MitMateFind your space. Match your vibe.

Privacy Policy

Last updated: 22 September 2026

MitMate helps people find roommates and rooms. To do that we have to hold some information about you. This page says exactly what, who can see it, and how to get rid of it.

The short version

We collect what you type into your profile, and your messages.
Other members see your first name, age, area, bio and tags — never your email address or your exact street address.
Your messages are readable only by you and the person you are writing to.
We do not sell your data, and we do not run advertising trackers.
You can delete your account from inside the app at any time.

Who we are

MitMate is an independent project operated by its founder in Georgia, United States. For anything in this policy, including a request to see or delete your data, write to mitmatefounder@gmail.com.

What we collect

When you create an account

Email address — how you sign in, and how we would reach you about your account.
Password — handled by Google Firebase Authentication and stored only as a cryptographic hash. We never see it and cannot recover it.
First name — shown to other members.

When you fill in your profile

Age, a short bio, and lifestyle tags such as Non-Smoker or Early Riser.
A profile photo, if you choose to add one. It is cropped and shrunk on your device before it is uploaded.
If you are looking for a place: the area you are searching (a neighborhood, city and state), your budget range, cleanliness, work schedule, and your dietary and language preferences.
If you are offering a place: the building or address, the area, the listing type, what is available, the rent, when it is free, and amenities.

All of this is optional except your name and email. A partly filled profile still works; it simply matches less precisely.

When you use the app

Messages you send to other members.
A note of when we last emailed you about a conversation, so one exchange cannot turn into a mailbox full of alerts.
Blocks and reports you make, including any reason and detail you give.
Timestamps recording when your profile was created and last changed.

What we do not collect

No phone number.
No payment details — MitMate is free and takes no payments.
No location tracking. The only location we hold is the area on your profile — a neighborhood, city and state. If you tap Allow on the location popup, your device’s approximate position is used once to look that area up and is then discarded; we never store coordinates.
No advertising identifiers, no third-party analytics, no tracking pixels.

What other members can see

Matching means showing you to other people, so part of your profile is visible to signed-in members. That part is deliberately narrow.

Visible to other members	Never visible to other members
First name Profile photo, if you added one Age Short bio Area (for example “Smyrna”) Lifestyle and dietary tags Cleanliness and work schedule One price figure — your maximum budget, or your asking rent	Your email address Your password Your exact building or street address Your minimum budget Your messages with anyone else Blocks or reports you have made

Two deliberate choices there. Your exact address is never published — a match card shows the neighbourhood, not which unit you live in. And we publish your budget ceiling but not your floor, because the ceiling is what somebody offering a room needs to know and the floor is only useful for negotiating against you.

Who else processes your data

We use a small number of providers to run the service. We do not sell data to anyone, and none of these are advertising companies.

Provider	What they handle	Where
Google Firebase Authentication	Your email and password hash	United States
Google Cloud Firestore	Your profile, messages, blocks and reports	United States (us-central1)
Google Cloud Storage for Firebase	Your profile photo	United States (us-central1)
Photon by komoot, using OpenStreetMap data	The letters you type into a location field, to suggest places; and, only if you tap Allow, your approximate position, to name your area. Neither is linked to your account or stored by us.	Germany (EU)
Our email provider, through the Firebase email extension	Your email address and the notice that somebody messaged you. Never the message itself.	United States
Google Firebase Hosting	Serving the app and this page	Global CDN
Google Fonts	When you use MitMate in a browser, your device requests our typefaces from Google’s font servers, which involves your IP address. The installed app does not do this — it carries its own fonts.	Global CDN

Emails we send you

When somebody messages you, we email to let you know. The email contains their first name and nothing they wrote — your conversation stays inside the app, where only the two of you can read it. We email at most once every 30 minutes per conversation, however many messages arrive.

Turn these off any time under Your account → Email me about new messages. We will still email you about your account itself, such as a password reset you asked for.

How your data is protected

All traffic is encrypted in transit over HTTPS.
Access is enforced by database security rules, not just by the app. Somebody with no account cannot read anything; a signed-in member can only read their own private profile and their own conversations.
Reports are write-only: nobody can read them back through the app, not even the person who filed one.
Passwords are hashed by Google Firebase and are not visible to us.

No system is perfectly secure, and we will not pretend otherwise. If we ever become aware of a breach affecting your data, we will tell you.

How long we keep it

Your profile stays until you delete it. If you delete your account, your profile, your photo and your entry in the matching feed are removed immediately. Removing your photo from your profile deletes the file too, not just the link to it.

One thing to be clear about

Messages you have already sent remain in the other person’s conversation after you delete your account, the same way an email you sent stays in someone’s inbox. We cannot remove a message from someone else’s copy without deleting their side of the conversation too. If you need a specific message removed, write to us and we will look at it case by case.

Reports are kept after an account is deleted, so that a pattern of behaviour cannot be erased simply by signing up again.

Your choices

See your data — everything we hold about you is shown in the app, on your profile and in your conversations. Ask us if you would like it as a file.
Correct it — reopen the profile form and change anything. Saving overwrites the old answers.
Delete it — Your account → Delete my account. This is permanent and immediate.
Block someone — the shield icon on any match card or in any conversation. They are not told, and they can no longer see you or message you.

If you are in California, the EU or the UK, you have specific rights over your personal data, including access, correction, deletion and portability. Write to us and we will honour them regardless of where you live.

Children

MitMate is for adults arranging housing. You must be 18 or older to use it, and the app will not accept an age below 18. We do not knowingly collect information from children. If you believe a child has created an account, tell us and we will remove it.

Changes to this policy

If we change how we handle your data we will update this page and change the date at the top. If a change is significant — collecting something new, or sharing with someone new — we will tell you in the app before it takes effect.

Contact

Questions, requests, or anything that feels wrong: mitmatefounder@gmail.com. We aim to answer within a few days.