Privacy Policy

Last updated: October 21, 2026

We wrote this in plain language on purpose. Privacy policies shouldn’t require a law degree — and your property search shouldn’t come with unpleasant surprises either. Here’s exactly what we collect, why, and what you can do about it.

The short version:

We collect only what’s needed to run your searches and keep the app working.
We don’t sell or rent your data. Ever.
Your search data is yours. Export it or delete it whenever you want.
We use a few trusted services (cloud hosting, analytics, billing through the App Store) to make Roomy work — and nothing more.

This summary is meant to make things easier to understand. The full text of the policy below is what legally applies.

1. WHO WE ARE

Roomy is an AI property search assistant made by Flabbergast Agency, Zavrtnica 17, 10000 Zagreb, Croatia (“Flabbergast”, “we”, “us”, “our”). We are the data controller for the personal data described in this document. Questions? Email us at info@flabbergast.agency.

2. DATA WE COLLECT

2.1 Account data: your email address and the name you give us.

2.2 Search and preference data: your AI search queries, filters, saved listings, bookmarks, price alerts, and notes you add to properties.

2.3 Imported data: when you import saved searches or listing links from external portals, we process the records you bring in.

2.4 Usage data: how you use the app and website — events, performance data, pages visited, and the time, date, and duration of sessions.

2.5 Technical and device data: device type, operating system, app version, IP address, unique device identifiers, and diagnostic data.

3. HOW WE USE YOUR DATA

Providing and operating the service: running AI property searches, syncing saved listings between devices, generating price alerts, and delivering relevant recommendations.
Managing your account and subscription.
Improving Roomy: analytics, fixing bugs, and enhancing the quality of AI recommendations.
Communicating with you about your account or important changes.
Meeting our legal obligations.

Performance of a contract: your account, search data, and subscription.
Legitimate interests: improving and securing the service, as well as analytics, while respecting your rights and freedoms.
Consent: where we ask for it (e.g., marketing emails). You can withdraw your consent at any time.
Legal obligation: accounting and tax records, and responding to lawful requests.

We don’t sell or rent your personal data. We use trusted service providers (processors) that act on our instructions and are bound by GDPR-compliant contracts:

Cloud hosting and sync: secure cloud infrastructure for storing and syncing your data.
Analytics: PostHog, to understand usage and improve the app.
Payments and subscriptions: the Apple App Store and Google Play handle billing. We don’t receive your payment card details.
Customer support tools: to handle your inquiries.

We may also disclose data when required by law or to protect our legal rights. If Flabbergast is ever involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, in accordance with this policy.

6. INTERNATIONAL TRANSFERS

We aim to store and process your data within the EU/EEA. When a provider processes data outside the EEA, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

7. HOW LONG WE KEEP DATA

Active accounts: while your account is active, we keep the data needed to run the service.
Saved searches after inactivity: if you stop using Roomy without deleting your account, we keep your searches and bookmarks for up to 3 years so you can come back and retrieve your data. After an extended period of inactivity, we may notify you by email that your data still exists, so you can decide whether to keep it or delete it.
Data deletion: when you delete your account or request deletion of your data, we remove it from active systems without delay. Backups are deleted as part of the regular rotation.
Accounting records: kept in accordance with Croatian accounting and tax law (currently up to 11 years).
Anonymized or aggregated analytics data may be kept longer to improve the service.

8. SECURITY

We use encryption in transit and at rest, secure authentication, access controls, regular backups, and continuous monitoring. No system is 100% secure, so we can’t guarantee perfect security, but we take it seriously and work to ensure it.

You have the right to access, correct, delete, restrict, and transfer your data (export to PDF or CSV), to object to certain processing, and to withdraw your consent. To exercise any of these rights, email us at info@flabbergast.agency or use the in-app tools. We’ll respond within 30 days and may ask you to verify your identity.

You can also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP, azop.hr) or with the supervisory authority in the EU member state where you live.

10. CHILDREN

Roomy is not intended for anyone under 16, and we don’t knowingly collect their data. If you believe a minor has given us personal data, contact us and we’ll remove it.

11. COOKIES AND SIMILAR TECHNOLOGIES

Our website and app use cookies and similar technologies for signing in, remembering your settings, and collecting anonymized usage statistics. You can manage cookies through your browser or app settings.

To show you the website in the right language, we use your IP address to determine only the country you’re visiting from. We do this on our own server, using the IP Geolocation by DB-IP database, and for this purpose we neither store your IP address nor share it with third parties. If you choose a language manually, we remember that choice in the “lang” cookie.

12. CHANGES TO THIS POLICY

We may update this policy. For significant changes, we’ll notify you in the app or by email. The current version is always available at stanko.app/privacy-policy.

13. CONTACT

Flabbergast Agency
Zavrtnica 17, 10000 Zagreb, Croatia
Email: info@flabbergast.agency

Back to homepage