Privacy Policy
Effective and last updated: July 26, 2026
This policy explains how VOES CORPORATION PTY LTD collects, uses, shares, protects, and deletes personal information when you use the VOES mobile application or an official VOES website.
1. Who is responsible for your data
VOES CORPORATION PTY LTD (ABN 13 640 458 751), located at 5/548 Kessels Road, Macgregor, Queensland 4109, Australia, is responsible for the personal information covered by this policy. In this policy, “VOES,” “we,” “us,” and “our” refer to that company.
Privacy questions, access or correction requests, deletion requests, and complaints can be sent to support@voes.com.
2. Information we collect
Account and profile information
- Email address, account identifiers, display ID, profile name, and password authentication records. VOES does not store your plain-text password.
- Birthday, used to confirm that you meet the minimum age. It is not displayed on your profile or shared with other users.
- Profile images, background images, language, notification choices, privacy choices, and other settings you select.
- Records showing acceptance of our Terms and this Privacy Policy.
Content and social activity
- Reviews, ratings, product names, comments, photos, and other content you submit.
- Likes, bookmarks, follows, blocks, hidden content, reports, and moderation records.
- Review-composition statistics used to assess authenticity, such as editing counts, elapsed composition time, and whether a photo came from the camera or photo library. We do not record keystrokes or unsaved in-progress text as part of these statistics.
Device, usage, and diagnostic information
- App version, device model, operating system, language, approximate region derived from network information, IP address in service and security logs, and Firebase installation or similar app-instance identifiers. VOES does not request GPS location.
- App interactions such as app opens, screen names, feature actions, feed impressions, and performance or reliability events. Analytics and crash reports are associated with your VOES user ID while you are signed in.
- Crash traces, error details, device state, and related diagnostics needed to diagnose failures and improve reliability.
- Push notification token and delivery settings when notifications are enabled.
- App Check or device-attestation results used to verify that requests come from an authentic app installation and to prevent abuse.
VOES does not use the Google Advertising ID for advertising or personalization. The Android release configuration disables collection of that identifier and disables ad-personalization signals.
Search and on-device information
Search queries are sent to Algolia to return matching reviews and products. The list labelled “Recent Searches” is stored locally on your device and can be cleared in the app. Draft reviews and user-supplied AI API keys are also stored on your device; AI keys are kept in iOS Keychain or Android Keystore-backed secure storage and are not uploaded to VOES.
Camera and photos
With your device permission, VOES can access the camera or the photos you select so you can attach images to a review or identify a product. We do not access these sources without the relevant device permission.
3. How we use information
- Provide accounts, authentication, profiles, reviews, search, and social features.
- Display and distribute content you choose to publish.
- Send account, security, moderation, and notification messages.
- Assess review authenticity, prevent fraud and abuse, and enforce community rules.
- Investigate reports and support human moderation decisions.
- Measure feature use, diagnose crashes, maintain security, and improve VOES.
- Comply with legal obligations and protect users, VOES, and the public.
We do not use personal information for third-party advertising and do not combine it with data from other companies to track you for advertising or advertising measurement.
4. AI processing and your choices
Product matching and reported-content review
When you submit a review, VOES sends the product name, submitted review text, and language to Anthropic, or to Google Gemini if the primary provider is unavailable, to categorize the product and match it to the VOES catalogue. When a review or comment is reported, the reported text, target type, and report reason may be sent to the same providers to generate a moderation proposal. These providers process the data on our behalf. They do not receive your email address, birthday, profile name, or VOES account ID in these requests.
AI output supports catalogue operations and proposes moderation actions. A human moderator makes the final moderation decision; VOES does not use AI alone to suspend an account. By accepting this policy and submitting content, you give VOES permission to perform the AI processing described in this section. If you do not want submitted content processed this way, do not submit it and contact us to withdraw existing content.
Optional product scan using your own API key
If you enable product scan and tap the scan control, the selected image and a product-identification prompt are sent directly from your device to the provider you selected: OpenAI, Anthropic, or Google Gemini. Your API key is sent only to that provider and is not received by VOES. This optional request is also governed by the terms and privacy policy of the provider account whose key you use. You can disable the feature or delete the stored key at any time in VOES settings.
5. When information is shared
Public profile details, published reviews, comments, and public social interactions can be viewed and reshared by other users. We also share information with service providers only as needed to provide VOES:
| Provider | Purpose and information processed |
|---|---|
| Google Firebase and Google Cloud | Authentication, storage, hosting, app attestation, push delivery, analytics, crash reporting, server infrastructure, and security logs. |
| Neon | Managed PostgreSQL database hosting for account, content, social, and operational records. |
| Algolia | Search indexing and processing of search queries and published review information. |
| Resend | Delivery of verification, recovery, invitation, security, and other service emails using your email address and message delivery metadata. |
| Anthropic and Google Gemini | Product categorization and matching, and AI-assisted analysis of reported review or comment text, as described in section 4. |
| OpenAI, Anthropic, or Google Gemini selected by you | Optional direct product-image scan using your own provider API key, as described in section 4. |
| Apple and Google | App distribution, platform security, and delivery of device notifications. |
| Cloudflare and Firebase Hosting | Delivery and protection of official VOES websites, including processing IP addresses and request logs for security and reliability. |
We may also disclose information when required by law, to respond to a valid legal request, to protect safety or rights, or as part of a merger, financing, or sale of the business subject to appropriate confidentiality and notice. We require service providers to use data only for the contracted purpose and to provide protections equal to those described in this policy and required by applicable law.
6. International processing
VOES is based in Australia and uses providers that process information in Australia, Japan, the United States, and other locations where they operate. For example, Firebase Authentication is operated from the United States, while VOES application infrastructure and database services may operate in Japan and other provider regions. We use contractual, technical, and organizational safeguards appropriate to the information and applicable law when data is processed overseas.
7. Retention and deletion
- Account, profile, and published content are generally retained while your account is active or until you delete the content.
- When you request account deletion, VOES disables the account and removes or de-identifies associated profile, content, social, media, notification, and authentication records through an automated deletion process.
- Crashlytics generally retains crash reports and associated identifiers for 90 days. Analytics event-level retention is managed through our Google Analytics settings; aggregated reports may remain without directly identifying you.
- Temporary authentication challenges, upload jobs, and operational records expire or are deleted when no longer needed. Security, moderation, audit, and legal records may be retained longer when reasonably necessary to prevent abuse, resolve disputes, comply with law, or establish and defend legal claims.
- Deleted information may remain in encrypted backups for a limited period until those backups rotate, and service providers may retain limited service data under their documented deletion schedules.
8. Your controls and rights
- Update profile information, email, password, notification settings, blocks, and hidden content from the app.
- Delete or withdraw your reviews and comments where the app provides that control.
- Control camera, photo, and notification permissions in device settings.
- Clear Recent Searches and remove optional AI API keys in the app.
- Request access to or correction of personal information by emailing us.
Delete your account
In VOES, open Settings → Account → Delete Account and complete password verification. If you cannot access the app, email support@voes.com from the address registered to your account and ask for deletion. We may need to verify your identity before acting on a request.
Privacy requests and complaints
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of your personal information, or withdraw consent. Email your request or complaint to support@voes.com. We aim to acknowledge and resolve privacy complaints within 30 days. If an Australian privacy complaint remains unresolved, you may contact the Office of the Australian Information Commissioner.
9. Security
VOES uses access controls, encrypted network transport, provider encryption at rest, app and device attestation, restricted production credentials, monitoring, and deletion procedures designed to protect personal information. No system can guarantee absolute security. If you believe your account or data may have been compromised, contact us promptly.
10. Children
VOES is not directed to children under 13, and a person must be at least 13 to create an account. We use the birthday entered at signup only to assess age eligibility. If we learn that we collected personal information from a child who was not eligible to use VOES, we will delete the account and associated information. A parent or guardian can contact us with a concern.
11. Changes to this policy
We may update this policy when VOES or legal requirements change. We will post the revised policy here and update the effective date. If a change materially affects how we use personal information, we will provide additional notice in the app or by email and request consent where required.