account/Profile menu → Delete account, with the same eligibility checks and password confirmation.
  • Or via the Contact Us page.
  • Or by emailing info@roomigro.com.

When account deletion is confirmed, we immediately revoke access (including website sessions and mobile app access), delete or deactivate your profile and account login data, and invalidate related push-notification tokens.
We may retain limited data only for as long as necessary where legally required or for legitimate security purposes (such as online and manual payment records, transfer proofs, or security and fraud-prevention logs), and we do not use retained data for other purposes. The payment gateway and Apple also keep records of transactions processed through them in accordance with their own policies and legal obligations. We may keep safety reports needed to review abuse for the necessary period, even after account deletion, and only to the minimum extent required.

16) Cookies

We use cookies on the website to run sessions, remember preferences, protect forms, and analyze usage. Enabled third-party tools (such as Google Analytics and Meta Pixel) may set their own cookies. You can manage cookies in your browser; disabling them may affect some features such as signing in and payments.

17) Children’s Privacy

The service is not intended for children under 13. We do not knowingly collect children’s data, and will delete it if discovered.

18) International Data Transfers

Data may be processed in different countries through trusted providers (such as Google/Firebase, verification providers, or the payment gateway). We implement appropriate safeguards for cross-border transfers.

19) Changes to This Privacy Policy

We may update this policy from time to time. Updates will be posted on this page with a revised “Last updated” date.

20) Contact

Email: info@roomigro.com