Draft · 4 September 2026 · version 0.1
Privacy policy
The short version: Common Room runs on your Mac. What you say stays there. Our cloud sees seven fields when you sign up, sealed letters it cannot open, and requests for our knowledge. Nothing else.
1 · Who we are
romnocommo, the maker of Common Room, Hong Kong. We are the "data controller" for the small amount of data our cloud holds. Contact: info@romnocommo.com.
2 · What stays on your Mac
Everything that matters. The record of every room, your notes, your decisions, what the ears wrote down, your voice, your memory, your keys, the passes you made, and the names and emails of the people you invited. These are files on your computer. We cannot see them, and we do not want to. If you delete the app's data folder, they are gone.
When you invite a guest, their name and email are stored on your Mac, not with us. You are responsible for them, the way you are responsible for your address book.
3 · What reaches our cloud, and why
| what | when | why | kept |
|---|---|---|---|
| Your sign-up: an install key, your name, your email, your company name, your country, the app's version, and the time | once, on first run | to count copies, to answer you, and to match a licence to a copy if you buy one | while the copy is in use; deleted on request |
| Sealed letters between your room and a guest from far away: the room's name, the letter, its size and time | while a far guest is in a room | to carry the letter; our cloud cannot open it, it holds no key | days, then pruned |
| A guest's sealed knock | when a guest knocks from far away | to let the host's Mac see it and answer | days, then pruned |
| Requests for our knowledge: which kit, and, for a paid copy, the licence with its install key | at start, and when you press "fetch" | to give the right kits to the right copy | request logs only, briefly |
| A request for the newest version | at start | to tell you a newer version exists | not kept |
| Your support email and what you wrote in it | when you write to us | to answer you | for the conversation, then deleted |
Our cloud runs on Cloudflare, with the data kept in the Asia-Pacific region. Cloudflare is our processor and holds it under its own privacy terms. We do not sell, rent or share any of it. We do not run advertising. We do not profile you.
4 · Things the app fetches from other people
- The brain. On first run the app downloads its language model from Hugging Face. Hugging Face sees the request, including your internet address, under its own terms. We never see it.
- Your own cloud brain, if you connect one. If you choose to connect a subscription you already have (for example through Hermes), what you send to it goes to that provider under that provider's terms. This is off unless you turn it on, and the app says on each reply where the thinking was done.
5 · The website
This site sets no cookies and runs no analytics. Cloudflare, which serves it, keeps short request logs for security.
6 · Your rights
You can ask us what we hold about your copy, ask us to correct it, or ask us to delete it. Write to info@romnocommo.com with the install key from Settings › This copy. We answer within thirty days. If you are in the European Union or the United Kingdom, you have the rights the GDPR gives you, and you may complain to your data protection authority. If you are in Hong Kong, the Personal Data (Privacy) Ordinance applies.
7 · Children
Common Room is a tool for work. It is not directed at children under 16, and we do not knowingly collect their data.
8 · Security
Letters through our cloud are sealed on your Mac to the other side's key and opened only there. Our knowledge is signed by us and checked by the app before use. Keys never leave the device that made them. No system is perfect; if we learn of a breach that touches your data, we tell you.
9 · Changes
When this policy changes, the date and version at the top change, and the app tells you at the next start. The old versions stay readable on request.