Security

Last updated 1 November 2026.

How we keep your rooms and your account safe, and how to tell us about a problem.

How we protect your data

• Your data is stored in the EU and encrypted on its way to us and where we store it.
• What you can open and change depends on your role in each room, and our server checks it, not only the app.
• Invitations are random, expire, and can be revoked at any time.
• We limit repeated attempts and watch for automated abuse.
• We back up your rooms and files every week and test that we can restore them.
• If a breach puts your personal data at risk, we tell you and the data protection authority, as the law requires.

Your part

• Use a password you use nowhere else.
• If you think someone else has your password or a sign-in code, change your password and write to us.

Reporting a problem

If you think you have found a security problem in Rounzi, write to security@rounzi.com. Tell us what you found, how to repeat it, and what someone could do with it. Wait for our reply before you send anything sensitive.

• Test only with your own account and your own rooms, and do only what you need to show the problem.
• Do not open, change, keep or delete anyone else's data. If you see some by accident, stop and tell us.
• Do not guess codes or passwords, overload Rounzi, scan it at volume, send spam or trick people.

If you follow these rules in good faith, we will not report you, agree to a prosecution or take legal action against you. We cannot speak for prosecutors or for the services we use.

We reply within a week. Please wait until the problem is fixed, or 90 days, before you publish anything. There is no bug bounty.