Who the controller is
The data controller is Sergio Gualda, operating Roomealo as an individual. Write to hello@roomealo.com about anything to do with your data. A postal address for formal notices is provided on legitimate request.
What we process and why
We only process what the product needs to work. We don't buy data from third parties and we don't sell it to anyone.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Your answers to the living compatibility test | To build your profile and compare it with other people's | Performance of the service you requested | While your account is active |
| Email address | To create your account and notify you about the service and your matches | Contract, and consent for notifications | Until you delete your account or unsubscribe |
| Waitlist email, situation and city | To tell you when we open and to decide which cities to open first | Consent, which you give when you sign up | Until we open in your city and let you know, or until you unsubscribe. Two years at most |
| Name, age and photo | So other people can recognise you before talking to you | Performance of the service | While your account is active |
| City, areas, budget and move-in date | To filter which people and households we show you | Performance of the service | While your account is active |
| Messages with other people | So you can talk, and so we can review a report if one is made | Performance of the service and legitimate interest in safety | Up to one year after the account is closed |
| Technical and usage data | To keep the site working and understand what gets used | Legitimate interest, and consent for analytics | Up to 14 months |
Your test answers stay private
This matters and goes beyond what the law requires: nobody sees your individual answers. Not other users, not people you match with, not households considering you. All that's ever shown is the comparison between two profiles — where you align and where friction is likely.
Who we share data with
Only the providers we need in order to operate, all of them processing data on our behalf and under contract:
- Hosting and database, so the service exists at all
- Email delivery, for the notifications you accepted
- Usage analytics, only if you consented
We don't sell your data or share it for advertising. Where a provider processes data outside the European Economic Area, it does so under the safeguards set out in the GDPR.
Your rights
Exercise any of these by writing to hello@roomealo.com. We'll reply within one month.
- Access: find out what data we hold about you
- Rectification: correct anything that's wrong
- Erasure: ask us to delete your account and your data
- Objection and restriction: ask us to stop processing certain data
- Portability: take your data with you in a readable format
- Withdraw consent at any time, without affecting what came before
If you think we've handled your data badly you can complain to the Spanish Data Protection Agency (aepd.es) or to your own national authority. We'd rather you told us first, but it's your right and it's there.
Under 18s
Roomealo isn't for under-18s and we don't create accounts for them. If we find one, we remove it.
Changes to this policy
If we change anything material we'll email you before it takes effect. Last reviewed: 2026-09.