Privacy Policy

Introduction

VOUCHIA ("we", "us", "our") provides a digital voucher and customer engagement platform that connects shoppers ("Customers") with businesses ("Merchants"). This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. By using VOUCHIA you agree to the practices described below.

Information We Collect

Account data: name, email address, phone number, password (hashed), and language preference.

Merchant data: business name, outlet addresses, staff details, and verification documents.

Biometric data: face embeddings and PIN used for Face ID sign-in. Embeddings are mathematical templates, not raw photos, and are stored securely.

Usage data: vouchers issued or redeemed, check-ins, posts viewed, device type, IP address, approximate location at check-in, and push notification tokens.

Security data: Cloudflare Turnstile challenge results to prevent automated abuse.

How We Use Your Information

We use information to create and authenticate accounts, deliver and redeem vouchers, show relevant merchant content, send transactional and (where you opt in) promotional notifications, prevent fraud and abuse, comply with legal obligations, and improve the service. We do not sell your personal information.

How We Share Information

We share information with Merchants you engage with (e.g., when you redeem a voucher), with infrastructure providers such as Supabase (database and authentication), Cloudflare (security and Turnstile), and push notification services, and when required by law or to protect rights and safety. Service providers are bound by confidentiality and data-protection obligations.

Cookies & Local Storage

We use cookies, local storage, and IndexedDB to keep you signed in, remember your language preference, cache vouchers for offline use, and operate the service worker that powers offline mode. You can clear this data through your browser at any time.

Data Retention

We keep account and transaction records for as long as your account is active and as required to comply with legal, tax, and accounting obligations. When you delete your account, we delete or anonymize personal data, except where retention is required by law.

Security

We use encryption in transit (HTTPS), hashed passwords, Row-Level Security on our database, biometric template encryption, and bot protection (Cloudflare Turnstile). No system is perfectly secure; please use a strong, unique password and protect your device.

Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data, to object to or restrict processing, and to withdraw consent (e.g., for promotional notifications). Contact us using the details below to exercise these rights.

Children

VOUCHIA is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

International Data Transfers

Our service providers may store and process data in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) to protect your information.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be highlighted in the app or by email. The updated policy takes effect when posted.

Contact Us

Questions or requests about this Privacy Policy? Email support@vouchia.com.