VOUCH / PRIVACY

Your information. Clear boundaries.

Questions about your Vouch account or privacy? Contact info@vouch.dad.

Community-specific information follows below. The first sections also describe features of existing dating accounts.

Accounts and profiles

Vouch stores your email, password hash, birthday, profile answers, and chosen cover photo in its Cloudflare database. Additional gallery photos and videos are stored in private Cloudflare R2 storage. Eligible members can view them only when you share your photos with members; blocking and account verification restrictions also apply. Photos are resized before upload. Videos retain their original file metadata. Removed gallery items become inaccessible immediately, and their files are queued for deletion. Your display name, calculated age, city, interests, profile introduction and optional appearance, language and lifestyle details are shared with eligible signed-in members. Optional details can be left blank or removed in My profile. Passwords, email addresses, and birthdays are not displayed to other members.

Messages and visibility

Messages are stored on the server and made available to the sender and recipient. They are not end-to-end encrypted. Messages are automatically checked for contact details before sending when either participant is not identity-verified. Authorized administrators can review member profiles, reports and operational status; administrative changes are logged. A hidden profile is excluded from discovery but remains accessible in existing conversations. Private photos stay hidden from other members. Blocking prevents access and messaging in both directions.

Verification, sessions and billing

The required ID and selfie flow uses Veriff. A provisional registration is stored so you can complete the check; member access and profile visibility stay locked until approval. To activate your membership, Veriff collects the identity document and selfie directly for identity and liveness checks. Vouch processes the signed decision, confirms you are an adult using the document date of birth, automatically updates your profile birthday to that verified date, and stores the result, provider reference, consent timestamp and validity period. Vouch does not store document images, selfies or full decision payloads. A successful check enables the verified star; it does not publish your legal name or document number.

When you choose an enabled Google or Apple sign-in option, Vouch stores the provider’s account identifier and verified email. Temporary sign-in cookies protect that process. A necessary, secure sign-in cookie lasts for up to seven days and is revoked when you sign out. Temporary rate-limit records protect account access. Card details are collected directly on SumUp’s hosted payment page, not stored by Vouch. Payments are collected through the Adonhusa GmbH SumUp merchant account. Vouch sends SumUp the order reference, membership description, total price and currency; Vouch stores payment references, confirmation status and membership dates. Selecting a plan does not activate membership: SumUp must confirm the payment. Each purchase provides one calendar month without automatic renewal. Contact info@vouch.dad for billing or refund requests. SumUp may retain transaction records separately under its own retention requirements.

Your language choice is saved in this browser so it stays the same as you move between pages.

Activity and email notifications

Campaign links may include a general source label, such as Instagram or a member invitation. We count these labels in aggregate without identifying the inviting member. For the founding offer, we retain a pseudonymous allocation reference and activation date to enforce the 25-place limit. This allocation record remains after account deletion; it contains no email, profile or document data. Administrators can also see aggregate counts of recent accounts, approved verifications and members who have sent a message.

We also count registration steps and submission errors by day for up to 90 days, without storing form contents or visitor identifiers in these statistics. These are aggregate events, not individual journeys. Repeated page visits can count again.

Vouch records aggregate page-view counts by day, page, approximate country and referring website. We also count approximate cities, regions and network providers in aggregate. Hourly aggregates additionally group pages and referring websites by approximate location, network, broad browser and device category, and automation indicators for up to 30 days. Browser identifiers may be imitated; these indicators do not identify people or reliably classify every bot. These aggregate statistics do not include interaction recordings. Both sets of statistics are retained for up to 90 days. These statistics do not store IP addresses, visitor identifiers, query strings or individual browsing histories. Authorized administrators can view complete member profiles and uploaded media, including private photos, for administration and moderation. Full-profile access is logged.

While the members area is visible, Vouch records a recent-activity heartbeat. Members who can see your profile or an existing conversation can see whether you were active within roughly the last minute and your approximate last-active time. This is an activity indicator, not a guarantee that someone is available. Blocked members cannot see your activity. Message read receipts appear when the recipient opens the conversation at its latest messages.

Once email delivery is activated, you can confirm your email address and receive discreet new-message alerts when you are offline. Vouch requests delivery immediately for eligible unread messages; arrival time depends on the email provider. Emails contain no message text, sender name, or profile photo. You can switch them off in My profile or through the link in a notification email. Delivery requires sharing your email address with the configured sending provider. Tracking pixels and click tracking are disabled in the Zoho integration. Notification delivery records are retained for up to 30 days and removed during mail processing. Confirmation links expire after one hour.

The operator’s registered address and full retention arrangements remain to be completed. Contact info@vouch.dad for support or privacy requests. Earlier preview profiles were stored only in your browser tab, while successful founding-list submissions remain in the separate applications database.

Interaction recordings

Interaction recording is disabled. Vouch does not collect new mouse movements, clicks or scrolling recordings. Previously consented recordings, if any, remain accessible only to authorized administrators and expire seven days after capture. Aggregate visitor statistics remain available as described above.

Deleting your account

Go to My profile → Account → Delete my account. Password accounts require your current password and an explicit confirmation. Connected-provider accounts require a recent sign-in. Deletion removes your account, profile photo, preferences, saved profiles and conversations from the active Vouch database, including your messages in other members’ inboxes. All sessions are revoked. Matching founding-list submissions are also removed. Existing provider subscriptions must be cancelled first.

If you started an identity check, its session reference is retained temporarily in a deletion queue so we can request erasure from Veriff. If that request fails or needs manual review, an administrator follows up with the provider. Deleting your Vouch account does not itself confirm that Veriff has finished deleting its separate records. Provider backups and operational logs may have their own retention periods. Contact info@vouch.dad with the deletion reference for follow-up.

My Vouch: shareable card and connections

You can individually allow an accepted connection to download your card as JSON or vCard. Permission starts off and includes only your alias, introduction, city and your public link when active. It does not include email, phone number, documents or messages. Withdrawing permission, blocking or closing the connection stops future downloads, but cannot remove copies already saved outside Vouch. Downloading does not transfer relationships or permissions to another service. We store this permission and its timestamp while the connection exists.

To show new messages, we store the last message displayed at the bottom of a visible conversation for each connection. Automatic updates pause when the tab is hidden. These markers are not sent to other people as read receipts.

My Vouch is optional. Your card is created separately from your dating profile and stays unpublished until you activate the link and confirm visibility. Anyone with the link can view your alias, introduction, city if provided and verification status, and can forward it. Photos, email, date of birth and dating preferences are not included automatically.

Sending or accepting a request shares your card with the other person. Only accepted connections allow messages in My Vouch. You can change or deactivate the link, close connections, block and report. Deactivating the link does not close existing connections. A blocked person may view a public card while signed out if they retain an active link.

We store your card, requests, connection states and messages to provide these features. Closed connection records remain while the account exists to prevent repeated requests; their messages are no longer accessible in the conversation. Deleting an account also deletes its connections and their associated messages. Your personal download includes your data and messages you sent, not other people’s private data, credentials or identity documents. This version does not transfer connections to other services or share verifications with partners.

Activity planning preferences

If you save activity preferences, Vouch stores your selected activities, optional permission to contact your account email, consent version and update time. Authorized administrators see activity totals; the activity-planning contact list includes your email and choices only while contact permission is enabled. This does not publish a profile, book an event or enable marketing. You can withdraw and delete these preferences on the community page. Account deletion also removes them. Your personal data download includes your saved preferences. Administrator access to the activity-planning contact list is logged.

Vouch community

Community account

Community accounts store your private account name, email, password hash and date of birth, without requiring gender or romantic preferences. Date of birth is used to check adult eligibility and for identity verification if you choose to connect. These accounts are excluded from dating discovery and paid dating features. Creating one does not publish a card or grant activity-planning contact permission. You can download your data, sign out or delete the account from Community account.

Invitations and report status

When you continue from an invitation to sign in, verify or create a card, its link key is stored in this browser tab for up to one hour. It is removed on successful connection submission, when an unavailable invitation is detected, or when signing out through these account controls. Browser storage may be unavailable; in that case you can reopen the original link. This does not send a request or grant contact permission. My reports shows your own submitted My Vouch report text, reference, submission time and processing status. It does not disclose the other person's private data or internal moderation notes.

New-request controls

You can pause new incoming My Vouch connection requests without hiding your public card or closing existing conversations. We store this preference and its update time with your account; it is included in your data download and deleted with your account. People opening an active card link can see that requests are paused. Deactivating a public link separately invalidates that link. Export permissions can be reviewed and revoked in My Vouch; revocation cannot recall downloaded copies.

Report follow-up and activities

Reports remain available after you block or close a connection. If you select a specific message when reporting it, we store a copy with the report for authorized review. We store report categories, reviewer assignments, your follow-up messages and the replies you can see in your account. Internal audit reasons are not shown to other members. Report records are removed when either involved account is deleted under the existing account-deletion process.

For activities we store your participation request, offers, confirmations, cancellations and attendance status. These are visible to the assigned host, backup and authorized administrators; no public participant list is provided. Optional feedback is linked to your account and accessible to authorized administrators. You can withdraw feedback on the activity page. Participation and feedback are included in your personal download and removed with your account. Activity descriptions and operational updates may remain after account deletion; staff account references are removed. Draft cost plans are restricted to assigned staff and administrators. No activity payments or research recruitment are enabled by these features.