H
Habiw
Privacy & Data Protection Standards

Privacy Policy

Habiw is engineered with privacy-by-design standards. We do not sell your personal information, rent profile records, or track you across the web with advertising brokers.

Terms of ServicePrivacy Policy

Core Privacy Commitments

Effective Date: September 2026 • DPDP Act 2023 & IT Rules 2021 Alignment

0% Data Selling
0% Personal Data Selling: We never sell, rent, or trade your personal profile data, tenant records, or documents to third-party data brokers.
Server-Side Contact Masking: Email addresses and phone numbers remain masked until mutual match or booking contact.
Passwordless Access: We use secure one-time magic links and OTPs for authentication—we never store user passwords.
Zero Ad Trackers: No Google AdSense, Facebook Pixel, or commercial marketing cookies are used on the platform.
Zero Document Collection: We never request, collect, or store government identity documents (Aadhaar, Passport, PAN), property deeds, or biometric data.
Full Erasure Rights: Request complete account, listing, and data erasure anytime with permanent purge within 7 business days.

1Information We Collect

We collect only the essential information necessary to calculate compatibility matching, provide property management tools, and maintain security:

  • Authentication & Account Profile: Email address (used strictly for passwordless login authentication and session access). We never store user passwords. We do not collect government identity documents (such as Aadhaar, Passport, Voter ID, or PAN cards), property title deeds, or biometric records.
  • Location & Housing Preferences: Target city, preferred neighborhood, approximate geographic coordinates, budget range, and commute radius.
  • Lifestyle & Living Traits: Self-reported answers across lifestyle traits (sleep schedule, cleanliness scale, WFH rhythm, noise tolerance, dietary choices, guest policy, smoking/drinking tolerances, cooking frequency, pet policy, and social battery).
  • Property Listings & Operational PG Data: For accommodation hosts and PG operators—room/bed numbers, occupancy status, tenant names, contact numbers, check-in dates, and rent payment logs (paid/unpaid timestamps). Private operational notes made by hosts are strictly confidential to the property management team and are never made visible to public seekers.
  • Portable Tenant Records & Rental History: Verifiable stay tenure, on-time rent payment reliability ratios, and platform good-standing tokens (htr_...) compiled with tenant consent for portable rental credentials.
  • Security & Anti-Fraud Telemetry: Anonymous client device identifiers (habiw_device_id), IP subnet signatures, browser user-agent hashes, and request rate metrics collected strictly to detect Sybil attacks, multi-accounting quota circumvention, fake listings, and referral fraud.

2How We Use Your Data

Your information is processed strictly to deliver Habiw platform features:

  • Calculating lifestyle compatibility scores against prospective flatmate profiles.
  • Applying geographic radius filters to surface relevant nearby accommodations and flatmates.
  • Powering owner portfolio dashboards, bed occupancy tracking, and tenant rent collection bookkeeping.
  • Fraud Defense & Sybil Protection: Correlating device and network signals to prevent duplicate accounts created to bypass property caps, fake listings, and referral manipulation.
  • Generating verified, portable tenant record credentials upon tenant request.
  • Transmitting transactional notifications (login links, interest alerts, mutual match notifications, and rent reminders).
  • Zero Commercial Data Selling: We do not sell, rent, or trade your personal information or contact details to third-party advertising brokers.

3Cookies, Local Storage & Device Signals

Habiw uses essential first-party cookies and client storage strictly to provide secure authentication, maintain active sessions, attribute genuine referral rewards, and defend the community against Sybil multi-account fraud. We do not use third-party advertising cookies, cross-site trackers, or commercial retargeting beacons.

sb-*-auth-tokenEssential
Duration: Session / Refresh Token

Issued by our Supabase SSR infrastructure to maintain your authenticated session securely via encrypted HTTP-only cookies. Essential for accessing your profile and dashboard.

habiw_device_idAnti-Fraud / Security
Duration: 1 Year (First-Party)

A client-generated random UUID token used strictly for device fingerprinting to prevent Sybil attacks (duplicate accounts created to circumvent the 1-property free tier cap) and referral gaming. It does not track personal browsing history across external websites.

habiw_refAttribution
Duration: 7 Days (First-Party)

Temporarily records the referral code of a community member who invited you to ensure genuine referral rewards are credited upon signup.

habiw_cookie_consentLocal Storage
Duration: Persistent

Stored in your browser's localStorage to remember that you have reviewed and acknowledged our essential cookie and safety notice.

Managing Cookies: You can configure your browser to block or delete cookies at any time. However, blocking essential session cookies will prevent you from signing in or using passwordless authentication.

4Third-Party Data Processors & Infrastructure

To operate the service reliably, we work with trusted infrastructure providers who process data strictly under confidentiality agreements and without data monetization rights:

Cloud Hosting & Database Infrastructure

Encrypted cloud servers and managed PostgreSQL databases used to store user profiles, manage property listings, and execute geospatial match queries.

Transactional Communication Services

Secure API-based email delivery providers used solely to transmit one-time authentication passcodes (OTP), mutual match alerts, and booking updates.

Payment Gateways (Subscriptions & Listing Boosts)

Certified payment processing partners (Razorpay / Cashfree) for Pro subscriptions and listing boosts. All payment card and banking details are processed directly on PCI-DSS compliant payment gateways and are never handled or stored by Habiw servers.

5Data Retention, Listing Deletion & User Rights

You maintain full ownership and control over your profile, listings, and personal data:

  • Update & Edit: You can edit lifestyle traits, budget, location preferences, or property details directly from your dashboard at any time.
  • Listing Deletion Rights: Landlords and accommodation hosts have the autonomous right to permanently delete their property listings, room photos, and operational stay records at any time directly from the owner portal.
  • Portable Tenant Record Revocation: Verified tenants retain total ownership over their public rental history credentials (htr_...) and can regenerate or permanently revoke public access tokens at any time.
  • Pause / Withdraw: Toggle your profile status to paused or moved_out to immediately withdraw your profile from candidate discovery feeds.
  • Complete Erasure (Deletion): Send an email from your registered address to habiw.official@gmail.com with the subject “Data Deletion Request”. All your profile records, preferences, listings, and compatibility data will be permanently purged within 7 business days.

6Grievance Redressal & Contact Desk

In accordance with the Digital Personal Data Protection Act 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, our designated Grievance Desk can be reached at:

Habiw Data & Grievance Desk
Acknowledgment Timeline: Within 48 hours
Location: Bengaluru, Karnataka, India

Zero Brokerage Housing

Connect directly with flatmates & hosts

Get Started