📊Information We Collect

As a civic intelligence platform, Voykuh collects only the information needed to run the service, keep it secure, and give you a useful experience. Here's what we collect and why:

👤Profile & Account Information

  • Basic Details: Name, username, and email address
  • Profile Content: Display name, bio, avatar, website, and an optional free-text location you type yourself (e.g., a city or country)
  • Account Settings: Your privacy and notification preferences

📝Content You Create

  • Posts & Media: Posts, comments, reposts, and any images, video, or audio you upload
  • Civic Tools: Simulation snapshots you create
  • Reactions: Likes, bookmarks, and shares

🤝Connections & Interactions

  • Connections: Accounts you follow, your followers, friend connections, and accounts you block
  • Activity: Likes, comments, mentions, and reposts

📱Usage & Technical Data

  • App Usage: Features used, in-app search history, and interaction patterns
  • Device Info: Device type, operating system and app version, and device identifiers
  • Network Data: Your IP address, used for security and abuse prevention
  • Diagnostics: Error and performance logs

📍 A Note on Location

We do not collect GPS or device location. The only "location" on Voykuh is the optional free-text field you can type on your profile. Your IP address is used for security and abuse prevention, not to track your physical whereabouts.

Information from Others

We may also receive limited information about you:

  • Other Users: When they mention you, reply to you, or include you in content
  • Authentication Providers: If you sign in with Google, we receive basic account information (such as your email) to create and access your account

⚙️How We Use Your Information

We use your information to operate Voykuh and give you the best possible experience. Here's how:

Core Platform Functions

Account Management

Create and maintain your account, authenticate your identity, and provide support

Content Delivery

Show your content to your chosen audience and surface relevant civic content, analysis, and simulations

Connections

Help you find and follow other users and manage your connections

Notifications

Send in-app and transactional notifications such as replies, mentions, and security alerts. We don't send marketing email.

Personalization & Discovery

  • Content Feed: Curate your feed with relevant posts from the accounts and topics you follow
  • Discovery: Suggest accounts, hashtags, and trending topics
  • App Experience: Customize the interface and settings to your preferences

Safety & Security

  • Platform Safety: Detect and prevent spam, abuse, and harmful content
  • Account Security: Protect against unauthorized access and suspicious activity
  • Content Moderation: Review reported content and enforce our community guidelines
  • Legal Compliance: Respond to lawful requests and protect our legal interests

⚖️ Legal Basis for Processing (GDPR)

We process your data based on: Contract Performance (providing our service, including the sign-in session cookie), Consent (optional usage measurement, which is off unless you turn it on), Legitimate Interest (improving and securing the platform), and Legal Obligation (compliance requirements).

🔄Information Sharing & Disclosure

We respect your privacy and only share your information in specific, controlled circumstances:

With Your Consent

  • Public Posts: Content you choose to make public is visible to everyone
  • Authentication: When you choose to sign in with Google

Service Providers

We rely on trusted providers to operate the platform. They process data on our behalf, under contract, and may not use it for their own purposes:

  • Cloud Infrastructure & Database: Supabase (data hosting and storage)
  • Hosting & Analytics: Vercel, including Vercel Analytics
  • Video & Media Delivery: Bunny.net Stream
  • Email Delivery: Resend (transactional email)
  • Content Moderation & Safety: Perspective API, Google Vision, and OpenAI
  • Stickers & GIFs: Giphy

Under privacy law, transfers to service providers like these are not a "sale" or "sharing" of your personal data.

Legal Requirements

We may disclose information when required by law or to protect safety:

  • Response to valid legal requests (court orders, subpoenas)
  • Compliance with applicable laws and regulations
  • Protecting the safety of our users and the public
  • Investigating potential violations of our terms

🚫 What We Never Do

We never sell your personal information. We don't run advertising, and we don't share your data with advertisers or data brokers.

👥Public Information & Visibility

Engaging on Voykuh involves sharing and connecting. Here's how your information becomes visible to others:

Public by Default

  • Profile Info: Username, display name, avatar, bio, and website (you can make your profile private)
  • Public Posts: Content you share publicly is visible to everyone, including logged-out visitors
  • Interactions: Likes, comments, and reposts on public content are visible
  • Follower Lists: Your followers and the accounts you follow may be visible

Followers & Connections

  • Content Visibility: Your content is shown according to your account and post privacy settings
  • Mutual Connections: Shared connections may be shown to help people find each other

Search & Discovery

  • Search Results: Your public profile may appear in search results
  • Recommendations: You might be suggested to others as someone to follow
  • Hashtags & Mentions: Public content with hashtags or mentions becomes discoverable

🎛️ Control Your Visibility

You have control over what is public:

Profile Privacy

Make your profile private or public

Content Visibility

Control who can see your content through your privacy settings

Blocking

Block accounts from interacting with you

Content Deletion

Delete individual posts or comments at any time

🎛️Your Privacy Controls

You should have meaningful control over your privacy. Voykuh offers the following settings and tools:

Account Privacy Settings

  • Private Profile: Make your profile visible only to people you approve
  • Profile & Content Visibility: Control who can find and see your profile and content
  • Blocking: Block specific accounts from interacting with you

Content & Interaction Controls

  • Content Deletion: Delete individual posts and comments at any time
  • Reporting: Report content or accounts that violate our policies
  • Blocking: Stop specific accounts from interacting with you or seeing your activity

Data & Account Controls

  • Access Your Data: Request a copy of your personal data by emailing privacy@voykuh.com
  • Delete Content: Remove individual posts or comments
  • Delete Your Account: Permanently delete your account and data from Settings → Account, or by request — see our Delete Account page

Most of these are available under Settings → Privacy. For full details on deleting your account, see the Delete Account page.

🔒Data Security

We take reasonable measures to protect your information. Our approach reflects what we actually do as a focused, independent platform:

Technical Safeguards

  • Encryption in Transit: All traffic is encrypted over HTTPS/TLS
  • Managed Infrastructure: Data is hosted on reputable managed providers (Supabase, Vercel, Bunny.net) whose platforms provide encryption at rest and maintain industry-standard security certifications
  • Access Controls: Database row-level security and least-privilege access restrict what can read your data
  • Passwordless Authentication: Sign-in uses a one-time 6-digit code sent to your email, or Sign in with Google or Apple — we don't store passwords for normal accounts
  • Data Minimization: We collect and keep only the data we need to run the service

Your Account Security Tools

  • Login Activity: Review recent sign-in activity on your account
  • Device Management: See and sign out devices connected to your account
  • Security Notifications: Get notified about important security events

🚨 Security Incident Response

In the unlikely event of a data breach, we will notify affected users without undue delay and, where required, within the timeframes set by applicable law (such as within 72 hours under GDPR).

⚖️Your Privacy Rights

Depending on where you live, you have specific rights regarding your personal information. We respect and uphold these rights:

Your Data Rights

📋 Access

Request a copy of the personal data we hold about you

✏️ Correction

Update or correct inaccurate personal information

🗑️ Deletion

Request deletion of your personal data (right to be forgotten)

⏸️ Restriction

Limit how we process your personal information

📤 Portability

Receive a copy of your data in a machine-readable format

🚫 Object

Object to certain types of data processing

How to Exercise Your Rights

  1. In-App Settings: Delete content, delete your account, and manage privacy directly in your settings
  2. Contact Our Privacy Team: Email privacy@voykuh.com or use our contact form
  3. Response Time: We respond to verified requests within 30 days

Special Rights by Region

  • EU (GDPR): Right to lodge a complaint with a data protection authority
  • California (CCPA): Right to opt out of the sale of personal information (we don't sell data)
  • Brazil (LGPD): Right to information about data sharing with third parties
  • Canada (PIPEDA): Right to file a complaint with the Office of the Privacy Commissioner

Related Policies

Your privacy is protected across all our policies:

🍪Cookies & Local Storage

Voykuh sets one cookie. It keeps you signed in. There are no advertising cookies, no analytics cookies, and no cross-site or cross-app tracking of any kind.

🔒The One Cookie We Set

  • sb-<project>-auth-token — your sign-in session. Split across two cookies when the value is large. First-party, secure, and required: without it you cannot stay signed in.

Control: This cannot be turned off, because it is what keeps you signed in. Signing out or clearing your browser data removes it.

🛡️A Cookie Set by Our Infrastructure

Our database provider, Supabase, sits behind Cloudflare. Cloudflare sets a short-lived bot-protection cookie, __cf_bm, on its own domain when the app talks to the database. It lasts about 30 minutes and exists to distinguish people from automated traffic. We do not set it, cannot read it, and it is not used for advertising.

What We Store on Your Device Instead

Most of what Voykuh remembers is kept in your browser's local storage, not in cookies. It stays on your device and is not sent to us automatically.

⚙️Local Storage

  • nuxt-color-mode — light or dark theme
  • voykuh-app-version — detects when a new version is available
  • voykuh_analytics_preference — written only if you turn usage measurement on or off
  • va_disabled — written only if you turn usage measurement off
  • voykuh_device_id, device_id — identify this browser so you can see and sign out your registered devices in Security settings
  • voykuh_recent_emojis — the emoji you used most recently, so the picker can show them first

Control: Clearing your browser's site data removes all of it.

Usage Measurement Is Off Until You Turn It On

📊 Anonymous, Aggregate, Opt-In

We use Vercel Web Analytics, which is cookieless — it counts page views in aggregate and does not set a cookie or build a profile. It is off by default. Nothing is measured unless you turn it on in Privacy Settings, and turning it off again stops it.

Browser & Device Controls

  • Browser Settings: Most browsers let you block or delete cookies and clear local storage
  • Signing Out: Removes the session cookie

🔗Third-Party Services & Integrations

Our platform integrates with a small number of third-party services to operate and enhance your experience:

Authentication Services

  • Google OAuth: Sign in using your Google account
  • Apple Sign-In: Sign in using your Apple Account
  • Email One-Time Code: Passwordless authentication via a 6-digit code sent to your email

Content & Media Services

  • Bunny.net Stream: Video processing and delivery
  • Giphy: Stickers and GIF integration
  • Content Delivery: CDN services for faster content loading

Safety & Moderation Services

  • Perspective API: Toxicity detection for content moderation
  • Google Vision API: Image content analysis
  • OpenAI: Content analysis for safety

Communication Tools

  • Resend: Transactional email delivery
  • Push Notifications: Mobile and web push notification services

🔍 Third-Party Privacy

When you use third-party integrations, their privacy policies also apply. We recommend reviewing the privacy policies of any connected services.

🌍International Data Transfers

Voykuh is operated from Canada, and our service providers may process data in other countries. We maintain protection wherever your data is handled:

Where Your Data Is Processed

  • Operated from Canada: Voykuh is run from the National Capital Region, Canada
  • Provider Locations: Service providers such as Supabase, Vercel, and Bunny.net may store and process data in the United States and other countries

Transfer Safeguards

  • Contractual Protections: We use providers that offer data-protection commitments, including Standard Contractual Clauses where applicable
  • Encryption: All transfers are encrypted in transit

👶Children's Privacy

Voykuh is intended for adults. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18.

Age Requirement

  • Minimum Age: You must be 18 or older to create an account
  • No Knowing Collection: We do not knowingly collect data from minors. If we learn that an account belongs to someone under 18, we will remove it.

🚨 Reporting Underage Users

If you believe someone under 18 is using Voykuh, please contact privacy@voykuh.com. We will investigate and take appropriate action, including removing the account.

⏰Data Retention

We keep your data only as long as necessary to provide our services and comply with legal obligations:

Retention Periods

Active Account Data

Kept for as long as your account is active

Account Deletion

When you delete your account, your profile and content are permanently removed from our active systems within 30 days. The account cannot be reactivated.

Deleted Content

Individual posts or comments you delete follow the same 30-day permanent-removal process

Encrypted Backups

Residual copies in routine encrypted backups are overwritten within 90 days

Security & Moderation Logs

Minimal security and moderation records may be kept for up to 12 months to protect the platform and other users

Legal Hold

Data may be retained longer where required by law or for an active investigation or legal hold

Deleting Your Account

You can delete your account anytime from Settings → Account, or by request. Deletion is immediate — your account is signed out and flagged right away — and permanent; it cannot be reactivated. For full details on what's removed and what's briefly retained, see our Delete Account page.

📝Policy Updates

We may update this privacy policy to reflect changes in our practices or applicable laws:

How We Notify You

  • Email Notification: Sent to your registered email address for material changes
  • In-App Notice: A notification when you next open the app
  • This Page: The "Last Updated" date at the top reflects the latest revision

Types of Changes

  • Minor Updates: Clarifications or administrative changes
  • Material Changes: Changes that affect how we use your data
  • New Features: Privacy implications of new platform features
  • Legal Updates: Changes required by new laws or regulations

Your Options

  • Accept Changes: Continue using the platform normally
  • Review Settings: Update your privacy preferences if needed
  • Object to Changes: Contact us if you disagree with material changes
  • Delete Account: You can always delete your account if you disagree
Version History: This privacy policy was last updated on June 7, 2026. Previous versions are available upon request.