This Privacy Policy explains what personal data Vouchd (“Vouchd”, “we”, “us”) collects, why, how we use it, and the rights you have. It applies to the Vouchd mobile app, the website at vouchd.it (including the free recall checker), and related services (together, the “Service”).
1. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account & identity | Email address and/or phone number, first and last name, username, profile photo, bio | You, at sign-up or in profile settings |
| Sign-in provider data | When you use Sign in with Apple or Google, we receive a token and the name/email you choose to share | Apple, Google |
| Content you create | Products you register, “moments” and reviews, ratings, expectations, photos, videos, voice recordings, comments, vouches, check-ins, problem pins | You |
| Coarse region | Country-level region (never precise location), stored only if you consent | You / device region setting |
| Usage data | First-party product-interaction events (e.g. which screens and features you use) — no third-party advertising trackers | Automatically |
| Notifications | Push token, notification preferences | Your device, with permission |
| Technical | IP address, device/browser type, and security logs (via our CDN and servers) | Automatically |
We do not collect precise GPS location, and we do not use advertising or cross-site tracking SDKs.
2. How we use your data
- Provide the Service — create your account, store your products and moments, power the feed and profiles.
- Safety alerts — match products you own against EU Safety Gate recall notices and alert you if something is recalled.
- Send notifications you’ve enabled (e.g. recall alerts, replies to your moments).
- Show aggregated, non-identifying insights to product makers (e.g. “4 owners, avg 4.7, 30-day satisfaction”).
- Moderation, safety, fraud prevention, and enforcing our Terms.
- Improve the Service through first-party analytics.
- Respond to your requests and comply with legal obligations.
3. Legal bases (GDPR)
- Performance of a contract — to provide the account and features you ask for.
- Consent — for coarse region, optional notifications, and any marketing. You can withdraw consent at any time.
- Legitimate interests — safety/recall alerts, security, moderation, and improving the Service, balanced against your rights.
- Legal obligation — where we must retain or disclose data by law.
4. AI processing
Some features use AI processors on our behalf: photos you submit for product identification and voice recordings for transcription are sent to Anthropic (Claude) and OpenAI (Whisper/GPT) through our secure server functions; the resulting text may be summarised for makers. These providers act as our processors and, under their API terms, do not use your content to train their models. If you prefer not to use AI features, you can enter product details manually.
5. Sharing & processors
We do not sell your personal data. We share it only with service providers (processors) who help us run Vouchd, under contract and only as needed:
| Processor | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication, file storage, hosting | EU (Ireland) |
| Twilio | Sending SMS verification codes | US |
| Apple, Google | Sign-in (only if you use them) | US |
| Anthropic, OpenAI | AI vision, transcription, summaries | US |
| Expo | Push notification delivery | US |
| Cloudflare | Content delivery, security | Global |
We may also disclose data if required by law, to protect rights and safety, or as part of a business transfer.
6. International transfers
Your data is primarily stored in the EU. Some processors listed above are located in the United States; where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
7. Content that is public
Vouchd is a social registry. Your username, display name, profile photo, and the moments, reviews, photos, videos and vouches you post are visible to other users and, for public content, to visitors of the website and search engines. Your email, phone number, legal first/last name and region are not public. Please don’t include anything private in content you post.
8. Retention
We keep your personal data while your account is active. You can delete your account at any time in the app (Profile → Delete account), which permanently removes your account and associated personal content; some content may be anonymised rather than deleted where it must remain (e.g. moderation records). We keep minimal records where required by law.
9. Your rights
Under the GDPR you have the right to: access your data; correct it; delete it; restrict or object to processing; data portability; and withdraw consent. To exercise any right, email hello@vouchd.it — most actions (including full deletion) are also available directly in the app. You may lodge a complaint with your local supervisory authority; in Lithuania this is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt).
10. Security
We protect your data with encryption in transit, row-level access controls in our database, restricted server-side keys, and access limited to what’s necessary. No system is perfectly secure, but we work to keep your data safe and will notify you and the authorities of a qualifying breach as required by law.
11. Cookies & local storage
The website uses minimal storage: a local flag to remember site access, and first-party analytics. Our CDN (Cloudflare) may set essential security cookies. We do not use third-party advertising or cross-site tracking cookies.
12. Children
Vouchd is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
13. Changes to this policy
We may update this policy. We’ll change the “Last updated” date above and, for material changes, notify you in the app or by email.
14. Contact
Questions or requests: hello@vouchd.it. See also our Terms of Service.