Privacy Policy

1. Who We Are

Flatment ("we," "us," "our") operates a community living management platform consisting of:

• The Flatment mobile app (iOS and Android) for housing societies, PGs/hostels, and co-living spaces
• The Flatment website, including the discovery and chat features at flatment.com/find

This Privacy Policy applies to both.

2. What Information We Collect

2.1 Information you provide directly

• Name — when you create or join a society/property on the app
• Phone number — for account identification and (where enabled) OTP login
• Email address — for account login (OTP-based authentication) and waitlist sign-ups
• Unit/flat/bed details — your unit number, occupancy type (owner/tenant), and related property information
• Photos — when you submit a maintenance issue with a photo, or upload a receipt for an expense
• Government-issued ID documents — for PG/hostel and co-living properties, the property admin may photograph or upload a tenant's ID proof (such as Aadhar, PAN, passport, driving license, or voter ID) for that tenant's records. This is provided by the admin, not the tenant directly, and is treated as sensitive personal data: it is stored separately from the general Document Vault, is visible only to that property's admin/committee members (never to other residents or tenants), and can be deleted by the admin at any time.
• Messages — content you post in FlatChat (in-app community chat) or in suburb-level chat rooms on flatment.com/find
• Financial entries — expenses, corpus/fund entries, and payment claims that you or your society's committee enter into the app. These are user-submitted records for your community's own bookkeeping and are not verified or audited by Flatment.

2.2 Information collected automatically

• Device push notification token — used solely to deliver app notifications to your device. This token is not visible to other residents of your society.
• Location data — only when you explicitly use a feature that requires it: for example, looking up cab fare estimates, sharing your location in a chat message, or (for property admins) precisely pinning your property's location on a map. We do not track your location in the background.
• Usage analytics — on our website (flatment.com), we use Vercel Analytics to understand traffic patterns. This does not use tracking cookies in the traditional sense and does not build an advertising profile of you.

2.3 Information from third parties

• Google Sign-In — if you sign in with Google (used on flatment.com/find), we receive your name, email, and profile photo from Google, as permitted by your Google account settings.
• Address lookup — when a society admin enters their property's address, we send that address to OpenStreetMap's Nominatim service to determine approximate map coordinates, used to power location-based features such as nearby cab pickup estimates. We do not send any other personal data to this service.

3. How We Use Your Information

We use your information to:

• Operate your society/property's account: maintenance billing, complaints, announcements, polls, facility bookings, and related features
• Send you notifications relevant to your account (dues reminders, announcement alerts, chat messages)
• Power the AI features in the app — including the AI assistant, AI-generated newsletters, and receipt-scanning — using Anthropic's Claude API
• Operate the suburb-level chat rooms on flatment.com/find, where your name and profile photo are visible to other participants in that chat room, including users who are not signed in
• Improve and maintain the reliability and security of our platform

4. How We Share Your Information

• Within your society/property: your name, unit number, and relevant activity (issues raised, announcements, chat messages) are visible to other members of your specific society, PG, or co-living space — but not to members of other properties.
• Public suburb chats (flatment.com/find): messages, your display name, and profile photo in these chat rooms are visible to anyone who visits that chat room, including people who have not signed in.
• Service providers: we use third-party infrastructure providers including Supabase (database and authentication), Resend (email delivery), Firebase (push notifications), Anthropic (AI features), and Cloudflare (bot protection). These providers process data on our behalf and are bound by their own data protection commitments.
• Aggregated and anonymized insights: Flatment may use de-identified, aggregated data (general trends across many societies, not identifying any individual or specific property) to develop insights that may be shared with or licensed to third parties. We will provide detailed disclosure as such features are introduced, and no data shared in this manner will identify you or your specific property without your explicit consent.
• Legal requirements: we may disclose information if required by law or to protect the rights, property, or safety of Flatment, our users, or the public.

We do not sell your personally identifiable information to advertisers.

5. Data Retention

We retain your personal data for as long as your account remains active. If you leave a society, PG, or co-living space, or stop using the app, we retain your data unless and until you request deletion. You may request deletion of your personal data at any time by contacting us (see Section 9). Some information may be retained longer where required for legal, accounting, or security purposes.

6. Your Rights

Under India's Digital Personal Data Protection Act, 2023, and other applicable laws, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for processing, where consent is the basis for that processing
• Lodge a grievance regarding how your data is handled (see Section 9 for our grievance contact)

7. Children's Privacy

Flatment is intended for users who are 18 years of age or older, as our platform is designed for property management and tenancy-related activities. We do not knowingly collect personal data from children.

8. Security

We use industry-standard practices to protect your data, including encrypted connections (HTTPS/TLS), database-level access controls (row-level security restricting data access to authorized users only), and bot-protection on public-facing forms. No system is completely secure, and we cannot guarantee absolute security of your information.

9. Contact Us

For privacy questions, data access/deletion requests, or grievances, contact us at:

Email: privacy@flatment.com

We aim to respond to all privacy-related requests within a reasonable timeframe in accordance with applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent revision at the top of this page. Continued use of Flatment after changes are posted constitutes acceptance of the revised policy.