Privacy Policy

Last updated 13 October 2026

Vouch (“we”, “us”) is an invite-only accountability app operated by Bhavya Gor, Bengaluru, India. This policy explains what we collect, why, and the choices you have. Questions: support@vouchup.app.

What we collect

  • Account: when you sign in with Google or Apple, we receive your name and email address (with Apple you can hide your email). We also keep your city, the line you write about what you’re locking in, and an optional profile photo. We never receive your Google or Apple password.
  • Protocols and proof: the protocols you lock, the photos you take as proof, when they were captured, and the vouches or call-outs on them.
  • Your circle: who invited you or who you invited, the codes used, the founding or creator cohort you were placed in (if any), and your activity in your circle (vouches, misses, joins).
  • Device: your time zone (so “today” and reminders are right) and, if you allow notifications, a push token.
  • Purchases: which plan you have and when it renews. Payments are processed by Apple, Google or our web payment provider; we never see your card details.
  • Requests and reports: emails left on our waitlist, and any report you file about content or another member.

We do not use advertising trackers, sell your data, or use your photos to train AI models.

Who can see what

Proof photos are private to you and the people in your circle — that is the point of Vouch. Members of a hosted arc can see each other’s names and scores on that arc’s board. Our public website shows only aggregate numbers (for example, how many people are in the current arc), never individual data.

Why we use it

  • To run the app: sign-in, protocols, proof, vouching, reminders and your circle’s feed.
  • To keep the community safe: reviewing reports and acting on abuse.
  • To manage your membership and comply with tax and legal obligations.
  • To email you about Vouch: nudges to lock in or keep your streak, new arcs, and membership offers. Every email has a one-click unsubscribe, and unsubscribing never affects your account.

Service providers

We use Supabase (database, sign-in and photo storage), Expo (push notification delivery), Apple and Google (sign-in, app distribution and in-app purchases), Dodo Payments (web payments) and Resend (email delivery). They process data only to provide their service to us.

Keeping and deleting your data

We keep your data while your account exists. You can delete your account at any time in the app under You → Delete account; this permanently removes your profile, protocols, proofs, photos and circle links. Deleting your account does not cancel an App Store or Google Play subscription — cancel that in your store settings. We may keep limited records where the law requires (for example, purchase records for tax).

Your rights

You can access, correct or delete your data, or ask us questions about it, by emailing support@vouchup.app. Depending on where you live (for example under India’s DPDP Act, the GDPR or US state laws) you may have additional rights, and you can complain to your local data protection authority.

Children

Vouch is not for anyone under 16. We don’t knowingly collect data from children.

Changes

If we change this policy in a meaningful way, we’ll tell you in the app before it takes effect.