Privacy Policy

Sign-in account with Google or Apple

You sign in only with Google or with Apple. We have no passwords.

From Google we receive your Google account id, your email address, your name and your picture. From Apple we receive your Apple id, your email address (or the hidden address Apple creates for you) and, on the first sign-in only, your name.

We keep the email, the provider (Google or Apple), your id with that provider and when the account was created. If you change your email with Google or Apple, we update it the next time you sign in.

On your first sign-in with Google we copy the picture from your Google account as a photo on your Strehana profile. We do this once per account.

When you sign in with Apple through the app, we keep the token Apple gives us, so that we can end our access at Apple when you delete your account.

We also keep whether the account is suspended or banned, until when and for what reason.

Profile

The name on your profile is the one Google or Apple gave us, or the one you type in. You can change it. We also keep what you fill in:

• photos
• date of birth and gender, optional (after the identity check they come from your ЕГН, see section 3)
• whether you study, work or both
• languages
• a text about you and about the flatmate you are looking for
• habits: smoking, pets, how social you are, daily routine, working from home and working hours, how often guests come over, whether you are part of a couple
• up to 5 personality traits and up to 3 interest groups

While you use Strehana we create and keep: whether you are online and when you were last active, how quickly you reply to messages (average time and a score), how complete your profile is (a score from 0 to 100), what you are looking for on Strehana, and internal dates for your first steps, for example since when you have been looking for a room.

We keep when you accepted the Terms of Service and this policy, and which version.

Card

Your card says what you are looking for. In it we keep:

• your maximum monthly budget
• your move-in date and for how long you are looking
• your text (up to 500 characters)
• the places you chose: a neighbourhood, a city or a point on the map (for example a place or an address), with a radius
• whether you accept buddy-ups
• whether your photo is shown on the card
• the card's status and dates, and whether it is featured and until when

Alongside the card we also keep how many different signed-in people have seen it, a snapshot of your profile completeness score, a copy of your gender and whether you smoke (for the deck's filters), and the reason if our team restricted it.

The name, age, photo and habits others see on the card are not stored in it. We take them from your profile when the card is shown.

Room listings

When you publish a room, we keep everything in the listing:

• title, description and photos
• the exact location of the home: the point on the map and the address or place name you chose
• the rooms: name, description, size, rent, deposit, available from, bed, photos, for how long they are let
• the home: floor and number of floors, parking, accessibility, bills, rules on smoking and pets
• who lives there: number of people, ages, whether the host lives in the home, type, gender mix and atmosphere of the household, children and how many, pets, languages
• your role: owner, current tenant or subletter, and whether you live in the home
• how viewings work and whether you accept applications only from people with a checked identity
• the listing's status and dates, whether it is featured and until when, and the reason if our team restricted it

The data on who lives in the home is also data about other people. Everyone can see it (see section 7).

We count each listing's views and impressions per day, without keeping in that counter who looked at it.

We also keep your saved rooms and, in the app, your saved searches: a name, the filters (price, place, habits) and whether you want a notification about a new matching listing.

Likes, invites, applications and matches

We keep who likes whom, and when:

• an invite from a host to a card: which room, status, dates and the message, if there is one
• a buddy-up, from a person to a card, with the same data
• an application to a room: who applied, to which listing and which rooms, status and dates. With it we keep a copy of the applicant's habits at the time of applying (smoking, pets, how social, routine, languages). If the application contains a note or details of a group, we keep those too: the number of people and each person's age, gender and occupation.
• a match: when two people like each other, an invite or an application becomes accepted and a conversation opens

For the contact ladder we count how many likes you sent in the last 24 hours. The counter is kept for up to 48 hours.

If you like someone without an account, the likes (up to 3) stay only on your device. We send them when you sign in.

Conversations and messages

We keep your conversations: between which people, about which listing, when they started, whether they are closed and by whom. We keep the text of every message, when it was sent and whether it was read.

When you hide a conversation, it disappears only for you. The messages stay.

Notifications and emails

We keep the notifications we show you in Strehana. Some contain a person's name, a listing title or the first 100 characters of a message.

In the app we keep your phone's notification token so that we can send you notifications. On the website, notifications are shown only in the open browser tab and do not go through any outside service.

We send you emails about a new application for your room, an accepted application, a received or accepted invite or buddy-up, unread messages, new rooms and people in your areas (a daily summary), confirmation of a card payment, and our team's decisions on your content or account, and on reports, appeals and notices you sent.

The unread-message email names nobody and quotes no messages. You can unsubscribe from it and from the daily summary through the link in the email itself. We keep these settings.

The deck

When you browse the deck while signed in, we record every card we showed you: when, in which position, whether you saw it and for how long, whether you passed or liked it, on the website or in the app, and the reasons for the order.

This is how we avoid showing you the same cards again. Without an account we do not record this on the server. Passed cards are remembered only on your device, for 30 days.

Reports, notices, appeals and decisions

When you report a card, a listing, a message or a person, we keep who reported, what, the reason, your text, the legal provision if you name one, the status and our team's notes. The reported person is not told who reported them. When we decide, we tell you what we decided, in the app and by email, with a way to appeal.

Anyone can send a notice of illegal content, also without an account, from the page strehana.com/en/report. We keep the link to the content, the reason, the provision, the explanation, the name and email if you give them, the decision and our team's notes. We also keep a salted hash of your IP address, to limit notices to 5 per hour from one address.

When you appeal a decision from the page strehana.com/en/appeal, we keep which decision the appeal is about, your text, your account or, if you are not signed in, your email, the outcome of the appeal and our reply.

When we restrict a listing, a card or an account, we keep the decision: what we decided, the facts, the ground and the provision, if any. We send them to you as a statement of reasons by email and, for listings and cards, also as a notification.

Blocks and feedback

We keep whom you blocked and when.

When you write to us through «Помощ и обратна връзка» (Help and feedback), we keep the category, the subject, the text, the page you wrote from, your browser and the screenshot, if you attach one.

Data other people give about you

Sometimes we receive data about you from other people: a host describes who lives in the home, an applicant describes their group, someone writes to you or reports you or your content.

By card on the website (Stripe)

Card payments on the website go through Stripe. You type your card or wallet details (Apple Pay, Google Pay) into a Stripe field. They go straight to Stripe and do not pass through our servers.

We send Stripe the amount, the currency, our payment number, your account id, the type of service and which listing, card or application it is for.

Stripe's code loads only on the payment pages. It collects data about your device and sets cookies to prevent fraud.

After a card payment we email you a confirmation: the service, the amount, when it starts and ends, the payment number and the consent you gave at checkout for the service to start at once and to lose the 14-day right of withdrawal, with the time and the Terms version. Without such consent, the email describes your 14-day right of withdrawal.

In the app (App Store and Google Play)

In the app you pay through Apple's App Store or through Google Play. The payment and its details stay with Apple or Google. They also send you the receipt.

The app sends us the store's receipt. We check it and keep only the transaction number and the product. We do not keep the receipt itself. We check Google Play receipts through Google.

When Apple or Google refund a payment, we learn about it and stop the paid service.

What we keep for each payment

• type, amount, duration, status, dates and which listing, card or application it is for
• the Stripe payment number or the store transaction number
• the consent to start at once, with the time and the Terms version
• the promo code, if you use one, or who on our team gave the service for free and why
• whether the payment came from the website, Android or iOS and whether there was advertising consent
• if there was advertising consent: Meta's identifiers (_fbp, _fbc), the IP address and the browser the payment came from

We also keep until when each paid service runs.

Record of your cookie and analytics choice

When you answer the cookie banner on the website or the analytics question in the app, we keep your choice (analytics yes or no, advertising yes or no), the policy version and when. With the record we keep a random id from the browser, your account if you are signed in, a salted hash of your IP address and your browser (up to 512 characters).

This lets us show what choice you made and when.

Server logs

Every request to our servers is written to a log: its address and parameters (for example the text of a place search), the IP address, the browser or app, the result and the time.

The logs stay on the servers our services run on. We do not collect them in a separate system.

To limit excessive requests, we hold your IP address or your account id in a counter for up to one minute, and for place searches also until the end of the day (UTC).

Device location

In the Android app, when you tap the location button on the map for a listing's address, your phone asks for permission. We use the location only to move the map. We do not send it to our servers. Google's map sees it to show your dot. As the room's location we store only the point you choose.

The iOS app does not ask for access to your location.

On the website, the location button on the map for a listing's address asks your browser and only moves the Google map. We do not send the location to our servers.

Crash and error reports

The app sends crash and error reports to Sentry and to Google's Firebase Crashlytics. A report contains the error, the steps before it (for example which screens and which addresses of our server were open, with ids removed), the language, the device, the system and the app version. Sentry also receives speed data for some sessions.

The reports are not linked to your account. We do not send your id.

You can stop them at any time: in Settings, section «Поверителност» (Privacy), the «Споделяй диагностика» (Share diagnostics) switch, and without an account from the «Спри отчетите» (Stop the reports) line on the sign-in screen. Stopping applies from then on.

The website sends Sentry reports of errors in the browser: the error message, the page address without sign-in data, the browser and system, and speed data for 10% of page loads. Sentry sees your IP address when it receives the report.

Data on your device

The website keeps some data in your browser, for example your cookie choice, the cards you passed and drafts of a listing or a card. The list is in the «Политика за бисквитки» (Cookie Policy) (strehana.com/en/cookie-policy).

On the sign-in pages and forms, Apple's sign-in library loads. Sign-in with Google opens in a separate Google window only when you press the button.

The app keeps your sign-in data in the phone's protected storage (the Keychain on iOS, encrypted with the Android Keystore on Android). It also keeps a cache of your profile, listings, conversations, notifications and payments, drafts, passed cards and pictures. When you sign out it deletes them, except a few device settings, such as your analytics and diagnostics choices.

On an iPhone, the app's settings and drafts may end up in the phone's backups.

Each time the app starts, Google's Firebase creates an installation id and a notification token. We send the token to our server only while you are signed in, and delete it when you sign out.

Each time it opens, the app asks PostHog whether its version is still supported. The request carries a new random id each time and no data about your account. PostHog sees your device's IP address.

When you download a copy of your data in the app, the file is saved in the phone's temporary folder so that you can share it.

With analytics consent

• Google Analytics (website): which pages you open and what you do on them, _ga cookies and, when you are signed in, your account id and three measures of it: how complete it is, whether it is verified and how many days old it is. Google sees your IP address.
• PostHog (website): the same actions and pages, the full page address, the device type, system and language, the source of your first visit and, after sign-in, your account id. PostHog sees your browser's IP address and can derive an approximate location from it.
• PostHog (app): which screens you open and your actions in the deck and elsewhere, the app version, the device type, system, language and your account id. On Android also the install source from Google Play.
• PostHog (from our server): events for your actions, for example a new listing, a like, a message without its text, a payment, with your account id and data such as city, budget, amount, gender, occupation, age group, your email domain (not the address), ids of listings and of the other people in the action, and the listing's location rounded to about 1 km. These events do not carry your IP address.
• Source of the visit to the website: where you came from and the link parameters (utm, gclid, fbclid), in a cookie for 90 days. The channel and campaign are sent to our server with your actions.

When another person has given analytics consent, the events for their actions can contain your account id, for example when they write to you or apply to your room.

With advertising consent

We share key actions with Meta (Facebook, Instagram) to measure our advertising:

• Meta Pixel (website): pages opened, listings viewed, searches by city, applications, saved listings, messages, new listings and cards, starting a payment and payments, with amounts and ids of listings and payments. The Pixel sets the _fbp and _fbc cookies and sends your name, gender and account id, hashed.
• From our server (Meta Conversions API), for actions on the website and in the app: registration, application, first message, saved listing, payment, new listing and new card. We send your email, name and account id hashed, on registration and a new listing or card also your gender, and unhashed the IP address, browser, _fbp and _fbc, plus the city, listing type, amount and ids.
• If you give advertising consent within 7 days of registering, we also send Meta the registration event.
• In the Android app: the id of the click on a Meta ad, if the install came from such an ad.
• If you also have analytics consent, Google Analytics also receives Google's advertising signals.

We send Meta a server event only if consent was given at the moment of the action. We do not send Meta a phone number, date of birth or precise location.

Without consent

Even without consent, our server sends PostHog counts of actions, so that we know how much Strehana is used. They all go under one shared id, the same for everyone, without your account id and without your IP address, and with the hour but not the minutes. They carry only general fields, for example the kind of listing, the number of results, the position in the deck and whether a sign-in attempt worked, with Google or with Apple. They carry no city, budget, number of places or payment amount.

In the same way we count the cards shown in the deck to people without an account, answers to the cookie banner and failed sign-in attempts (provider and type of error).

How to change your choice

On the website, the «Настройки за бисквитки» (Cookie settings) link at the bottom of the page opens the banner again. If you are signed in, you can also use Settings, section «Поверителност и данни» (Privacy and data), row «Бисквитки» (Cookies).

In the app: Settings, section «Поверителност» (Privacy), the «Продуктова аналитика» (Product analytics) switch.

When you withdraw consent, we stop collecting and sending this data. Our server picks up the change within 5 minutes. Withdrawing does not affect what was already sent.

When you sign out in the app, analytics is switched off. If you sign in again with the same account, we apply your choice again.

Everyone, even without an account

• Room listings in full: text, photos, prices, rooms, floor, who lives in the home and its rules.
• The room's location is approximate: the point is moved by 100 to 125 metres, and instead of the address it shows «neighbourhood, city, country». Only the listing's owner sees the exact location. We do not show it after a match either. The address can be shared in the conversation.
• For the host of every listing: first name, age, gender, the first profile photo, the «Потвърден» (Verified) badge and the host's number of listings. That photo cannot be hidden from the listings.
• The card: first name, age (if there is a date of birth), gender (if given), budget, move-in date, duration, text, the places with their points on the map, languages, the «Потвърден» (Verified) badge, whether you accept buddy-ups, when it was published and whether it is featured. If you choose a point (for example a place or an address), it is shown exactly.
• The first photo from your profile is shown on the card, unless you hide it in the card form.
• Every listing's page contains the host's account id. With it, anyone can open the same person's other active listings and active card.
• The address of every uploaded photo contains the id of the account it was uploaded from.
• The pages of active listings and cards can appear in search engines. The preview when a card is shared contains the first name, the places and the start of the text or the budget, but never your photo. The preview of a listing contains a room photo, the title, the price and the city, with no data about the host.

People with an account also see

• the habits on the card: smoking, pets, occupation, daily routine, guests, working from home and whether you are part of a couple
• your profile: the name as entered, all photos, the text about you and about the flatmate you are looking for, your age (not the date of birth), gender, occupation, languages, habits, traits and interests, the badge, the scores for profile completeness and reply speed, whether you are online and when you were last active, and since when you have been on Strehana
• your account id, including on your card and your listings

A person you block does not see your profile, card and listings while they are signed in, and you do not see theirs. Without an account, public content stays visible to everyone.

Other people do not see

• your email
• your date of birth (we show only your age)
• your ЕГН, which we do not keep
• the exact location of your room
• your messages, except the person in the conversation
• your payment records

To provide Strehana to you (contract, Art. 6(1)(b) GDPR)

• the account and sign-in with Google or Apple
• your card and listings and showing them in the deck
• the deck and its order for people with an account
• likes, invites, buddy-ups, applications, matches and conversations, with the contact ladder
• notifications and emails about things that concern you
• the identity check, when you ask for it
• the paid services

Legitimate interest (Art. 6(1)(f) GDPR)

• security and protection from abuse: server logs, limiting excessive requests, blocks and reports of breaches of the Terms
• Stripe's fraud protection for card payments
• crash and error reports from the website and the app, so that we can fix errors. In the app you can stop them.
• the counts without consent that our server sends PostHog under a shared id, so that we know how much Strehana is used
• showing and ordering the deck for people without an account
• the daily summary and the unread-message emails, which you can unsubscribe from
• Google's maps on listing pages and when choosing an address
• checking whether the app version is still supported
• keeping the ЕГН hash for 12 months after an account is deleted, so that nobody can avoid a restriction with a new account
• keeping reports about content and records of listing reviews after the content is deleted

You can object to this processing (see section 13).

Consent (Art. 6(1)(a) GDPR)

• analytics: Google Analytics, PostHog and the source of the visit
• sharing with Meta and the advertising signals to Google

You can withdraw your consent at any time (see section 6). Withdrawing does not affect processing before it.

Legal obligation (Art. 6(1)(c) GDPR)

• the accounting and tax records of payments
• notices of illegal content, statements of reasons and appeals under the Digital Services Act
• the records with which we prove your consent
• our answers to requests under this policy

Deleting your account

You delete your account from Settings: on the website in «Опасна зона» (Danger zone), row «Изтрий профила завинаги» (Delete account permanently), and in the app in section «Поверителност» (Privacy), row «Изтриване на акаунт» (Delete account).

Deletion is immediate and final. There is no cooling-off period and it cannot be undone.

Your account disappears at once. Our other services delete their data, usually within seconds. If one fails, we try again automatically over the following hours.

We delete the account, the photos you uploaded, the card, your listings and the applications to them, the likes, invites and buddy-ups sent and received, your applications, the deck history and the records of who saw your card or listings, the conversations, your notifications and other people's notifications that mention you, the reports filed by you and against your account, the blocks, the feedback, the saved rooms and searches, the notification tokens, the email settings and the identity check record.

Conversations are deleted in full, also for the other person in them. They also lose their own messages in the conversation.

If your account is linked to Apple through the app, we also end our access at Apple.

We send PostHog a request to delete the data about your account and the events linked to it. If advertising consent was ever given, we send Meta an erasure signal with a hashed account id.

What remains after deletion

• the payment records, with no link to you, until 10 years after the end of the year of payment; Stripe keeps its own record of the payment with your account id
• the records of the cookie and analytics choice, with no link to the account
• the ЕГН hash and the deletion date, for 12 months
• reports and notices from other people about a specific listing, card or message, until 12 months after the decision on them
• records of listing edit reviews
• the id of the deleted account and the date of deletion, for 30 days, so that we can finish the deletion in all our services
• technical records of revoked sessions, for up to about an hour
• data in the backups, until the backups are replaced
• the data Google Analytics, Meta and Stripe already received, under their rules, and the counts without an id in PostHog

A copy of your data

From Settings you download one JSON file with your data: on the website in section «Поверителност и данни» (Privacy and data), row «Изтегли данните си» (Download your data), and in the app in section «Поверителност» (Privacy), row «Изтегли моите данни» (Download my data). You need to be signed in.

The file contains:

• the sign-in account: email, provider and when it was created
• the profile and the records of accepting the Terms and this policy
• the records of your cookie choice
• the card
• the invites and buddy-ups received and sent
• your listings
• the applications sent and received
• the deck history
• the conversations and every message in them
• the notifications
• the email settings
• the saved searches and rooms
• the people you blocked
• the reports you filed and your feedback
• the payments
• the identity check record: whether verified, when, by which route, the date of birth, the sex, the Evrotrust transaction number and whether we keep an ЕГН hash (never the hash itself or the ЕГН)

Photos are in the file as links. For a copy of anything that is not in the file, write to legal@strehana.com.