Is Common Room safe with your data?
Common Room
Common Room PBC
Poor disclosure · high confidence
Common Room earns an F (30/100) because it discloses little about its data practices.
#189
of 211 apps ranked
30
score · Sales & marketing avg 50
-20
vs category average
Common Room's notice is a standard US marketing-site privacy policy that covers data rights, recipient categories and children's protections while saying nothing about AI training, security controls or retention periods.
What Common Room's privacy policy and terms of service say about your data
No AI or training disclosures
The privacy notice and the 2021 terms of use are silent on model training, inputs, outputs and output ownership, so the entire D1 block scores zero on silence rather than on any reserved harm.
Rights are conditional
Access, deletion, portability and correction are all framed as rights you may have in accordance with applicable law and exercised only by emailing support, so each lands at half rather than full.
Security is the weakest area
No encryption, access control or certification is named anywhere, breach notice is only a may attempt to notify with no timeframe, and the sole contact is a generic support address rather than a privacy officer.
Transfers lack a named safeguard
Data may be transferred, processed, and stored anywhere in the world backed only by an endeavour to safeguard consistent with applicable laws, with no standard contractual clauses or adequacy decision named.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
Common Room privacy rating
Details
- Category
- Sales & marketing
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-06-26
- Region scored
- Global / US-default
- Last assessed
- 2026-08-13
Documents examined
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.