Privacy Policy

Last Updated: March 19, 2026

At Kanelijo, your privacy matters to us. This policy explains what data we collect, how we use it, and the choices you have.

1. Information We Collect

When you create an account, we collect your full name, email address, phone number, and the role you select (Student/Seeker or Room Owner).
When you list a room, we collect property details such as title, description, address, photos, and rent amount.
When you submit an inquiry or booking request, we store the message and contact details exchanged.
When you contact us via the Contact page, we store your name, email, subject, and message.
We may also collect anonymous usage data such as pages visited and device type to improve our service.

To provide and maintain the Kanelijo platform and its core features.
To connect students and room seekers with property owners.
To display your contact information (phone number) to relevant parties during inquiries — only when an inquiry is made.
To send account-related emails such as OTP codes and booking notifications.
To respond to messages sent via our Contact Us page.
To improve our services based on usage analytics.

We do not sell, rent, or trade your personal information to any third parties.
Your phone number is shared only with the specific room owner or student you initiate contact with.
We use Supabase as our data infrastructure provider; your data is stored securely under their platform.
We use Cloudinary for image storage. Images uploaded are stored on their servers.
We may disclose data if required by law or to protect the safety of our users.

All data is stored securely using Supabase, which is built on PostgreSQL with row-level security.
Passwords are never stored in plain text; authentication is handled by Supabase Auth.
While we take reasonable security measures, no system is 100% secure. Please use strong passwords.
We retain your data for as long as your account is active. You may request deletion at any time.

You can update your profile information at any time from your Dashboard.
You may request a copy of your personal data by contacting us at kannelijo@gmail.com.
You may request deletion of your account and all associated data at any time.
You can opt out of non-essential communications by contacting us directly.

Kanelijo uses cookies for authentication sessions and to keep you logged in.
We do not use third-party advertising cookies.
You can disable cookies in your browser settings, but some features may not function correctly.

We may update this Privacy Policy occasionally. When we do, we will update the "Last Updated" date at the top of this page.
Continued use of Kanelijo after changes constitutes your acceptance of the updated policy.
For significant changes, we may notify you via email.