Common Room Logo

Privacy Policy

Last updated: 29 December 2025

1. Overview

  1. We respect your privacy and comply with applicable laws. This policy explains:
    • what data we collect;
    • why we collect it;
    • who processes it; and
    • your rights.
  2. This policy applies to users worldwide. Depending on where you live, additional privacy rights may apply under local law.
  3. This app is not intended for use by children under the age of 18.
  4. We are the data controller for personal information processed through the app.

2. Information we collect and process

  1. We collect and process:
    • information you provide;
    • account details (via authentication provider);
    • messages and content you enter into the app;
    • subscription status (via app stores);
    • automatically collected information;
    • device and app usage data; and
    • basic analytics and error logs
  2. Our legal basis for processing includes:
    • providing the service;
    • your consent; and
    • legitimate interests in operating and improving the app.

3. How we use your data

  1. We use your data to:
    • provide and operate the app;
    • authenticate users;
    • process subscriptions;
    • improve reliability and features; and
    • meet legal obligations.
  2. We do not sell or provide access to your data to third parties, other than in accordance with the uses noted above.

4. Third-party processors

  1. We rely on trusted third parties to operate the service:
    • OpenAI – processes user-submitted content to generate app responses;
    • Clerk – authentication and account management; and
    • Apple App Store / Google Play – subscription and payment processing.
  2. These providers process data under their own privacy policies and security standards.

5. International data transfers

  1. Service providers process data outside New Zealand. We take reasonable steps to ensure appropriate safeguards are in place.

6. Data retention

  1. We retain data as long as needed to operate the service or meet legal requirements. You may request deletion of your data, subject to legal and technical limits.

7. Your rights

  1. You have the right to:
    • know what personal information we collect and why;
    • request access to, correction of or deletion of your personal information;
    • restrict or object to certain processing;
    • request a copy of your personal information in a portable format;
    • withdraw your consent at any time; and
    • complain to a relevant data protection authority.
  2. You can contact us to exercise these rights.
  3. If you are located in New Zealand, you may complain to the Office of the Privacy Commissioner.
  4. If you are located in the European Union or United Kingdom, you may also lodge a complaint with your local data protection authority.
  5. We do not sell or share personal information as defined under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). California residents may request access to or deletion of their personal information by contacting us.

8. Security

  1. We use reasonable technical and organisational measures to protect your data. No system is completely secure, and you use the app at your own risk.

9. Changes

  1. We may update this policy from time to time.

10. Contact

  1. Privacy questions can be sent to: privacy@findcommonroom.com.