Privacy Policy

1. Introduction

Homies is a room matching platform based in Malaysia that connects room listers with prospective tenants.

For any privacy-related questions, contact us at: support@homies.global

2. Information We Collect

We collect information you provide directly to us when you create an account and use our platform:

• Account information: Email address and password
• Profile information: Full name, preferred name, date of birth, gender, race, religion, occupation, languages spoken, phone number, and profile photo
• Identity verification: Front and back of your MyKad (Malaysian National Identity Card), submitted for verification purposes only
• Listing information: Property address, rental price, room photos, and amenities (for listers)
• Booking information: Viewing appointment dates, times, and statuses
• Usage information: Pages visited, features used, and actions taken on the platform

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Display your profile to other users for the purpose of room matching
• Process and confirm viewing appointment bookings
• Verify your identity through MyKad review (conducted by our team only)
• Send email notifications about bookings and appointments
• Improve the platform and user experience
• Respond to your queries and support requests
• Comply with applicable Malaysian laws and regulations

4. Information Visible to Other Users

When you use Homies, certain profile information is visible to other users to enable room matching. Specifically:

• Your preferred name, profile photo, age, gender, race, religion, occupation, languages, and personal description are visible to other users
• Listers can see tenant profiles when tenants book a viewing
• Tenants can see lister profiles and room listings when browsing

Your MyKad, email address, and phone number are never shown publicly. Phone numbers are only shared between a lister and tenant after a viewing has been confirmed.

5. Identity Verification and MyKad

We collect a copy of your MyKad (front and back) solely for identity verification purposes. This document is:

• Stored securely in a private, encrypted storage system
• Reviewed only by authorised Homies team members
• Never shared with other users, listers, or tenants
• Never used for any purpose other than verifying your identity
• Retained for as long as your account is active

If you delete your account, we will delete your MyKad documents within 30 days.

6. How We Store and Protect Your Data

Your data is stored using Supabase, a secure cloud database provider with servers located in Southeast Asia. We implement the following security measures:

• All data is transmitted over encrypted HTTPS connections
• Sensitive documents (MyKad) are stored in private, non-publicly accessible storage
• Row-level security policies ensure users can only access their own data
• Passwords are hashed and never stored in plain text

While we take reasonable steps to protect your information, no system is completely secure. We encourage you to use a strong password and to contact us immediately if you suspect unauthorised access to your account.

7. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• Service providers: We use Supabase (database), Resend (email delivery), and Vercel (website hosting). These providers process data on our behalf under data processing agreements.
• Legal requirements: We may disclose your information if required by Malaysian law, court order, or government authority.
• Safety: We may share information to protect the safety of our users or the public in cases of serious harm or illegal activity.

8. Sensitive Personal Data

Homies collects certain categories of sensitive personal data including race and religion. This information is collected to enable meaningful lifestyle matching between listers and tenants, which is the core purpose of our platform. Under Malaysia's Personal Data Protection Act 2010 (PDPA), we obtain your explicit consent to process this data through your agreement to these terms during registration.

You may choose not to provide this information, but doing so will significantly limit the platform's ability to match you with compatible housemates.

9. Your Rights Under Malaysia's PDPA

Under the Personal Data Protection Act 2010 (PDPA), you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate personal data
• Right to withdraw consent: Withdraw consent to the processing of your sensitive personal data at any time
• Right to deletion: Request deletion of your account and associated data

To exercise any of these rights, contact us at support@homies.global. We will respond within 14 business days.

10. Cookies and Tracking

Homies uses essential cookies and browser local storage to maintain your login session. We do not use advertising cookies or third-party tracking tools. We do not display advertisements on our platform.

11. Children's Privacy

Homies is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us at support@homies.global and we will delete the account promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or by displaying a notice on the platform. Your continued use of Homies after any changes indicates your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your data, please contact us:

• Email: support@homies.global

We take all privacy concerns seriously and will respond within 14 business days.