Privacy Policy
요약(한국어): 메이티는 하우스메이트 매칭에 필요한 정보만 수집하고, 보여주기로 한 상대에게만 보여 주며, 판매하지 않습니다. 쿠키와 분석·광고 추적은 쓰지 않습니다. 앱의 프로필 탭에서 계정을 삭제할 수 있고, 방을 올리는 분이 입력하는 하우스메이트 정보는 당사자의 동의를 받아야 합니다. 개인정보 문의는 support@mateyhq.com 로 보내 주세요. 아래 영어 원문이 효력을 가집니다.
The short version: we collect what the app needs to match you with housemates, we show it only to the people you are showing it to, we do not sell it, and you can delete your account and what is keyed to it from inside the app.
What we collect from you
Account: your email address, display name and password — the password is stored only as a one-way hash by our sign-in provider, so nobody can read it back. Profile: the answers you give — occupation and an optional detail line, age band, gender, languages, lifestyle tags, and nationality if you choose to give it. Intent: your monthly budget and preferred areas. Rooms you post: the room's details and description, the photos you upload, what you write about the people already living there (see below), for an agent the name, registration number and agency details shown on the listing, and the room's location — you type a Singapore postal code, which places the room on the building it names, or set the pin on a map yourself; we store that point privately (see "Who can see what"), not the postal code or the address. Conversations: the messages you send, and the viewings you arrange in them — the time, the meeting place and any note. Community: the posts, comments and replies you write, the topic and area you file them under, and the posts you like. Household: if you create or join one, its name, the members' names, the expenses and repayments recorded in its ledger and how they are split, and the notices posted on its board. Rooms you save. Safety: reports you file and people you block. Sign-up: which documents you accepted, at which version, and when. Email you send to support@mateyhq.com. Technical: like any website, the services that host Matey record each request — IP address, browser or device type and time — in short-lived logs used for security and fixing faults.
What we do not collect
No device location — the map shows where listings are, not where you are. No contacts, no photo library beyond the images you pick yourself, no advertising identifiers, and no third-party analytics, tracking SDKs or advertising cookies. We do not build a profile of you across other apps or websites.
Why we collect it
Occupation, age band, languages and lifestyle tags are compared with the people already living in a room to compute your match stars. Gender is compared only with a gender preference a room states, and a mismatch lowers the stars rather than hiding the room. Budget and preferred areas also feed the stars, and with them the order rooms are shown in. A question you leave unanswered counts as neutral, not as a mismatch. Nationality is optional: it is kept on your own profile for you to see, is not used for matching or search, and is never shown to others; you can clear it at any time in Profile. A room's details, photos and location are there to show the room to people looking for one; conversations, viewings, Community and the household ledger and notice board exist to provide those features. Your email address and password exist to sign you in. We also use your email address for service messages: a password reset you asked for, and a note when someone first asks about a room you posted. We send no marketing email. Reports exist so we can act on them; each one is emailed to our operations inbox. We use your data only for these purposes, which you agree to by signing up.
Who can see what
Anyone, with or without an account, can see the rooms you post — everything on the listing, including its photos, the housemate descriptions and an agent's details. For the room's location, the listing carries only an approximate area, within about 250 metres, and that is all anyone sees on the map or opens in a maps app. The exact point is stored separately, where only you can read it; it is given to the other person only once you have both confirmed a viewing, for directions. Signed-in users can read Community, where your posts and comments appear under your display name, or under an anonymous handle if you post anonymously. The handle is random and the same on all your anonymous posts and comments, so they can be told apart from other people's but not traced to you. Anonymous means anonymous to other users only: the post is still tied to your account, we can see who wrote it, and Report, Block and the content filter apply to it. Blocking someone through an anonymous post hides their anonymous posts and comments from you and reveals nothing else about them. When you ask about a room, the person who posted it sees your display name, the messages you send and the viewings you arrange. Members of a household you join see your name, its ledger and the notices on its board. Nobody else sees your profile answers — occupation, age band, gender, languages, lifestyle tags, nationality — nor your email address, budget, preferred areas, saved rooms, or anything you have reported or blocked. Blocking someone is enforced on our server too: they can no longer message you, start a conversation on your rooms, or arrange a viewing with you, and they are not told. Access is enforced on the server, row by row, not just hidden in the app. Photo files are the exception to that check: an uploaded image is served from a plain picture URL, so anyone holding the exact link can open it without signing in. Those links are only shown inside the app, and the files cannot be listed or searched from outside it.
Housemates you describe on a listing
If you post a room, you can describe the people already living there. That is information about someone else, so it is yours to get right: add a housemate only with that person's consent, and only what they are comfortable having shown. We store only the first letter of their name — the app sends just the initial, and our server cuts anything longer down to it — with their occupation and an optional detail line, age band, languages and lifestyle tags. All of that is shown on the listing to anyone who views it. A person described this way can ask us to correct or remove the entry at support@mateyhq.com, and we act on that request without needing the poster's agreement. Entries added without the person's consent break the Community Rules and are removed.
Where it is stored
On Supabase infrastructure in the Singapore region (ap-southeast-1), which runs the database, file storage and sign-in for the app. Some of the service providers listed below handle data outside Singapore, for example in the United States; we use providers that commit by contract to protect the data they handle for us to the same standard as this policy, or a higher one.
How long we keep it
Until you remove it. Where the app offers you a delete action it deletes the record rather than hiding it. Deleting a conversation takes its messages and any viewing arranged inside it along with it. Deleting a room takes the listing and its photos down for everyone; conversations about it stay with the people in them, and its upcoming viewings are cancelled. Deleting a community post takes its comments and likes with it. Deleting your account removes the account and what is keyed to it: your profile, your listings and their photos, saved rooms, the conversations you started with their messages and viewings, the messages you wrote in conversations other people started, your community posts, comments and likes, your household memberships and the notices you posted, your blocks, the reports you filed, and the consent record from your sign-up. Photos are files in storage rather than rows in the database, so deleting the account deletes them through a separate step before the account itself goes, and their links stop working. Three things do not go with it, and we would rather say so than let you assume otherwise. In a conversation someone else started about your room, they keep their own messages and any viewing arranged in it, because that is their record too. A report someone else filed about you is kept, because a deletion that erased the safety record would make the Report button worthless. And entries in a shared household ledger stay with that household: an expense is a record between several people, and taking your half of it away would quietly rewrite what your roommates owe each other. Your name comes off them — what remains is an entry the others see attributed to a former member — and the ledger goes in full when the last member leaves the household. Deleted records are erased from the database and file storage, not archived, with one exception: every night at 02:10 Singapore time we copy the database into a snapshot that the app and its API cannot reach, kept only to recover from a fault, and each snapshot is dropped after seven days. Anything you delete — a deleted account's email address and display name included — can therefore remain in those snapshots for up to seven days. Photo files are not in them. Request logs are kept by the hosting services only for days, and email to support@mateyhq.com for as long as it takes to deal with it. We keep nothing longer because a law requires it.
Service providers and transfers abroad
We do not sell personal data, share it with advertisers, or use it to train models, and we give it to no one else except where the law requires. These providers handle some of it on our behalf, each only for the job named, for as long as that job needs, under their own data-protection terms. Supabase, Inc. (supabase.com) — the database, file storage and sign-in: everything listed under "What we collect", stored in Singapore. Vercel Inc. (vercel.com, United States) — hosts the website and the web app: request logs. Resend (resend.com, United States) — delivers the emails Matey sends, including the new-inquiry notice to a room's poster and the report alert to our operations inbox: the recipient's address and the email itself. Singapore Land Authority's OneMap (onemap.gov.sg, Singapore) — draws the maps, and turns the postal code you type when posting a room into the building's position. The postal code is the only thing that lookup sends, and it goes from our server, so it reaches OneMap without your IP address or your account; the map tiles load straight from OneMap, as described below. Cloudflare, Inc. (cloudflare.com, United States) — runs our domain and forwards email sent to support@mateyhq.com: that email. Google LLC (Google Fonts and gstatic, United States) and jsDelivr (jsdelivr.com) — deliver fonts and program files to the website and web app. If you tap Directions, the point is handed to Google Maps or Apple Maps, which open under their own terms. Loading a font, a file or a map tile sends that provider your IP address and what is being loaded, the way loading any image from the internet does — and nothing else: no name, no email, no account id, nothing you searched for. Data reaches these providers over encrypted connections at the moment you use the feature. They are part of how Matey works, so the way to refuse the transfer is not to use the service, or to delete your account; fonts and map tiles can also be blocked in your browser, at the cost of how the pages look.
Cookies and similar storage
Matey sets no cookies. If you switch the website's language, your browser remembers the choice in its local storage; if you sign in to the web app, your browser keeps you signed in the same way, and the iPhone app keeps your session on the device. That storage is needed for the thing you asked for, stays on your device, and is not used to track you. Clearing your browser's site data removes it. If we ever want to add storage that is not needed in this way, such as analytics, we will ask you first.
Keeping it safe
Connections to Matey are encrypted, stored data is encrypted by our database provider, passwords are kept only as one-way hashes, and access rules on the server decide row by row who can read what. If a breach affects your data in a way the law requires us to report, we will tell you and the regulator.
Your choices and rights
Edit your profile answers from the Profile tab at any time, and delete your account from there too. You can ask us what personal data we hold about you and how it has been used, ask us to correct it, or withdraw your consent — write to support@mateyhq.com and we reply within 30 days. Withdrawing consent to the data the service needs means closing the account, and we will tell you what that removes before we do it. There is no marketing email and no mailing list, so there is nothing to opt out of: apart from replies to email you send us and notices about your account, the only email Matey sends you is a password reset you asked for and a note when someone first asks about a room you posted.
Children
Matey is for people aged 18 and over. We do not knowingly collect data from anyone younger, and we remove such accounts when we find them.
Changes to this policy
If we change it, the version number and the effective date at the top of this page change with it, and the version you accepted is kept on record against your account. That line is how you tell whether the wording you agreed to has moved since you agreed to it. This version took effect on 9 November 2026.
Contact and complaints
Privacy questions and data requests go to our data protection officer at support@mateyhq.com. If you are not satisfied with our answer, you can complain to Singapore's Personal Data Protection Commission (pdpc.gov.sg). Under Korean law you can also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, call 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).