Privacy Policy
Last updated: March 2025
At Roof, we believe your data is yours. Here’s exactly what we collect, why, and what we do with it.
Who we are
Roof (“we”, “us”, “our”) is a housing listing aggregator operating in the Netherlands.
Email: [email protected]
Website: getroof.app
What we collect
Account information
When you sign up, we collect your name, email address, and authentication data (if you use Google or Apple login).
Search preferences
City, budget range, housing type, and move-in date that you set in the app.
Usage data
How you interact with the app: which listings you open, notifications you click, and features you use. This helps us improve the product.
Device data
Device type, operating system, and app version. Never your location.
What we do NOT collect
- Your location or GPS data
- Payment or financial information
- Any data from the housing portals you visit after clicking a listing
- Biometric data of any kind
Why we collect it
We use your data to:
- Send you relevant listing alerts
- Match listings to your preferences
- Improve the accuracy of our search
- Send transactional emails (welcome, alerts, account notifications)
- Comply with legal obligations
We do not sell your data. Ever.
We do not use your data for advertising.
Who we share it with
We use a small number of trusted services to operate Roof:
- Supabase — database and authentication
- Resend — email delivery
- Vercel — hosting
All providers are GDPR compliant. We do not share your data with housing portals, landlords, or third-party advertisers.
How long we keep it
We keep your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days.
Usage logs are retained for 90 days for debugging purposes, then deleted.
Your rights (GDPR)
You have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent at any time
- Lodge a complaint with the Dutch Data Protection Authority (AP) at autoriteitpersoonsgegevens.nl
To exercise any of these rights, email us at [email protected] and we’ll respond within 30 days.
Cookies
We use only essential cookies required to keep you logged in. We do not use tracking or advertising cookies.
Changes to this policy
If we make significant changes, we’ll notify you by email before they take effect.
Questions? Email [email protected]