Privacy Policy

Kozy Labs, LLC, a New Jersey limited liability company and the operator of KOZY (“KOZY,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the KOZY mobile application, website, and related services (collectively, the “Service”).

This Policy is designed to be read together with our Terms of Service and User Data Management Policy. If a specific in-app notice describes a particular data practice in more detail, that notice also applies to that feature.

1. Scope and Service Availability

This Policy applies to personal information processed through KOZY accounts, profiles, roommate and housing discovery, room or housing listings, location-based features, chat requests and messages, blocking and reporting tools, customer support, security systems, and other KOZY features that link to this Policy.

KOZY may be offered in selected U.S. markets. This Policy does not govern the independent privacy practices of other users, landlords, property owners, brokers, websites, or third-party services.

2. Personal Information We Collect

2.1 Account and Registration Information

When you create or maintain an account, we may collect your name, display name or nickname, email address, telephone number, date of birth, age, gender, profile photograph, authentication information, and account identifiers.

2.2 Profile and Matching Information

You may choose to provide a personal introduction, desired location, move-in timing, rent range or budget, housing preferences, roommate preferences, lifestyle information, occupation or school affiliation, smoking or pet preferences, household preferences, and other information you voluntarily add to your profile. Some of this information may be visible to other users as described below.

2.3 Listing and Housing Information

If KOZY allows you to post a room or housing opportunity, we may collect the property address or general location, listing title and description, photographs or videos, price or rent, deposit information, availability date, minimum stay, room and property features, house rules, occupancy information, and other details you provide.

2.4 Location Information

With your permission, KOZY may collect approximate or precise device location while you use location-based features. We may also collect a city, neighborhood, ZIP code, map location, latitude/longitude, or search area that you manually provide. We use location to provide nearby matches or listings, approximate distance information, map-based search, filters, and relevant recommendations.

Precise geolocation may be treated as sensitive personal information under applicable law. Where required, KOZY will obtain consent before processing precise geolocation and will provide a method to withdraw consent. Unless KOZY clearly discloses a feature that requires it and obtains the appropriate permission, KOZY does not collect continuous background location.

2.5 Messages and Communications

When you communicate through KOZY, we may process chat requests, messages, timestamps, delivery or status information, images or files you send, block information, reports, complaints, and customer-support communications. Messages are delivered to their intended recipients and may also be accessed by authorized KOZY personnel or automated systems where reasonably necessary for safety, fraud prevention, moderation, support, policy enforcement, or legal compliance.

2.6 Device, Usage, and Technical Information

We may automatically collect device type and model, operating system, app version, IP address, language and time-zone settings, device or application identifiers, login dates and times, profile and listing views, searches, filters, interaction and feature usage, referral information, crash reports, diagnostic data, security logs, and approximate location inferred from IP address.

2.7 Safety, Fraud, and Verification Information

We may collect information submitted in reports, block records, suspicious-activity indicators, screenshots or supporting materials, investigation notes, and information used to verify an account or prevent repeat abuse. If KOZY introduces identity or other verification features, we will provide additional notice describing the information required and how it is handled.

2.8 Information from Third-Party Sign-In or Other Sources

If you use Apple, Google, or another third-party sign-in provider, we may receive information you authorize that provider to share, such as your name, email address, profile photograph, and account identifier. We may also receive information about you from other users, service providers, fraud-prevention partners, or lawful public sources where reasonably necessary and permitted by law.

3. Information We Ask You Not to Put in Public Profiles

Do not place Social Security numbers, passwords, bank credentials, full payment-card information, government identification numbers, or other highly sensitive information in a public profile, listing, or ordinary chat. KOZY does not need this information for basic roommate matching. If a future feature legitimately requires sensitive information, KOZY will provide a specific disclosure and safeguards appropriate to that feature.

4. How We Use Personal Information

• Create, authenticate, secure, and manage accounts.
• Display profiles and listings and provide roommate and housing discovery.
• Provide search, filters, maps, approximate distance, matching, and recommendations.
• Deliver chat requests, messages, notifications, and customer support.
• Detect fake accounts, fake listings, scams, spam, harassment, abuse, security threats, and policy violations.
• Investigate reports, enforce blocks or restrictions, and protect users and the Service.
• Analyze usage, troubleshoot errors, improve performance, test features, and develop new functionality.
• Send verification, security, administrative, legal, and service-related communications.
• Send marketing communications where permitted and subject to your opt-out choices.
• Comply with law, respond to lawful requests, enforce agreements, and establish, exercise, or defend legal claims.
• Create aggregated or de-identified information that is not reasonably linkable to an individual, and use it for lawful business purposes.

5. Matching and Automated Recommendations

KOZY may use information such as your profile, preferences, approximate location, searches, listing views, and interactions to rank or recommend potential roommates or housing opportunities. These recommendations are designed to help you discover relevant users or listings and are not intended to make decisions that produce legal or similarly significant effects about you, such as credit, employment, insurance, or tenant-screening decisions.

6. When We Disclose Personal Information

6.1 Other KOZY Users

To provide the Service, we may display selected profile or listing information to other users, such as your display name, profile photograph, age or age range, gender, personal introduction, roommate or housing preferences, move-in timing, rent range, general location, approximate distance, and listing details. Private messages are disclosed to their intended recipients.

KOZY does not ordinarily display your password, private email address, private telephone number, full date of birth, exact real-time location, government identification number, or financial-account credentials to other users.

6.2 Service Providers and Processors

We may disclose information to service providers that help us operate KOZY, including providers of cloud hosting and databases, authentication, email and SMS delivery, push notifications, mapping and geolocation, analytics and crash reporting, security and fraud prevention, customer support, content moderation, and payment processing if paid features are introduced.

We require service providers to handle personal information for authorized purposes and to provide protections consistent with applicable law and our contractual requirements. Third-party providers may also process information under their own privacy obligations where they independently determine the purposes of processing.

6.3 Legal, Safety, and Enforcement Disclosures

We may disclose information when we reasonably believe it is necessary to comply with law, court orders, subpoenas, or lawful government requests; respond to emergencies; protect a person from serious harm; investigate fraud or illegal conduct; enforce our Terms; protect KOZY, users, or the public; detect or respond to security incidents; or establish, exercise, or defend legal claims.

6.4 Corporate Transactions

Information may be disclosed or transferred in connection with a merger, acquisition, financing, investment, restructuring, bankruptcy, sale of assets, or similar corporate transaction, subject to applicable law and appropriate confidentiality protections.

6.5 At Your Direction

We may disclose information when you direct, request, or consent to the disclosure.

7. Sale, Targeted Advertising, and Cross-Context Tracking

KOZY does not currently sell personal information as “sale” is defined under applicable comprehensive U.S. state privacy laws, and does not currently sell precise geolocation information to data brokers. KOZY does not currently use personal information for cross-context behavioral or targeted advertising based on activity across unaffiliated apps or websites.

If these practices change, KOZY will update this Policy, provide any legally required notice or consent, and provide applicable opt-out mechanisms, including recognized universal opt-out signals where required by law.

8. Sensitive Personal Information and Consent

Certain information may be considered sensitive under applicable law, including precise geolocation and certain information you may voluntarily provide about identity, health, sexual orientation, gender identity, citizenship or immigration status, or other protected attributes. KOZY does not ask users to place sensitive information in public fields unless it is genuinely necessary for an offered feature.

Where applicable law requires consent to process sensitive data, KOZY will request a clear affirmative choice separate from general acceptance of these policies. Where required, you may withdraw consent through the same or a comparably easy method, and we will stop the consent-based processing within the period required by law, subject to lawful retention and exceptions.

9. Your Location Choices

You may manage KOZY’s location access through your device settings. Where the operating system provides a choice, you may select approximate rather than precise location. If location permission is denied, KOZY may allow you to manually enter a city, neighborhood, or ZIP code, but some nearby or distance-based features may be limited.

10. Communications Choices

You may control push notifications through device settings. You may opt out of marketing emails using the unsubscribe link provided. If KOZY sends non-essential text messages, you may opt out using the instructions in the message, such as replying STOP where supported. You may still receive transactional, security, legal, and account-related communications.

11. Data Retention

KOZY retains personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining security, investigating fraud or abuse, resolving disputes, complying with law, and enforcing agreements.

• Account and profile information: generally while your account is active and until deletion is completed.
• Listings: while active and for a reasonable period afterward for safety, support, fraud prevention, and dispute resolution.
• Messages: while needed to provide messaging and for a reasonable period afterward for safety, moderation, fraud prevention, and disputes. Copies delivered to another user may remain in that user’s account.
• Location information: only as reasonably necessary for location-based features. KOZY does not intend to maintain a continuous location-history log unless a future feature clearly discloses that practice.
• Reports, blocks, and enforcement records: for as long as reasonably necessary to protect users, investigate abuse, prevent repeat violations, or meet legal obligations.
• Security and diagnostic logs: for reasonable operational, fraud-prevention, and legal periods.

Following a verified account-deletion request, KOZY generally deletes or de-identifies personal information from active systems within 30 days, unless a longer period is permitted or required for safety, fraud prevention, legal compliance, disputes, or another lawful purpose. Residual copies may remain in restricted backups for up to 90 days or until the applicable backup cycle completes.

12. Account Deletion

All users may request deletion of their KOZY account regardless of residence. KOZY will provide an in-app account-deletion path in Settings. Users may also initiate a deletion request outside the app through the KOZY account-deletion page or by contacting us:

https://www.getkozy.app/account-deletion

info@getkozy.app

We may take reasonable steps to verify that the request comes from the account holder. Account deletion removes the active account and associated data except information we are legally permitted or required to retain. Deletion does not require another user to delete messages, screenshots, or information that user previously received or independently saved.

13. Your Privacy Rights

Depending on where you live and whether a particular privacy law applies to KOZY, you may have rights to confirm processing, access personal information, correct inaccuracies, request deletion, obtain a portable copy of certain data, withdraw consent, opt out of certain sales or targeted advertising, limit certain sensitive-data processing, or appeal a decision on a privacy request. KOZY will not unlawfully discriminate against you for exercising applicable privacy rights.

To submit a request, use available account settings or contact info@getkozy.app. We may request information reasonably necessary to verify your identity. You do not need to create a new account solely to exercise a privacy right, although we may ask an existing account holder to use the existing account for verification.

14. New Jersey Privacy Rights

The New Jersey Data Privacy Law applies to controllers that meet statutory applicability thresholds. If and to the extent the law applies to KOZY and your request, eligible New Jersey consumers may have rights to access, correct, delete, and obtain a portable copy of personal data, and to opt out of certain targeted advertising, sale of personal data, and qualifying profiling.

Where the New Jersey law applies, KOZY will generally respond to a verified request within 45 days. We may extend that period by an additional 45 days when reasonably necessary and permitted by law, and will provide notice of the extension. If we deny a request, we will provide the reason and instructions for appeal. We will respond to a qualifying appeal within the period required by law, generally 45 days.

Where the New Jersey law applies, KOZY will obtain consent before processing sensitive personal data when required, maintain reasonable administrative, technical, and physical safeguards, and honor legally required revocation and opt-out mechanisms.

15. Other U.S. State Privacy Rights

Residents of other U.S. states may have additional rights under applicable privacy laws. KOZY will honor legally applicable rights and recognized opt-out preference signals to the extent required by law and technically applicable to the Service. Rights and response periods vary by state.

16. Security

KOZY uses reasonable administrative, technical, and organizational safeguards designed to protect personal information. Depending on the system and risk, these safeguards may include encryption in transit, access controls, authentication protections, logging and monitoring, secure cloud infrastructure, software updates, vulnerability management, incident-response procedures, personnel access restrictions, and contractual safeguards for service providers.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Users should protect their devices, email accounts, telephone access, and login credentials and report suspected unauthorized access promptly.

Because KOZY may hold information relating to New York residents, KOZY’s security program is also designed to account for applicable New York data-security obligations, including reasonable administrative, technical, and physical safeguards where required.

17. Security Incidents and Breach Notification

If KOZY becomes aware of a security incident involving personal information, we will investigate, contain, and remediate the incident as appropriate. Where applicable law requires notification to users, regulators, or other authorities, KOZY will provide the required notice within the legally required period.

18. Children and Minors

KOZY is intended only for individuals who are at least 18 years old. We do not knowingly allow individuals under 18 to create KOZY accounts. We do not knowingly collect personal information from children under 13. If we learn that an ineligible minor has created an account or provided personal information, we may terminate the account and delete the information, subject to legally permitted retention.

19. International Users and Data Transfers

KOZY is operated from the United States. If users access KOZY from outside the United States, personal information may be processed in the United States and other countries where our service providers operate. Privacy laws in those countries may differ from the laws where you live. If KOZY actively expands into jurisdictions requiring additional transfer mechanisms or disclosures, KOZY will implement them as required.

20. Third-Party Links and Services

KOZY may link to or integrate with third-party services. Those services operate under their own privacy policies and terms, and KOZY does not control their independent privacy practices. Review third-party policies before providing information to them.

21. Changes to This Privacy Policy

KOZY may update this Privacy Policy to reflect changes in our Service, vendors, data practices, legal obligations, or security measures. We will update the effective or last-updated date and may provide additional notice through the app, website, email, push notification, or another reasonable method when changes are material. Where required by law, we will obtain consent before materially changing a consent-based use of personal information.

22. Contact and Privacy Requests

For questions, privacy requests, complaints, account-deletion requests, or appeals, contact:

Contact Us

Company: Kozy Labs, LLC, a New Jersey limited liability company

Service: KOZY

Email: info@getkozy.app

Website: www.getkozy.app

Account deletion requests: www.getkozy.app/account-deletion