RoomRadar Privacy Policy

This Privacy Policy describes what personal data RoomRadar collects, why, where it is stored, who can see it, and how you can control or delete it. It is written in plain language on purpose. Where a detail depends on a legal or operational fact we have not confirmed, we say so rather than guessing.

RoomRadar is a free app for discovering accommodation listings and for property owners to publish listings. RoomRadar does not process rental payments, deposits, subscriptions, or commissions (see §13).

1. Who we are

RoomRadar is built by THERUINS. THERUINS is the developer and brand responsible for the RoomRadar application and for the data practices described here.

• Support and privacy contact: support@theruins.in

THERUINS is not identified in this policy as a registered company, because that fact has not been confirmed. If a registered legal entity name, registered address, or registration number becomes applicable, this policy will name it. [Requires confirmation]

The services covered by this policy are the RoomRadar mobile application (Android package com.roomradar.roomradar) and the web pages served at roomradar.theruins.in, including the browser fallback page that renders a shared room link.

2. The data we collect, and why

2.1 Data you give us to create an account

Sign-in uses Google Sign-In through Supabase. RoomRadar receives the name and email that Google provides. RoomRadar does not receive your Google password.

2.2 Data owners provide to publish a listing

If you list a room, you provide:

• Room title, description, room type, occupancy, furnishing, gender preference;
• Monthly rent, deposit, and maintenance amounts;
• Full address, landmark, city, state, pincode, and the room's coordinates on a map;
• Availability and availability date;
• Contact phone number, and optionally a WhatsApp number and website through a business profile;
• Photographs of the room.

This data becomes public. Listings are published so other users can find them, and that is the purpose of providing it. The contact phone number is shown to users who enquire, and business contact details are shown on approved business profiles.

2.3 Data you create while using the app

2.4 Location data

RoomRadar requests location permission so it can:

• Show rooms on a map around you;
• Find rooms near you;
• Show turn-by-turn directions to a room you are tracking.

Facts you should know:

• Permission is requested only when you use a map, nearby, or navigation feature. You can search by text, city, and filters without ever granting location permission, and those features work fully without it.
• Both approximate and precise permission are requested (the app declares ACCESS_COARSE_LOCATION and ACCESS_FINE_LOCATION). The map and navigation features work better with precise permission; approximate permission is sufficient for the "rooms near me" list.
• Your device location is not stored. It is used in memory for the current session and is sent to Google only as the parameters of a Maps, Directions, or Places request needed to render that feature. There is no database table, analytics event, log entry, or shared link that contains your current location. Listing coordinates that appear on the map are the coordinates the owner published as part of the listing — not your location.
• RoomRadar does not track your location in the background or when the app is closed. Live navigation position is read only while the navigation screen is open and stops when you leave it.
• You can revoke location permission at any time in Android Settings → Apps → RoomRadar → Permissions, or by using the permission controls in the app. Revoking it does not affect your account or your saved rooms.

2.5 Data collected automatically

RoomRadar does not collect or send in any analytics event: your password, access tokens, your email (beyond what the account record itself requires), your phone number unnecessarily, your precise private location, or private owner information. Analytics events carry a pseudonymous internal user ID, not your email.

3. Where your data is stored

When you upload or delete a photograph, RoomRadar exchanges your verified Supabase session for a short-lived Firebase access token that is scoped to the specific listing you are editing. That token is issued only after the backend confirms you own the listing, and it carries your Supabase user ID rather than a separate identity.

4. When information becomes public

Be aware that the following are visible to anyone, not just to RoomRadar:

• Any listing you publish, including its address, coordinates, rent, and photographs;
• Your display name and profile photo;
• Reviews and ratings you write;
• Contact details you choose to publish on an approved business profile;
• A shared room link, which contains the canonical room URL (https://roomradar.theruins.in/room/{id}) together with the room title, city, rent, and room type. A shared link never contains your location, tokens, or account information.

5. How we use your data

• To operate the app: sign-in, listings, search, maps, saved rooms, enquiries, reviews.
• To show you rooms near you and routes to them (only with your location permission).
• To show aggregated statistics to listing owners (view counts, favorite counts).
• To serve advertising (see §7).
• To detect and prevent fraud, spam, tampering, and unsafe listings.
• To investigate reports and enforce the Community & Listing Guidelines.
• To respond to support, privacy, and legal requests.
• To fix crashes and improve stability.

We do not sell your personal data. Ad-supported measurement is described in §7 and is not the same as selling data.

6. Your rights and how to exercise them

You can do all of the following directly in the app, without contacting us:

• Access and download your data: Settings → Account → Download My Data. This exports your profile, favorites, enquiries, reviews, listings, and reports as JSON.
• Delete your account and data: Settings → Account → Delete Account. See §8.
• Delete individual data: unfavorite a room, delete your own review, remove a listing (which also removes its photographs), delete your business profile.
• Withdraw location consent: revoke the location permission in Android Settings or via the in-app permission controls. This takes effect immediately for the app's use of location; data already sent to Google as part of a Maps/Directions/Places request is governed by Google's policies.
• Control ad personalisation: use Android Settings → Google → Ads to reset your advertising ID or opt out of personalisation.
• Control notifications: Settings → Notification Settings. RoomRadar does not use push tokens at present; the toggles control in-app notification preferences.

For anything you cannot do in the app — including corrections, restrictions, objections, and any request under Indian data protection law — write to support@theruins.in from the email address of your account, and state what you want. We will verify that the request comes from the account holder before acting.

Where the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 give you additional rights as those provisions come into force, this policy will be updated to reflect them, and the contact route above is the route for exercising them. [Requires confirmation: which specific DPDP provisions are in force on your date of use — verify against the latest MeitY notification.]

7. Advertising disclosure (Google AdMob)

RoomRadar is free and is supported by advertising. RoomRadar uses the Google Mobile Ads SDK (AdMob), including banner, native, interstitial, rewarded, and app-open ads.

Because of that, Google, not RoomRadar, collects device and advertising identifiers and uses them to select, measure, and report on ads. This may include the advertising ID, coarse device and location signals (only if you have granted location permission), and interactions with ads. Google's use of this data is governed by Google's Privacy Policy and the Google Mobile Ads SDK terms.

This means we do not state that "RoomRadar does not share data with advertisers", because that would not accurately describe what the AdMob SDK does. What we can state accurately is: RoomRadar does not sell your personal data, and RoomRadar does not give Google anything beyond what is needed to render ads.

AdMob is configured to treat users as not under age of consent and not child-directed, and to restrict ad content rating to "T" (teen). RoomRadar does not target children with personalised advertising.

8. Account and data deletion

Deleting your account is available in the app: Settings → Account → Delete Account.

When you delete your account:

1. Your room photographs and profile photo are deleted from Firebase Storage.
2. Your profile row is deleted from the Supabase users table. Because related tables reference it, deletion cascades to your listings, their image records, favorites, reviews, enquiries, notifications, business profiles, premium listing records, and reports you filed.
3. Rows that exist only to count things — listing views, business clicks and impressions, and ad events — are anonymised rather than deleted: your user ID is set to null on those rows so they no longer identify you, while the aggregate counts remain.
4. You are signed out.

This is a deletion, not a deactivation or a freeze. Your profile cannot be restored.

You do not need to reinstall the app, and you do not need the app at all: you can also request deletion by writing to support@theruins.in from the email address of the account, or via the web page roomradar.theruins.in/delete-account.

Data that may be retained despite deletion is limited to: anonymised aggregate counts that no longer identify you, and records that we are legally obliged or permitted to retain (for example, to defend a legal claim or to complete an investigation). We do not retain deleted-account personal data for marketing purposes.

9. Data retention

RoomRadar does not keep your data for a fixed multi-year period. Retention is tied to use:

Full details, including the exact deletion mechanism for each category, are in the Data Retention & Deletion Notice in the app under Settings → Legal.

10. Children

RoomRadar is not directed at children and is not a children's social platform. RoomRadar does not knowingly collect personal data from children. Accommodation listings are intended for adults capable of entering a tenancy. If you believe a child has provided personal data, contact support@theruins.in and it will be deleted.

Because RoomRadar uses AdMob, ad content is restricted to a "T" rating and users are treated as not under age of consent. RoomRadar does not serve personalised ads to children.

11. Security

• Data in transit uses HTTPS/TLS. Cleartext traffic is disabled in the app.
• Row Level Security is enabled on every database table, and public write access is blocked at the database level, not only in the app's UI.
• Room photographs are validated for type, size, and actual file content, and are re-encoded with metadata stripped before storage.
• Sensitive screens block screenshots.
• Root, emulator, hooking, and tampering are detected in release builds.
• Secrets: the app ships only a Supabase publishable (anon) key, never a service-role key, and only public Firebase configuration. No payment secrets or admin credentials exist in the app.

No system is perfectly secure. If a security incident affecting your personal data occurs, affected users will be notified and the incident handled under our incident process, which is described in the Security section of the legal documents.

12. International processing

Supabase and Google process data in their chosen regions, which may be outside India. By using RoomRadar you acknowledge that your data is processed by these providers under their terms and their respective transfer mechanisms. RoomRadar's own data practices are governed by this policy and, where applicable, by Indian data protection law.

13. Payments

RoomRadar is free. RoomRadar does not process rental payments, booking payments, deposits, rent collection, subscriptions, commissions, escrow, or refunds, and this policy does not cover payment data because there is none. If payment functionality is ever introduced, this policy will be updated and re-notified, and a separate payment review will be required first.

14. Changes to this policy

We may update this policy. The version and effective date at the top will change, and material changes will be surfaced in the app. Continued use after the effective date means you accept the updated policy. Previous versions are retained internally.

15. Contact

RoomRadar is built by THERUINS. For privacy questions, data requests, or complaints:

support@theruins.in

A dedicated grievance route, including a legally-designated officer contact when one is appointed, is described in the Grievance / Complaint Policy in the app under Settings → Legal.

This web page mirrors the in-app Privacy Policy. The authoritative text is maintained with the application source.

RoomRadar is built by THERUINS — support@theruins.in