Privacy Policy

Effective date: March 23, 2026

CommonRoom AI ("we", "our", or "us") operates the CommonRoom AI mobile application and the commonroomai.com website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Account Information

When you create an account, we collect:

• Name and email address
• Phone number (if you use phone authentication)
• Profile photo (optional)
• Password (stored in hashed form)

Content You Provide

We store content you create within rooms and tools, including:

• Text entries, form submissions, and comments
• Chat messages (text, voice, and location)
• Photos and file attachments you upload
• Votes, RSVPs, and other tool-specific data

Device & Usage Information

We automatically collect:

• Device type, operating system, and app version
• Push notification tokens (for delivering notifications)
• General usage analytics (screens viewed, features used)

Camera & Media Access

Our app requests access to your device camera and photo library. This is used solely for:

• Taking photos for attachments and profile pictures
• Scanning QR codes to join rooms
• Uploading images from your photo library

We do not access your camera or photos in the background. Camera access is only activated when you explicitly choose to take a photo or scan a QR code.

Microphone Access

Microphone access is used for voice messages and group audio/video calls within rooms. We do not record audio in the background.

Contacts

If you grant contacts permission, we use it solely to help you discover and invite people you know to CommonRoom. Contact data is not stored on our servers beyond what is needed for the discovery feature.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate your identity and secure your account
• Deliver push notifications you have opted into
• Enable collaboration features (rooms, tools, chat)
• Provide AI-powered features (summaries, tool generation)
• Respond to support requests
• Detect and prevent abuse or violations of our terms

3. How We Share Your Information

We do not sell your personal information. We may share information in these limited cases:

• With room members: Content you post in a room is visible to other members of that room, according to the room's visibility and permission settings.
• Service providers: We use third-party services for hosting (cloud infrastructure), payment processing (Stripe), push notifications (Expo), SMS (Twilio), and AI features (Anthropic). These providers process data on our behalf under strict contractual obligations.
• Legal requirements: We may disclose information if required by law, legal process, or government request.

4. Data Storage & Security

Your data is stored on secure cloud servers. We use encryption in transit (TLS/HTTPS), hashed passwords, and token-based authentication to protect your information. While no method of electronic storage is 100% secure, we implement industry-standard safeguards.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Export your data in a portable format

To exercise these rights, contact us at privacy@commonroomai.com.

7. Children's Privacy

Our Service is not directed to children under 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy in the app or sending a notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: privacy@commonroomai.com
• Website: https://commonroomai.com