Vouch Club Privacy Policy
1. Who we are
Vouch Club ("Vouch Club", "we", "us") is a dating app operated by Vouch Club Inc., a federally incorporated Canadian company with its head office in Calgary, Alberta.
Our Privacy Officer is accountable for how we handle your personal information, and you can reach them at privacy@vouchclub.ca. We will give you their name on request.
This policy explains what we collect, why, who we share it with, and your rights. It is governed by Canada's PIPEDA and Alberta's PIPA.
2. Who can use Vouch Club
Vouch Club is for adults 18 and older. We do not knowingly collect data from anyone under 18. If we learn an account belongs to someone under 18, we delete it.
3. Our legal basis: your consent
We collect and use your personal information on the basis of your consent, which you give by creating an account and agreeing to this policy. You can withdraw consent at any time by deleting your account (see §8). Some processing necessary to operate or secure the Service, or that we are required by law to perform, may continue as described below.
4. What we collect and why
We only collect what we need to run a dating app:
| What | Why |
|---|---|
| Phone number | Account identity and login; one account per person |
| Email + password | Login and account notifications |
| Date of birth | Confirm you're 18+ and show your age (we store the age derived from it) |
| Profile details: name, gender, pronouns, height, hometown, school, job, lifestyle, "looking for," prompts | Build your dating profile |
| Sexuality (optional, and sensitive information. Sharing it is entirely your choice and you can remove it anytime in Edit profile) | Show on your profile, only if you add it |
| Photos (up to 6) | Your dating profile |
| Approximate location: the city/hometown you type in | Show you relevant people and a rough distance |
| Signup region: your IP resolved to a country and province once at signup (via ipwho.is, with ipapi.co as fallback). Only the two-letter country code is stored, never the IP and never the province | Enforce the Alberta and Manitoba launch region |
| Messages, message reactions (e.g. hearts), likes, passes, matches | Make the core app work |
| Your icebreaker answers, and whether a message has been read | Run the chat: the answers stay pinned in that chat, read status powers read receipts |
| Who you block, who you report, and what you write in a report | Keep you and others safe, and let us act on it |
| Your settings: notification choices, read receipts on/off, Invisible Mode, and your search filters | Do what you asked us to do |
| Engagement activity (how you use the app) | Calculate your engagement label; surface active people |
| Invite / access code | Track how you joined |
| Venue offers: which offers you were shown, which you skipped, and which you claimed or redeemed | Show you offers you haven't already seen, stop the same one being claimed twice, and tell the venue how their offer performed |
| Product analytics: that an action happened (you opened the app, sent a like, sent a message, saw or used a venue offer), tagged with a broad gender group (man/woman/other) and your signup city | Understand whether the app works: do people come back, is it balanced, are venue offers used |
| Feedback you send us through Settings → Send feedback | Fix what you tell us is broken |
| Push token, if you turn notifications on | Send the alerts you asked for |
| Error reports when the app crashes | Find and fix crashes |
| Basic technical data (device type, app version, IP, logs) | Security, debugging, fraud prevention |
On analytics: we record that things happened, never what you said. No message text, no photos, no names, no free-text you write about yourself. We do not record your screen, and we do not capture your taps automatically, only the specific counted actions listed above. Your identifier in our analytics is the same random account ID we use internally, not your name, email, or phone.
On venue offers: we never tell a venue who you are. They receive counts only, such as how many people claimed an offer and how many redeemed it. They never receive your name, contact details, or anything that identifies you.
Profile review: a person on our team looks at profiles, including photos and prompts, to check they are real and follow our Community Guidelines, and looks at profiles that get reported. This is how we keep the community what we say it is.
Push notifications. If you turn them on, we store a device push token so we can send you the alerts you asked for. A new-message alert shows a preview of the message on your lock screen, which means that preview passes through Apple's or Google's notification service on the way to your phone. Turn message notifications off in Settings and no preview is sent.
We do NOT collect precise GPS location. Distance is approximate, based on the city you enter.
On email. We ask for an email address when you create an account, and we use it for logging in, password resets, and notices about your account or your safety. We don't send you marketing or promotional email unless you ask us to separately — and if we ever start, you'll be asked first and can stop at any time.
If you leave your phone number on our website
Our website, vouchclub.ca, has a form where you can ask for early access before your city opens. It is the only part of the site that collects personal information, and nothing else on the site requires you to give us anything.
| What | Why |
|---|---|
| Phone number | So we can text you an access code when your city opens |
| The date, and the exact consent wording you were shown | So we can show what you agreed to, as Canada's anti-spam law (CASL) requires |
We use this number for one thing: sending you an access code, and at most a short message telling you your city is about to open. We do not sell it, give it to venues or advertisers, or use it to build a profile of you. If you never create a Vouch Club account, it is never attached to one.
Getting off the list. Reply STOP to any text we send, or email privacy@vouchclub.ca. We act on it within 10 business days, and normally the same day.
How long we keep it. Until whichever comes first: you ask us to remove it, you use your code to create an account (after which the number is covered by the rest of this policy), or 24 months from the day you gave it to us.
We keep the record of your consent — the wording, the date, and the fact you gave it — for three years after you leave the list, because we have to be able to prove consent was given.
The website itself doesn't run advertising trackers, and we don't use it to follow you around other sites.
5. How we use your data
- Create your account and show your profile to potential matches
- Filter who you see (gender, age range, approximate distance) and who sees you
- Calculate your engagement label (never shown to anyone as a raw number)
- Keep Vouch Club safe: detect and remove fake, abusive, or banned accounts, and review profiles and reports by hand
- Run venue offers, and report their performance to venues as counts only
- Understand how the app is working, in aggregate (see "On analytics" in §4)
- Communicate with you about your account
We do not sell your data. We do not share it with advertisers or data brokers. Vouch Club carries no advertising networks, and nothing here follows you around other apps or websites. We use one analytics provider (PostHog, §6) to count actions inside Vouch Club: behaviour only, never your messages, photos, or anything you write about yourself.
6. Who we share data with
We share data only with the service providers that run the app: - Supabase, our database, file storage, and login provider (hosts your account, profile, photos, and messages). Hosted in Supabase's Canadian region (ca-central-1, Montréal). - Expo, the framework our app is built on (delivers app updates). - ipwho.is, and ipapi.co if it cannot answer. Once at signup, they receive your IP address to resolve the country and province for our launch-region check. We store only the resulting country code; the province is used to decide and then discarded. - PostHog, our product analytics and error reporting. Receives the counted actions and crash reports described in §4, tagged with your random account ID, broad gender group, and signup city. It never receives your name, email, phone, photos, messages, or anything you write about yourself. Hosted in the United States. - Apple (APNs) and Google (FCM), if you turn push notifications on. They deliver the alert to your device, including any message preview it contains. - Resend, our email provider. Receives your email address in order to send you account email — password resets and notices about your account or your safety. It never receives your photos, messages, or anything you write about yourself. Hosted in the United States. - Cloudflare, which hosts our domain's DNS and forwards mail sent to our published addresses (such as support@vouchclub.ca) to our team inbox. It sees only what you choose to put in an email to us.
We do not share your personal information with venues or any other business partner. Venues receive counts about their own offers and nothing else.
We may also disclose data if required by law, or to protect the safety of our users.
Where your data is processed. Our database and files, meaning your account, profile, photos and messages, are stored in Canada (Supabase's ca-central-1 region, Montréal). Some processing happens outside Canada: our analytics and error reporting are hosted in the United States, our providers are US-based companies, app updates are delivered from US infrastructure, and the one-time signup country lookup is answered by US services. In some cases data may therefore be accessible to foreign authorities under local laws. We require providers to protect your data to a comparable standard.
7. How long we keep it
- Active account: while your account exists.
- Deleted account: personal data is deleted immediately when you delete your account. Our database provider takes automatic daily backups kept for up to 7 days, so a residual copy can survive in a backup for that long before it is overwritten.
- Photos: the image files are deleted from storage when the account is deleted.
- Messages: removed when the match or account is deleted, not kept separately.
- Safety records: if reports were filed by or about an account, we retain those reports after the account is deleted (stored separately from profiles), to keep other users safe.
- Banned accounts: we retain a securely hashed (unreadable) fingerprint of a banned account's phone number and email, not the actual number or address, solely to prevent banned users from returning.
Safety records and ban fingerprints are the two things we keep after an account is gone. We keep them only for as long as they serve that safety purpose.
8. Your rights (PIPEDA / Alberta PIPA)
You can: access your data, correct it, delete your account and data, withdraw consent (by deleting your account), and contact us with any privacy concern at privacy@vouchclub.ca. You can delete your account anytime in Settings → Delete account. We respond to access and deletion requests within 30 days.
Complaints. Email our Privacy Officer (§1). We'll acknowledge and respond, normally within 30 days. If you're not satisfied, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) and, for Alberta matters, the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca).
9. How we protect it
- Encrypted in transit (HTTPS/TLS) and at rest (handled by Supabase)
- Login tokens stored locally on your device
- Database access controlled by row-level security; access to personal data is limited to what's needed to operate the service
10. Changes to this policy
We'll post any changes here and update the date above. For material changes we'll notify you by email. Continued use after an update means you accept it.