We collect the information you provide when you create an account or use our services. This may include your name, email, phone number, preferred language, profile and lifestyle answers, shared-living preferences, Shared Home details, Join Requests, and connection activity. Testing-phase identity verification uses an uploaded selfie and administrator review; mobile confirmation depends on SMS configuration. LifeReady may hold your planning notes, document references and locations, designated contacts, optional health and emergency notes, and pet and guardian information. Account, delivery, and verification records may also be kept to operate the service. By adding an emergency contact, users confirm they have informed the individual and have permission to provide their information to IHSG for notification purposes. Health and emergency information is provided directly by users. IHSG does not verify the accuracy, completeness, or medical suitability of information entered by users.

We use information to manage your account, support verification, suggest compatible people or Shared Homes, handle Join Requests and connections, save your plans, display your selected emergency information, send service messages, and respond to support requests. We also use necessary records to protect the service and meet legal obligations. Depending on the activity and applicable law, processing may rely on providing a contracted service, legal obligations, legitimate interests where available, or specific consent. Where applicable law requires a particular legal basis or consent, we must meet that requirement. Reading this policy is not blanket consent to every use of sensitive information. IHSG cannot guarantee delivery of emails, SMS messages, notifications, or emergency alerts due to factors outside its control.

Information you publish about a Shared Home is intended to be seen by people using the shared-living service. Connected members see limited profile and compatibility information; a connection does not automatically reveal your email, phone, LINE ID, home address, or emergency contacts. An active QR code Medical First-Aid Pass is different: anyone with its link or QR code can view the name and emergency contacts it displays, plus optional emergency fields you choose to share. Treat that link as shareable, and turn the pass off when you no longer want it available. Do not add another person's details without their permission.

We use service providers for hosting, account access, data and file storage, email, and mobile verification. The platform uses Supabase for account and data services and Resend for service emails; the mobile verification provider depends on the configured SMS service. Providers may process information outside your country; applicable transfer requirements and safeguards must be met. International transfer safeguards and encryption across every part of the service have not been certified here. We aim to limit access to what is needed for the service. New pet photos use private storage and expiring links; previously uploaded public photos may remain public until replaced and removed from their original storage. No online service can guarantee complete security. Browser storage is used for sign-in sessions, language choices, and saved questionnaire progress. Where available, hosting-provided country information selects the initial language; we do not store IP addresses for this language choice.

We keep information while it is needed to provide the service, support your account, or meet legal and security requirements. You can ask us to close your account or delete your information. Some records may need to be retained for legal obligations, disputes, or security, and backup copies may remain until their normal replacement cycle. We will explain any limits that apply to your request. Deleting a record cannot remove copies someone else has already saved. Category-specific retention periods and backup cycles are not defined numerically in this policy; contact us about the conditions for your data.

You can update information in your account and choose which optional emergency notes appear on your QR code Medical First-Aid Pass. Depending on applicable law, including Thailand PDPA and GDPR where applicable, you may have rights to access, correct, delete, or receive a copy of your information, object to or restrict certain uses, or withdraw consent where processing relies on consent. Withdrawal does not affect lawful processing before withdrawal. You may also complain to the Thai Office of the Personal Data Protection Committee or the relevant supervisory authority. Use the Data Subject Request form or email us; we respond within applicable statutory time limits. Email hello.ihsg.me@gmail.com for privacy questions or requests. We may verify your identity before releasing or changing information. Material policy changes will be reflected here with an updated date.

SafeCheck is a wellbeing monitoring and notification tool. It is not an emergency service, medical service, or personal safety guarantee. Notification delivery may be affected by internet outages, email delivery delays, device settings, service interruptions, or other factors outside IHSG's control. Users should not rely on SafeCheck as their sole emergency or wellbeing measure. In a life-threatening situation, users should contact local emergency services immediately.

IHSG may update, improve, or modify features during pilot testing and early release periods to improve service quality, safety, and user experience. SafeCheck is not a substitute for emergency services. LifeReady content does not constitute legal, medical, or financial advice. IHSG does not guarantee compatibility, suitability, or outcomes between CoMate members.

Blood group, allergies, medical conditions and other Emergency Profile health fields are optional. Explicit consent is required before saving health details, solely for emergency response and medical notification purposes. Declining does not prevent use of features that do not need health data. Edit or use Delete Health Data to clear dedicated health fields, or request consent withdrawal. Only selected fields appear on an active QR code Medical First-Aid Pass, visible to anyone holding its link; current emergency emails do not include those health details. Deletion cannot recall copies already saved, and health details in other notes need separate removal. The current checkbox applies per save; a permanent consent-audit history is not implemented.

Current identity review uses a selfie and administrator approval; Pay-for-Verification is not active in this flow. Selfies are for verification and use private storage accessible to the owner and authorised administrators. No fixed selfie retention period or automatic deletion schedule has been established. Request deletion through a data request, subject to applicable legal or security exceptions. Payment does not imply permanent retention of identity documents. Before any future paid verification service collects data or payment, its price, provider, data categories, purposes, legal basis and retention periods must be disclosed. Payment records and identity evidence may have different legally required retention periods.