Privacy

What Vouch stores

• A display name — the first name you type on first launch.
• Workouts — type, duration in minutes, and the time you logged it.
• Photos — only the ones you choose to attach to a workout. Photos are stored privately and served only to the two members of your pair via short-lived links.
• Reactions — the sticker you pick on your partner's workout.
• Your pact — weekly target, the stake, your invite code, and the weeks you marked as settled.
• An anonymous user ID — a random identifier created on your device on first launch. It is not linked to your Apple ID or phone number.
• Your e-mail address, only if you choose “Save my account” — so you can sign back in on a new phone. We use it for one thing: sending you the six-digit sign-in code. No newsletters, no marketing. Your partner never sees it. The codes are sent through our e-mail delivery provider, Resend, which receives your address for that purpose only.

What Vouch does not do

• No sign-in required, no passwords, no phone number. E-mail is optional.
• No access to Apple Health or any other health data.
• No location.
• No analytics SDKs, no advertising, no tracking across apps or sites.
• No selling or sharing of your data with anyone.

Where it lives

Data is stored with Supabase (Supabase Inc.) in the EU (Frankfurt, Germany) and protected by row-level security so that each record is readable and writable only by the two members of its pair. Supabase acts as a processor on our behalf. Photos you attach are also cached on your own phone so they load quickly.

Permissions the app asks for

• Camera / Photo library — only when you choose to attach a photo. Optional.
• Notifications — two local reminders (an evening check-in and the Sunday tally). These are scheduled on your phone, not sent from a server. Optional.

Deleting your data

Open Profile → Delete my data. This removes your name, your e-mail address if you saved one, your pair, every workout and photo you logged, and your reactions from our servers immediately and permanently. If you never saved your account with an e-mail, a new phone starts fresh: there is nothing that could identify you.

Leave the pair keeps your data but ends the pact; your partner sees that you left.

Retention

We keep your data until you delete it. We may delete pairs that have been inactive for more than twelve months.

Children

Vouch is not directed at children under 13.

Changes

If this policy changes, the effective date above changes with it. Material changes will be noted in the app.

Contact

Vouch is made in Zurich. Your questions, feedback, or complaints are all welcome: hello@vouchfit.app.