Privacy Policy

Effective date: April 9, 2026

Last updated: April 9, 2026

1. Who We Are

Lyvi is a roommate-matching platform designed for college students and recent graduates. We help users find compatible roommates based on lifestyle, university affiliation, and personal preferences. Lyvi operates as the data controller for the personal information described in this policy.

Contact: support@lyvi.io | lyvi.io

2. Information We Collect

2.1 Information You Provide Directly

• Account registration: First name, last name, date of birth, email address, and password
• Profile information: Gender, age, university, graduation year, major, company, job/position, industry, and profile photos
• Location: State and city of your intended or current residence
• Social verification: Instagram username and/or LinkedIn profile URL, voluntarily connected to verify your profile
• Lifestyle & personality data: Responses to questionnaires covering cleanliness, sleep schedule, social habits, pet preferences, and similar traits
• Housing preferences: Whether you have an existing place or are searching, number of roommates desired, and duration of stay
• In-app communications: Messages you send to other users through our chat feature

2.2 Information Collected Automatically

• Device information: Device type, operating system, unique device identifiers, and mobile network information
• Usage data: Screens viewed, features used, time spent on the Platform, match interactions, and referring URLs
• Log data: IP address, browser type, access times, and crash reports
• Approximate location: With your permission, to improve match relevance within your city

2.3 Information from Third Parties

• Social platforms: If you verify via Instagram or LinkedIn, we receive publicly available profile data consistent with your settings on those platforms
• Analytics providers: Aggregated usage and performance data from tools such as Mixpanel and Google Analytics

3. How We Use Your Information

4. Legal Basis for Processing

Where applicable under data protection law (including GDPR for EEA users), we process your data on the following legal bases:

• Contract performance: Processing necessary to deliver the services you've requested
• Legitimate interests: Improving the Platform, preventing fraud, and ensuring safety
• Consent: For push notifications, optional social verification, and marketing emails
• Legal obligation: Where required by applicable law

5. Sharing Your Information

We do not sell your personal information to third parties.

5.1 With Other Users

Your profile — including name, photos, university, age, gender, lifestyle preferences, and Instagram username — is visible to other registered users as part of the core matching experience. You control what appears on your profile through your settings.

5.2 With Service Providers

We share data with trusted third-party providers who assist in operating the Platform, including cloud hosting, analytics, push notifications, and customer support. These providers are contractually bound to use your data only for services performed on our behalf.

5.3 Partner Services (Opt-In)

With your explicit consent, we may share limited information with partners such as relocation services, furniture rental companies, and student housing providers. You may opt out at any time in your account settings.

5.4 Legal & Safety Disclosures

We may disclose your information if required to comply with applicable law, protect the rights or safety of Lyvi or our users, or detect and prevent fraud.

5.5 Business Transfers

In the event of a merger, acquisition, or asset sale, your personal information may be transferred. We will notify affected users before such a transfer takes place.

6. Social Media & Third-Party Integrations

Lyvi allows you to connect Instagram and/or LinkedIn for identity verification. When you do so:

• We only access publicly available information consistent with your privacy settings on those platforms
• We display your username or profile link so other users can verify your identity
• We do not access your private messages, post on your behalf, or request unnecessary permissions
• You may disconnect any linked social account at any time through Profile Settings

7. Data Retention

• Active accounts: Retained for the duration of your account
• Deleted accounts: Permanently deleted within 30 days of a valid deletion request, except where required by law
• Chat messages: Deleted when your account is deleted or when both parties unmatch
• Anonymized data: De-identified, aggregated data may be retained indefinitely for research purposes
• Legal holds: Certain data may be retained longer where required by law or active legal proceedings

8. Security

We implement industry-standard security measures including:

• TLS encryption for all data in transit
• Encryption of sensitive data at rest
• Role-based access controls limiting employee access to personal data
• Regular security assessments and vulnerability testing
• Incident response procedures for potential data breaches

No security system is impenetrable. In the event of a breach affecting your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law.

9. Your Rights & Choices

To exercise any of these rights, contact support@lyvi.io or visit our support page. We respond within 30 days.

9.1 Marketing Opt-Out

Opt out of marketing emails by clicking "unsubscribe" in any email or contacting us directly. You will still receive transactional account-related emails.

9.2 Profile Visibility

You can control what information is displayed on your public profile through Profile Settings in the app.

10. Children's Privacy

Lyvi is intended for users 18 years of age or older. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, contact us immediately at support@lyvi.io and we will delete it promptly.

11. Push Notifications

With your permission, we send push notifications about new matches, messages, and updates. You can manage preferences via the Lyvi app under Profile → Notification Settings, or through your device's OS notification settings.

12. Cookies & Tracking Technologies

Our website uses cookies including:

• Essential cookies: Required for core website functionality
• Analytics cookies: To understand site traffic and user behavior (e.g., Google Analytics)
• Preference cookies: To remember your settings

You can manage cookies through your browser settings. Our mobile app may use equivalent device-based tracking technologies but does not use browser cookies.

13. California Privacy Rights (CCPA)

California residents have the following rights under the CCPA:

• Right to Know: Request details about categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Non-Discrimination: We will not discriminate against you for exercising CCPA rights
• Right to Opt-Out of Sale: We do not sell personal information

To submit a CCPA request, email support@lyvi.io with subject line "CCPA Request."

14. International Users

Lyvi is primarily operated and targeted at users in the United States. If you access our Platform from outside the US, your information may be transferred to and processed in the United States, where data protection laws may differ. For EEA or UK users, we rely on appropriate legal mechanisms such as Standard Contractual Clauses for international data transfers.

15. Changes to This Privacy Policy

We may update this policy periodically. When we make material changes, we will post the updated policy with a revised date and notify registered users via in-app notification or email. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

16. Contact Us

We aim to respond to all privacy-related inquiries within 30 business days.