Privacy policy

Rooma is operated by Yury Maximov.

This policy describes data handling in the Rooma app, the Rooma Pro practitioner workspace and related services. Data is used to operate accounts, enable communication and sessions, and store materials.

Rooma uses your name, email, user role, country code, time zone and the date you confirm that you are 18 or older. Country and time zone are taken from device settings at registration, not from GPS. Sign-in uses email verification codes; certain account-creation flows use a personal practitioner invitation.

The service processes invitations, client–practitioner connections, account and session identifiers, sign-in attempts and operational events. An IP address is used for rate limiting. These data support access, code delivery, invitations and service protection.

Profile photos are optional. A practitioner photo is visible in their profile and to invitation recipients. A patient photo is available to the patient and their connected practitioners. Photos can be replaced or removed in profile settings; image metadata, including location, is stripped on upload.

The server stores mood check-ins, optional journal text and observation dates; schedules, bookings, rescheduling proposals and their statuses; assignments, responses, selected files and published session summaries. These data may reveal health information and details of your private life.

A connected practitioner can access your journal only after you grant separate permission to that practitioner. You can withdraw it. Assignment responses are available to the practitioner who assigned the work. Personal session notes are available to their author. Published session summaries are available to the corresponding client.

Sharing history with another practitioner requires a separate request and client approval. It shares snapshots of selected published summaries, not the whole account. Withdrawing access restricts subsequent access through Rooma; it does not erase copies a person already received.

Private messaging is no longer available. Updating the app does not automatically erase history saved on the device by an earlier version or upload it to the server. Journal entries and assignment materials are stored separately.

During a call, audio and video are transmitted to session participants; technical connection information is also used to establish the call. Camera and microphone access requires your permission and can be turned off. The app has no session-recording feature. Notes are saved separately from the call.

Background images you choose are stored in your account and can be deleted. Background blur and replacement run on your device. Only files you select are uploaded for assignments. You can change camera, microphone and notification permissions in your device settings.

Practitioner applications include education, specialisms, experience, methods, a biography and uploaded diplomas or certificates. A separate confirmation allows the Rooma team to review these documents. After approval, profile information is shown to clients and invitation recipients; diploma files and internal review comments are not included in the public profile.

Rooma uses data-hosting, email, video-call and notification-delivery services. Sending a sign-in code uses your email address; calls use audio, video and connection information; notifications use a device delivery address and notification text.

Notifications may include information about an update or the time of a session. They may be visible on the lock screen. You can manage notification display and permissions on your device.

The Rooma mobile app uses AppMetrica to evaluate app journeys and technical failures. The service receives action events, device and app version information, sessions and technical installation identifiers. These events do not include journal text, mood scores, messages, notes, names, email addresses or sign-in codes. Location and advertising identifier collection are disabled. Usage statistics are collected automatically to improve the app and fix problems.

Account, journal, session and assignment data is stored by the service. You can delete journal entries and uploaded backgrounds in the app.

Access to data depends on the account, user role and permissions granted. Signing out or uninstalling the app does not delete data stored by the service.

You can change your name and email, edit or delete journal entries, manage practitioner access, revoke sharing of session summaries, and delete your backgrounds.

Revoking access stops further access under that permission. It does not delete copies the recipient has already saved independently. Full account deletion through the app is not yet available.

In the current version, client accounts are available to people aged 18 and over. Camera or microphone permission does not give a practitioner access to your journal. Journal access and sharing of session summaries are managed separately.