Privacy Policy

WeFlat ("we", "us", "our") operates the WeFlat mobile application and website at weflat.de. We help people find flatmates, rooms, and connect through community events.

For questions about this policy, contact us at: privacy@weflat.de

Information you provide:

• Name, age, and profile photo
• Bio, interests, and lifestyle preferences
• Listings you post (rooms, events)
• Messages sent through the app
• Email address (for account creation)

Information collected automatically:

• Device type and operating system
• App usage and interaction data
• Approximate location (city level, never precise GPS without permission)
• Crash reports and performance data

We use your data to:

• Provide and improve our matching and event features
• Show your profile to other users looking for flatmates or event attendees
• Send you notifications about matches, messages, and activity
• Keep the app safe by detecting fraud and abuse
• Comply with legal obligations

We do not sell your personal data to third parties.

Your data is stored securely on Supabase servers located within the EU (Frankfurt, Germany), fully compliant with GDPR.

We use industry-standard encryption in transit (TLS) and at rest. Access to personal data is strictly limited to authorized team members.

Profile photos are stored in secure cloud storage. We regularly review and update our security practices.

As a user in the EU, you have the right to:

• Access – request a copy of all data we hold about you
• Rectification – correct inaccurate data at any time via profile settings
• Erasure – delete your account and all associated data from the app settings
• Portability – receive your data in a portable format
• Objection – object to certain types of processing

To exercise any of these rights, contact us at privacy@weflat.de or use the "Delete Account" option in the app.

We use the following trusted third-party services:

• Supabase – database and authentication (EU servers)
• Google Fonts – typography (no personal data transferred)
• DiceBear – avatar generation for placeholder images

Each third party has their own privacy policy and complies with applicable data protection laws.

We retain your data for as long as your account is active. When you delete your account, all personal profile data, listings, and messages are permanently deleted within 30 days.

Anonymised, aggregated analytics data may be retained longer for product improvement purposes.

We may update this Privacy Policy from time to time. We'll notify you of significant changes via the app or email. Continued use of WeFlat after changes means you accept the updated policy.