This policy explains what personal data roomsφ collects, why, how long we keep it, who else sees it, and what you can do about it. It is written in plain English.
The person responsible for your data (the "controller") is Chip, Dubai, United Arab Emirates.
Questions about privacy: anyaanyinyaa@gmail.com.
We use no analytics service and no advertising trackers. There are no third-party cookies.
roomsφ asks Google for exactly three scopes: openid, email and profile. That gives us your Google account id, your e-mail address, your name and your profile picture, and nothing else.
We use this data only to create and recognise your roomsφ account. We do not keep Google access or refresh tokens after sign-in, we do not read your Google contacts, calendar, Drive or mail, and we never ask for extra Google permissions.
Our use of data received from Google follows the Google API Services User Data Policy, including its Limited Use requirements.
If you sign in with Telegram, we ask only for your basic profile, never your phone number, and we do not send you messages through Telegram. If you sign in with Discord, we ask only for your basic profile, not your e-mail address or your servers. We use this data only to create and recognise your roomsφ account, and we do not keep Telegram or Discord tokens after sign-in.
We do not sell your data, we do not show ads, and we do not build advertising profiles.
Your voice is relayed live from your browser to the other people in the room through our media server. It is never stored, transcribed or analysed by roomsφ. When you leave the room, nothing of your voice remains on our systems.
Other people in a room could record it with outside tools. Our Terms forbid this without everyone's consent, but we cannot technically prevent it. Please do not share sensitive details (your address, bank details, passwords, health information) in a room.
We share data with authorities only when the law requires it. We do not sell or rent personal data to anyone.
Our servers are in Indonesia, and roomsφ is run from the United Arab Emirates. If you use roomsφ from another country, your data is transferred to Indonesia, and the people who run roomsφ access it from the United Arab Emirates.
Where the law of your country requires safeguards for such a transfer, we rely on the measures described in this policy: data travels only over encrypted connections, IP addresses are stored only as keyed hashes, and access to the servers is limited to the people who run roomsφ.
You can:
We answer requests within 30 days. If we need to confirm that a request really comes from you, we may ask you to sign in or to write from the e-mail address of your account.
roomsφ is not for anyone under 18. We do not knowingly collect data from children. If we learn that an account belongs to someone under 18, we close it and delete the data we hold about that person as soon as we can. If you believe a child is using roomsφ, tell us at anyaanyinyaa@gmail.com.
Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022, UU PDP) you have the right to know how your data is processed, to access and correct it, to have it deleted, to withdraw consent and to object to decisions made only by automated means.
Our servers are in Indonesia. roomsφ is run from the United Arab Emirates, so the people who run it access your data from there, with the safeguards described under "Where data is stored".
When this policy changes, the new version is published here with its date. Every version and a short summary of what changed is listed at Change history. For a material change we post the new version with its effective date at Change history at least 14 days before it applies.