Privacy Policy
VowLast updated August 2026
This policy explains what Vow collects, why, and the control you have. Plain English, no dark patterns. Vow is a pilot; we'll update this as the product grows and will note the date above when we do.
What we collect
Account: your name and email address, provided by Google when you sign in.
Settings: your timezone (so your day closes at your local midnight) and whether you've enabled notifications.
Activity: your check-ins, the optional one-line notes you write, wildcard use, and — only in vows where the group turns on proof mode — the photo or short video you capture with each check-in.
Notifications: if you opt in, your browser's push subscription so we can send the nudges you asked for.
Why we collect it
Only to run the product: to track the shared streak, show your group who's checked in, send the notifications you enable, and produce your season recap. We do not build advertising profiles and we do not sell your data.
How it's stored
Data is held in Supabase (a hosted Postgres database and file storage) and encrypted in transit over HTTPS. Proof media lives in a private storage bucket with row-level access rules, so only members of that vow can view it. Access to your own data is restricted to you and the groups you're in.
How long we keep it
Proof photos and videos are automatically deleted 30 days after a vow ends. Your account data is kept while your account exists. When you delete your account we remove your name, email, notes, and proof media; your past check-in records remain only as anonymous “former member” entries so your group's streak history stays intact — they carry none of your personal information.
Your rights (Canada / PIPEDA)
You can access, correct, or delete your personal information at any time. Deletion is self-serve: Settings → Delete my account permanently removes your data as described above. You may also email us to make a request. If you're in a region with additional rights (e.g. GDPR), the same access/correction/deletion applies.
Who else touches your data
We use a small set of service providers strictly to operate Vow: Google (sign-in), Supabase (database + storage), Vercel (hosting), Resend (the optional weekly summary email), and your browser's push service (notifications). We share only what each needs to do its job, and none of them are given your data to sell or advertise against.
Contact
Privacy questions or requests: vowapp.contact@gmail.com.