Privacy Policy

1. Introduction

BearMate ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our roommate matching platform for UC Berkeley students.

By using BearMate, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Information You Provide

• Email Address: Your @berkeley.edu email for verification and communication
• Profile Information: Gender, class year, major, pronouns, Instagram handle
• Housing Preferences: Budget, move-in dates, lease length, preferred areas, room type, roommate count
• Lifestyle Information: Sleep schedule, cleanliness preferences, guest frequency, substance policies, noise tolerance, workload
• Commitment Information: Timeline, tour availability, housing search status
• Optional Information: Free-text notes, potential roommate details

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: Browser type, operating system, IP address
• Cookies: Session cookies for authentication and user preferences
• Activity Timestamps: Last login, profile updates, match interactions

3. How We Use Your Information

We use your information to:

• Verify your UC Berkeley student status
• Create and maintain your BearMate account
• Generate compatible roommate matches using our matching algorithm
• Send verification emails and important platform updates
• Improve our matching algorithm and user experience
• Prevent fraud, abuse, and ensure platform safety
• Comply with legal obligations
• Enforce our Terms of Service

4. Information Sharing and Disclosure

4.1 With Other Users

When you match with other users, they can see your profile information including Instagram handle, housing preferences, lifestyle information, and any optional notes you've provided. Your email address is NEVER shared with other users.

4.2 With Service Providers

We share information with trusted third-party service providers:

• Neon: Database hosting (stores your profile and account data)
• Brevo: Email delivery service (sends verification emails)
• Vercel: Platform hosting and deployment

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 What We DON'T Share

We will NEVER sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encrypted data transmission (HTTPS/TLS)
• Secure database storage with Neon PostgreSQL
• Hashed and salted passwords (bcrypt)
• HTTP-only session cookies to prevent XSS attacks
• Regular security updates and monitoring

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal data
• Update: Edit your profile information at any time
• Delete: Request deletion of your account and data
• Opt-Out: Unsubscribe from non-essential communications
• Export: Download your data in a portable format

To exercise these rights, please contact us at the email provided in Section 11.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention).

Inactive accounts (no login for 6 months) may be automatically removed from the matching pool and eventually deleted.

8. Cookies and Tracking

BearMate uses essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser settings, but this may limit platform functionality.

9. Children's Privacy

BearMate is intended for UC Berkeley students (typically 18+). We do not knowingly collect information from individuals under 18. If we become aware of data collected from someone under 18, we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on the platform. Your continued use of BearMate after changes indicates acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Email: bearmateapp@gmail.com