Privacy Policy

Last updated: May 2026

Vota is built to inform voters without surveilling them. Short version: we collect almost nothing, we sell nothing, and you can delete everything we have.

What we collect

Vota collects a cryptographic hash of your device identifier to enable one-device-one-vote integrity. This hash is a one-way transform — your device ID cannot be recovered from it.

We collect the country and district you select for location-based ballot filtering. This is stored locally on your device and sent to our servers only when fetching ballot or candidate data.

If you submit crowd-sourced content (ratings, corrections, comments), that content and a timestamp are stored on our servers. No account is linked to it — only the anonymised device hash for deduplication.

We do not collect your name, email address, phone number, government-issued identification, or financial information.

How we use it

Your device hash is used solely to prevent duplicate votes in polls. It is never sold, shared with third parties, or used for advertising.

Location data is used to show you candidates relevant to your area. It is not used to build a profile of your movements.

Crowd-sourced submissions are reviewed by our moderation team before publication. Approved content is displayed publicly without any identifier linking it to your device.

Data retention

Device hashes are retained as long as your region has an active election cycle. You can request deletion at any time by contacting us.

Location preferences are stored locally on your device and deleted when you clear app data.

Crowd-sourced submissions are retained indefinitely as part of the public political record unless you request removal.

Third-party services

Vota uses Supabase for database hosting and Vercel for API and web hosting. Both are GDPR-compliant. Your anonymised data may be processed on servers in the United States and the European Union.

We use Expo Application Services for mobile app distribution. No personal data is shared with Expo beyond what is required for app delivery.

We do not use advertising networks, social login, or analytics SDKs that track you across apps.

Your rights

You have the right to request a copy of any data associated with your device hash, request deletion of your data, and opt out of crowd-sourced contribution features.

To exercise these rights, contact: privacy@votafrica.org

We will respond within 14 days.

Children

Vota is intended for voters aged 18 and above. We do not knowingly collect data from anyone under 18. If you believe a minor has used the app, contact us and we will delete the associated data.

Changes to this policy

We may update this policy as the platform evolves. Material changes will be notified via an in-app notice at least 14 days before they take effect. Continued use after that date constitutes acceptance.

Contact

For privacy questions or data requests:

privacy@votafrica.org