Privacy Policy

1. Who we are

Voxcount is being established as a company in the Netherlands (Voxcount B.V., in formation), based in Amsterdam. We are the controller of your personal data. For anything about this policy or your data — including to reach our data-protection contact — email privacy@voxcount.com .

2. What this policy covers

It covers the personal data we handle when you use the Voxcount app and website. Aggregated insight that no longer identifies anyone is not personal data, so it sits outside this policy and outside data-protection law.

3. What we collect

• Account details: your email and login information.
• Your answers: the responses you give to the daily questions, over time.
• Demographic profile: age range, gender, location (country and city), and the other details you give us — employment, education, field, income, housing, relationship status, number of children, and interests.
• Sensitive answers: only if you choose to answer a question we have flagged as sensitive.
• Rewards and verification: your points balance, reward choices, and the phone number you verify before your first redemption.
• Device and usage data: basic technical information, and app-/site-usage analytics only if you turn analytics on.

4. Why we use it, and our legal basis

The law requires a legal basis for each use of your data. Here is ours.

• Account details — to create and run your account. Basis: performance of our contract.
• Your answers — to show you results and how you compare. Basis: performance of our contract.
• Demographic profile — to show you country-level results and to produce demographically-segmented, anonymised insight. Basis: performance of our contract, and, for building that insight, our legitimate interest in operating the service (you can object — see section 9).
• Sensitive answers — to include an answer you chose to give to a flagged question. Basis: your explicit consent (Article 9).
• Rewards, reward details, phone number — to deliver rewards, verify it is really you, and prevent fraud. Basis: contract, legal obligations, and our legitimate interest in preventing fraud.
• Analytics and app/site usage — to understand how the product performs and fix problems. Basis: your consent (optional, off unless you turn it on).
• Marketing emails — to send you news and updates. Basis: your consent (opt-in only).
• Service messages — daily reminders and essential notices. Basis: performance of our contract, and our legitimate interest in running the service.

Your answers and demographic profile are needed to provide the comparison you signed up for and to build the anonymised, aggregated insight that is the point of Voxcount. We only ever share that insight in aggregated, anonymised form (see section 5) and never sell your individual data. You can withdraw consent, object to processing based on our legitimate interests, or delete your account at any time (see section 9).

5. How we protect your individual answers

This is the heart of how Voxcount works, so we state it plainly. We never sell your individual answers. We never show your individual answers to anyone on their own. Outside Voxcount, the most detailed view anyone ever sees is at country level. Everything we provide to clients is anonymised and aggregated, combining many people so that no single person can be picked out — and before any insight is shared externally we suppress groups that are too small to be safe, so results can never single you out.

6. Who we share data with

We do not sell your personal data. We share it only with service providers who help us run Voxcount, under contracts (data-processing agreements) that require them to protect it and use it only on our instructions.

• Supabase — hosts our database, authentication and backend. It stores your account, answers, demographic profile, points and device information. Data is stored in the European Union (Frankfurt, Germany).
• PostHog — privacy-friendly product/site analytics, and only if you have turned analytics on. EU-hosted.
• Brevo — sends our emails (waitlist, service and, with your consent, marketing). EU-hosted.
• Apple (APNs) and Google (Firebase Cloud Messaging) — deliver push notifications to your device.
• Future providers — when we introduce a third-party rewards provider, it will handle reward fulfilment, and we will update this list.

Our providers may change as the product develops; we keep this list current.

7. Sending data outside the EU

Your core data — held in Supabase, PostHog and Brevo — is stored inside the European Union. Some providers, such as Apple and Google for notification delivery, are based in the United States. Where your data leaves the EU, we rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission, so it stays protected. You can ask us for a copy of these safeguards by emailing privacy@voxcount.com .

8. How long we keep it

• Your account, answers and profile: while your account is active.
• When you delete your account: we delete or fully anonymise your individual answers and profile. Insight already aggregated stays, because it no longer identifies you.
• Reward records: kept for as long as the law requires (for example for tax and accounting), then deleted.
• Analytics: kept for a limited period (up to 14 months), then deleted.

9. Your rights

Under EU data-protection law you have the right to:

• see the data we hold about you,
• correct it if it is wrong,
• delete it,
• limit or object to how we use it,
• receive it in a portable format,
• withdraw any consent at any time — which is as easy as giving it, and does not affect anything done before you withdrew.

To use any of these, email privacy@voxcount.com , or delete your account directly from Profile → Settings in the app (see our Account & Data Deletion page). You also have the right to complain to the Dutch data-protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

10. Profiling and automated decisions

We group answers by demographic segments — for example age range, region, income band or generation — to produce the anonymised, aggregated insight that is the service. This is “profiling” in the legal sense, but we use it only to build aggregate trends, not to make decisions about you as an individual. We do not make decisions that produce legal or similarly significant effects about you by solely automated means.

11. Analytics and device data

Our analytics are configured to be privacy-friendly: no advertising identifiers, no cross-app tracking, and IP addresses anonymised. Analytics is optional and off unless you turn it on, and the product works fully either way.

12. Children

Voxcount is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn that we have, we delete it.

13. Security

We protect your data with encryption in transit, access controls, and providers chosen for their security. No service can promise perfect security, but we take it seriously and review it as we grow.

14. Changes to this policy

If we make an important change, we will tell you in the app or on the site before it takes effect. The date at the top always shows the current version.

15. Contact and complaints

Questions, requests or concerns? Email privacy@voxcount.com . If you are not satisfied with how we respond, you can contact the Autoriteit Persoonsgegevens.