Privacy Policy

1. What we collect

• Account: your email address, or the identifier Apple or Google gives us if you sign in with them, and whether you have verified it.
• Your profile: your name, age and photos, and anything else you choose to add — gender, pronouns, sexual orientation, nationality, hometown, the languages you speak, occupation, education, university, whether you are a student, star sign, habits such as smoking, drinking and pets, lifestyle tags, a bio, and links to your social media accounts.
• Your home, if you offer one: its photos, description, rent, bills, size, floor, amenities and the other details you give about it — such as heating, air conditioning, internet speed, parking or how close it is to the metro — its house rules, who lives there, when it is available, and its approximate location.
• What you’re looking for: your search areas, dates, budget and filters.
• Your activity: who you have shown interest in or passed on, and your matches.
• Messages and calls: what you send in chats — text, photos, videos, voice notes and GIFs — with reactions, edits, and whether a message has been read. For calls, a record that a call took place: who called whom, when, and for how long. Calls themselves are never recorded.
• Safety: reports you make or that are made about you, blocks, and any action we take on an account.
• Support: what you write to us from the Support page, with your email address, the app version and whether you use iOS or Android.
• Cohab+: whether you have it, which plan, when it renews or ends, and which store it was bought through. We never receive your card or payment details — the store handles those.
• Your device: a push-notification token if you allow notifications, your settings, and, while crash reporting is on, technical details of crashes and app performance.

2. Sensitive information

Some things you can add to your profile are specially protected under the GDPR: your sexual orientation, and anything that may reveal your religious beliefs or your health — a lifestyle tag such as “Halal”, for example. All of these are optional.

We process them only because you choose to add them, and adding one is your explicit consent for it to appear on your profile and to be used in matching and in other members’ filters. You can remove it at any time in Edit profile, which withdraws that consent. We never use this information for anything else.

3. Why we use your data, and on what basis

• To run your account and Cohab itself — your profile, discovery, matching, chat, calls, notifications and filters. Basis: our contract with you.
• To sell and manage Cohab+. Basis: our contract with you.
• To keep Cohab safe — handling reports and blocks, preventing fraud, spam and abuse, and enforcing our Terms. Basis: the legitimate interest we and every member share in a safe service.
• To answer you when you write to us. Basis: our contract with you, or our legitimate interest in helping you.
• To find and fix crashes, while crash reporting is on. Basis: our legitimate interest in an app that works. You can turn it off at any time.
• To comply with the law and respond to lawful requests from authorities. Basis: legal obligation.
• Sensitive profile information, as described in section 2. Basis: your explicit consent.

We don’t sell your data, we don’t use it for advertising, and we don’t build profiles of you for anyone else.

4. How matching works

The order in which people and homes appear to you is worked out automatically from what you and they have said — location, dates, budget, the answers you both gave, and the filters you both chose. It decides only the order you see things in. No decision with legal or similarly significant effects is made about you automatically, and only you decide who to show interest in.

5. What other members can see

• Your profile: everything you have added to it, including your age, your Verified badge if you have one, and a compatibility percentage worked out from both profiles.
• Your home, if you offer one: your listing and the approximate area of the home. The exact location is never stored — the point you choose is rounded to a grid about 550 metres across before it is saved, so nobody, including us, ever has more than that. Your address is only known to someone if you tell them. In your listing you can hide the price (rent and bills) and the floor until you match. While hidden, they are not sent to other members’ devices at all, but they are still used to match your home with suitable budgets and floor preferences.
• Your interest: the people you show interest in can see that you are interested.
• In a chat: when you are typing, and whether you have read their messages, unless you turn off Read receipts.

Cohab never displays whether you are online or when you were last active. So that the typing indicator can work, the app of someone you have matched with is told when your app is open, and uses that only to show that you are typing.

Stealth listing mode keeps your home out of Discover, so only the Seekers you pick can see it. Pause discovery hides your profile altogether. Both are in the Account tab, under Settings → Privacy; Stealth listing mode is part of Cohab+.

6. Who else handles your data

We use a small number of service providers to run Cohab. They process your data only on our instructions and under data-protection terms:

• Supabase — our database, sign-in and file storage, including photos and chat media. Hosted in Ireland.
• Apple — Sign in with Apple, the App Store and its payments, push notifications, and maps and place names on iPhone.
• Google — Google sign-in, Google Play and its payments, push notifications, and maps and place names on Android.
• RevenueCat — manages Cohab+ purchases. It receives your Cohab account identifier and your purchase records from the store.
• Expo — delivers push notifications, including their text, and app updates.
• LiveKit — carries voice and video calls in real time. Calls are not recorded.
• KLIPY — GIF search. What you type into the GIF picker is sent to them.
• Geoapify — place search. What you type when you search the map for an area or an address is sent to their service, with the rough area the map is showing (to about 10 km) so that nearby places come first. Based in the EU.
• Brevo — email. It sends your sign-in and verification codes, and it sends us notice of reports and support requests, including what was written. Based in the EU.
• Sentry — crash and performance reports, only while crash reporting is on. No name, email address or account identifier is attached. Hosted in the EU.

We may also disclose data where the law requires it, in response to a lawful request from an authority, or to protect someone’s safety. We never sell personal data.

7. International transfers

Our database is in the EU. Some of the providers above — including Apple, Google, RevenueCat, Expo, LiveKit and KLIPY — may process data outside the European Economic Area, mainly in the United States. When they do, the transfer is protected by the EU–US Data Privacy Framework where the provider is certified under it, and otherwise by the European Commission’s Standard Contractual Clauses. You can ask us for details.

8. How long we keep it

We keep your data while your account exists.

When you delete your account, your profile, photos, listing, activity, matches and conversations are deleted straight away — including the messages you sent, which disappear for the other person too. Copies can remain in our encrypted backups until those are overwritten on their normal cycle.

Support messages are kept separately, so that we can still reply after an account has gone. We delete them when they are no longer needed, and you can ask us to delete yours at any time.

When you report someone you have been talking to, a copy of that conversation is kept with the report, so the person reviewing it can see what was said even if the chat, or the account of the person reported, is deleted in the meantime. It is deleted when the report is closed, and after six months at the latest.

If an account is suspended for breaking our rules, we keep it and the email address it used, so that the same person cannot simply sign up again.

Crash reports are kept by Sentry for up to 90 days. Records of Cohab+ purchases are also kept by the store and by RevenueCat under their own obligations, for example for tax.

9. Your rights

You have the right to access your data, to correct it, to have it deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw any consent you have given — without affecting what happened before.

Most of this you can do yourself: edit your profile at any time; download a copy of your data with Export my data and turn crash reporting off with Share usage analytics, both under Settings → Your data; and delete your account under Settings → Delete account.

For anything else, write to privacy@cohab.gr. We will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Hellenic Data Protection Authority (www.dpa.gr), or to the data-protection authority of the EU country where you live.

10. Security

Connections are encrypted, access to data in our database is restricted to the accounts it belongs to, and your sign-in is kept in your phone’s secure storage. No system is perfectly secure. If a breach ever put you at risk, we would tell you, as the law requires.

11. Children

Cohab is only for people aged 18 and over, and it does not accept a profile with a younger age. If you believe someone under 18 is using Cohab, tell us at support@cohab.gr and we will act on it.

12. Changes to this policy

If we change this policy in a way that matters, we will tell you in the app before the change takes effect. The date at the top shows the current version.

13. Contact

Vasileios Tsekenis (Cohab), Athens, Greece — privacy@cohab.gr.