Last updated August 27, 2026. Applies to this waitlist site only.
Roomade's early access is aimed at flatmates in Malaysia and South Korea alike, both are core markets for us, not incidental visitors. This notice explains what personal data we collect through this waitlist page, why, how long we keep it, who we share it with, and the rights you have over it. It's written to meet Malaysia's Personal Data Protection Act 2010 (PDPA) and South Korea's Personal Information Protection Act (PIPA) side by side. It doesn't cover the Roomade app itself, which will have its own in-app privacy notice once it's available.
This page is in English. If you'd like a Korean-language copy, email us and we'll send one, an English version governs if the two ever conflict.
The data controller for this site is [Company Legal Name], [Registered Address], operating as “Roomade.” You can reach us at roomadeofficialmy@gmail.com for any privacy question, including the rights listed below.
Just the email address you submit through the waitlist form. We don't ask for your name, phone number, or anything else.
Our hosting provider records standard server logs (IP address, timestamp, request path) for a short period, purely for security and abuse prevention, for example, blocking a script that tries to submit thousands of fake signups. We don't use cookies, analytics scripts, or advertising trackers on this site.
We collect your email solely to notify you when Roomade opens for early access. Under the PDPA, our basis is your consent, given by submitting the form. Under PIPA, the same applies: collection and use is based on your consent at the point of signup, and you can withdraw it at any time (see Section 7). Server logs are kept under our legitimate interest in keeping the site secure.
We use Supabase (Supabase Inc.) as our database provider to store waitlist signups, and a hosting provider to serve this website. Both act as data processors on our instructions, they don't use your email for their own purposes. We don't sell, rent, or share your email with advertisers or other third parties.
Our Supabase database is hosted in the Asia-Pacific region (Singapore). For our South Korean users, this means your email address is transferred outside Korea to be stored, Section 5 sets out the specific disclosures PIPA requires for that transfer.
Because South Korea is one of our two target markets, this section applies to every signup from Korea, not just an occasional edge case. When you submit this form from South Korea, your email address is transferred to and stored on servers located in Singapore, operated by our processor, Supabase Inc. The purpose of this transfer is solely to store your waitlist entry so we can email you about early access. The only item transferred is your email address, and it's kept for as long as described in Section 6. You have the right to refuse this transfer; since it's the only way we can add you to the waitlist, refusing means we won't be able to sign you up, but you're free to check back on this page later instead.
We keep your email until Roomade launches and the waitlist closes, or until you ask us to delete it, whichever comes first. If you don't hear from us within 18 months, we'll delete unconfirmed signups automatically.
You can ask us, at any time, to:
These map to your rights of access, correction, and withdrawal of consent under Malaysia's PDPA (Sections 30 to 32 and 38), and to your rights to access, correct, delete, and suspend processing of your data under South Korea's PIPA (Articles 35 to 37). To exercise any of them, email roomadeofficialmy@gmail.com. We'll act on your request within 21 days.
Your email is stored in a database with row-level security enabled: our public site can only insert new signups, it can't read, list, or export existing ones. Traffic to this site is encrypted in transit (HTTPS).
This waitlist isn't directed at children, and we don't knowingly collect data from anyone under 14. If you believe a child has signed up, contact us and we'll remove the entry.
If you're unhappy with how we've handled your data, please contact us first, we'll try to sort it out directly. You can also lodge a complaint with your local regulator: in Malaysia, the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi); in South Korea, the Personal Information Protection Commission (PIPC), or report a breach to KISA's Privacy Call Center at 118.
If this policy changes materially, we'll update the date at the top of this page. Since this is a waitlist and we hold very little data, we don't expect frequent changes.
[Company Legal Name], [Registered Address]. roomadeofficialmy@gmail.com