Back to home

Privacy Policy

Last updated September 7, 2026. Applies to this waitlist site only.

Roomade's early access is aimed at flatmates in Malaysia and South Korea alike, both are core markets for us, not incidental visitors. This notice explains what personal data we collect through this waitlist page, why, how long we keep it, who we share it with, and the rights you have over it. It's written to meet Malaysia's Personal Data Protection Act 2010 (PDPA) and South Korea's Personal Information Protection Act (PIPA) side by side. It doesn't cover the Roomade app itself, which will have its own in-app privacy notice once it's available.

This page is in English. If you'd like a Korean-language copy, email us and we'll send one, an English version governs if the two ever conflict.

1. Who is responsible for your data

The data controller for this site is Hakeemi Ridza, Jasin, Melaka, operating as “Roomade.” You can reach us at roomadeofficialmy@gmail.com for any privacy question, including the rights listed below.

2. What we collect

You give us directly

Just the email address you submit through the waitlist form. We don't ask for your name, phone number, or anything else.

Collected automatically

Our hosting provider records standard server logs (IP address, timestamp, request path) for a short period, purely for security and abuse prevention, for example, blocking a script that tries to submit thousands of fake signups. We don't use cookies, analytics scripts, or advertising trackers on this site.

3. Why we collect it, and our legal basis

We collect your email solely to notify you when Roomade opens for early access. Under the PDPA, our basis is your consent, given by submitting the form. Under PIPA, the same applies: collection and use is based on your consent at the point of signup, and you can withdraw it at any time (see Section 8). Server logs are kept under our legitimate interest in keeping the site secure.

4. Who we share it with

We use Supabase (Supabase Inc.) as our database provider to store waitlist signups, and a hosting provider to serve this website. Both act as data processors on our instructions, they don't use your email for their own purposes. We don't sell, rent, or share your email with advertisers or other third parties.

Our Supabase database is hosted in the Asia-Pacific region (Singapore). For our South Korean users, this means your email address is transferred outside Korea to be stored, Section 5 sets out the specific disclosures PIPA requires for that transfer.

5. International transfer (South Korea, PIPA Article 28-8)

Because South Korea is one of our two target markets, this section applies to every signup from Korea, not just an occasional edge case. As required by PIPA Article 28-8, here are the specifics of the transfer:

  • Recipient: Supabase Inc., our database processor
  • Country of storage: Singapore
  • Data transferred: your email address only
  • Purpose: to store your waitlist entry so we can email you about early access
  • Retention period abroad: for as long as described in Section 6, or until the recipient's use ends, whichever is earlier
  • Method of transfer: encrypted transmission (HTTPS) to Supabase's Singapore infrastructure at the moment you submit the form

You have the right to refuse this transfer. Since it's the only way we can add you to the waitlist, refusing means we won't be able to sign you up, but you're free to check back on this page later instead.

6. How long we keep it

We keep your email until Roomade launches and the waitlist closes, or until you ask us to delete it, whichever comes first. If you don't hear from us within 18 months, we'll delete unconfirmed signups automatically.

7. If something goes wrong (data breach)

If we become aware of a personal data breach affecting your email address:

  • Under the PDPA, we will notify the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi) within 72 hours of becoming aware of a breach likely to cause significant harm, and notify affected individuals within 7 days of that Commissioner notification.
  • Under PIPA, we will notify the Personal Information Protection Commission (PIPC) without delay where the breach requires it.

8. Your rights

You can ask us, at any time, to:

  • confirm whether we hold your email and see a copy of it
  • correct it, if you submitted it with a typo
  • delete it and remove you from the waitlist
  • withdraw your consent to us holding it
  • limit or object to how we process it, though since we only process it for one purpose, this is functionally the same as deletion

These map to your rights of access, correction, and withdrawal of consent under Malaysia's PDPA (Sections 30 to 32 and 38), and to your rights to access, correct, delete, and suspend processing of your data under South Korea's PIPA (Articles 35 to 37). To exercise any of them, email roomadeofficialmy@gmail.com. We'll act on your request within 21 days.

9. Security

Your email is stored in a database with row-level security enabled: our public site can only insert new signups, it can't read, list, or export existing ones. Traffic to this site is encrypted in transit (HTTPS).

10. Children's privacy

This waitlist isn't directed at children. Under PIPA, we don't knowingly collect personal information from anyone under 14 without verified consent from a legal guardian. Under Malaysia's general law of capacity, we don't knowingly collect personal information from anyone under 18 without a parent's or guardian's consent. If you believe a child has signed up without the required consent, contact us and we'll remove the entry.

11. Complaints

If you're unhappy with how we've handled your data, please contact us first, we'll try to sort it out directly. You can also lodge a complaint with your local regulator: in Malaysia, the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi); in South Korea, the Personal Information Protection Commission (PIPC), or report a breach to KISA's Privacy Call Center at 118.

12. Changes to this policy

If this policy changes materially, we'll update the date at the top of this page. Since this is a waitlist and we hold very little data, we don't expect frequent changes.

13. Contact

Hakeemi Ridza, Jasin, Melaka. roomadeofficialmy@gmail.com