Privacy Policy

Last updated: March 2025

At Roof, we believe your data is yours. Here’s exactly what we collect, why, and what we do with it.

Who we are

Roof (“we”, “us”, “our”) is a housing listing aggregator operating in the Netherlands.

Email: [email protected]
Website: getroof.app

What we collect

Account information

When you sign up, we collect your name, email address, and authentication data (if you use Google or Apple login).

Search preferences

City, budget range, housing type, and move-in date that you set in the app.

Usage data

How you interact with the app: which listings you open, notifications you click, and features you use. This helps us improve the product.

Device data

Device type, operating system, and app version. Never your location.

What we do NOT collect

  • Your location or GPS data
  • Payment or financial information
  • Any data from the housing portals you visit after clicking a listing
  • Biometric data of any kind

Why we collect it

We use your data to:

  • Send you relevant listing alerts
  • Match listings to your preferences
  • Improve the accuracy of our search
  • Send transactional emails (welcome, alerts, account notifications)
  • Comply with legal obligations

We do not sell your data. Ever.

We do not use your data for advertising.

Who we share it with

We use a small number of trusted services to operate Roof:

  • Supabase — database and authentication
  • Resend — email delivery
  • Vercel — hosting

All providers are GDPR compliant. We do not share your data with housing portals, landlords, or third-party advertisers.

How long we keep it

We keep your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days.

Usage logs are retained for 90 days for debugging purposes, then deleted.

Your rights (GDPR)

You have the right to:

  • Access the data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent at any time
  • Lodge a complaint with the Dutch Data Protection Authority (AP) at autoriteitpersoonsgegevens.nl

To exercise any of these rights, email us at [email protected] and we’ll respond within 30 days.

Cookies

We use only essential cookies required to keep you logged in. We do not use tracking or advertising cookies.

Changes to this policy

If we make significant changes, we’ll notify you by email before they take effect.

Questions? Email [email protected]