Legal
Privacy policy
This policy explains what personal data Roomy collects when you use the Roomy app (Android, iOS and web) and the website roomybooking.com, how we use it, and the choices you have. Roomy is a hotel booking platform based in Hargeisa, Somaliland.
1. Data we collect
Data you give us
- Account: full name, email address, password (stored only as a secure hash) and, if you add them, a phone number and a profile photo link.
- Bookings: the hotel and room, dates, number of guests, any special requests, prices and the booking status.
- Payments: when you pay by card, the card details are used once to process the payment. We keep only the card brand and the last four digits, the amount and a transaction reference. We never store the full card number or the security code (CVC).
- Hotel partners: if you list a hotel, the hotel's details (name, address, contact details, photos, rooms and prices) and the staff accounts you add.
Data created while you use Roomy
- Hotels you save as favourites and the notifications we send you.
- A sign-in token and your theme preference, stored on your device so you stay signed in.
- Standard server logs (IP address, time and the page or API request) kept for security and troubleshooting.
We do not use advertising, advertising IDs, analytics or tracking tools, and we do not collect your location, contacts, photos or files.
2. How we use your data
- To create and secure your account and let you sign in.
- To make, manage and pay for bookings, and to send you booking updates.
- To let hotels manage their rooms, bookings and staff, and to calculate platform fees and payouts.
- To keep the service safe, prevent fraud and fix problems.
3. Who we share it with
- The hotel you book: it sees your name, email, phone number (if given) and the booking details so it can host you.
- Service providers that run our servers, only as needed to provide Roomy.
- Authorities, when the law requires it.
We never sell your personal data. Hotel photos in the app may load from third-party image hosts; those requests do not include your account details.
4. How long we keep it
We keep your account data until you delete your account. When you delete it, your name, email, phone, photo, favourites and notifications are erased. Past bookings and payment records are kept without your personal details, because hotels need them for their accounts and the law may require it. Server logs are deleted after 90 days.
5. Security
All traffic between the app and our servers is encrypted (HTTPS). Passwords are stored as one-way hashes, and access to data is limited by role: a hotel only sees its own bookings.
6. Your choices and rights
- See and correct your details in the app under Profile → Personal details.
- Delete your account in the app under Profile → Delete account, or follow the steps on roomybooking.com/delete-account.
- Contact us to ask for a copy of your data or with any privacy question.
7. Children
Roomy is not meant for children under 13, and we do not knowingly collect their data. Bookings must be made by adults.
8. Changes
If we change this policy we will update the date above and, for important changes, tell you in the app.
9. Contact
Roomy, Hargeisa, Somaliland
Email: support@roomybooking.com