Privacy Policy

Who we are

Vouchat is operated by Elevium Software Design L.L.C. S.O.C. (“we”, “us”). For any privacy question or request, contact us at elevium2026@gmail.com.

Data we process

We process only what the service needs to work:

• Account: your email address, username, display name, time zone and a password, which we store only in hashed form.
• Sign in with Apple: if you use it, Apple's account identifier and the name and email that Apple shares with us (this may be a private relay address), and a token that we keep encrypted only so that we can revoke it at Apple when you delete your account.
• Your content: agent cards you publish (description, city, photo), your chat messages and conversations with the Companion, bookings and orders.
• Wallet and purchases: your coin (RGC) balance and its history, and identifiers of App Store purchases. Apple processes the payment; we never receive your card or payment details.
• Device: if you allow notifications, your push token and the app language.
• Technical data: IP address and request logs, kept to run and protect the service.
• Reports and blocks: reports you send (what you reported, the reason and your details) and the list of users you have blocked.
• Your choices: whether you allowed sharing your messages with third-party AI, and when.

What we do not collect

We do not collect your contacts, your precise location or advertising identifiers. The app contains no advertising and no third-party analytics or tracking.

How we use your data

We use your data to:

• create and secure your account and let you use chats, bookings, orders and the wallet;
• match your requests with agent cards, including search that we compute on our own servers;
• answer your questions in the Companion and help you create agent cards;
• send notifications you have allowed and password reset emails;
• prevent abuse and fraud, and comply with the law.
• review reports and enforce our Terms, including with an automated filter for objectionable content;

Legal bases

Where the GDPR or similar laws apply, we rely on performance of our contract with you (providing the service), our legitimate interests (security, abuse prevention and enforcing our Terms) and your consent (push notifications and sharing your messages with third-party AI, which you can withdraw at any time in your device settings or in the app's Settings).

AI processing

The Companion, search by message and the agent-card assistant send your messages, together with the context needed to answer (such as your own cards and bookings), to a third-party AI provider that generates the replies on our behalf. This happens only after you allow it the first time you use these features, and you can withdraw permission at any time in Settings → AI processing. Until you allow it, nothing is sent.

Please do not enter information you do not want processed this way.

What other people see

Agent cards you publish are visible to other Vouchat users and to external agents that use our open search API: name, description, city, photo and reputation signals. Your email is shown only if you choose to show it in your profile.

Messages in a chat are visible to the participants of that chat.

If you report content or a user, the person you report is not told who reported them. We may look at the reported content and related messages to decide what to do.

Who we share data with

We share data only with service providers that help us run Vouchat, and only as needed:

• hosting, storage and backups: Yandex Cloud;
• Apple: Sign in with Apple, in-app purchases and push notifications;
• the AI provider described above;
• an email delivery provider, to send password reset codes.
• We may also disclose data when the law requires it. We do not sell personal data and do not share it for advertising.

Retention and deletion

We keep your data while your account is active. You can delete your account at any time in the app: Settings → Delete account. This permanently deletes your profile, agent cards, chats, bookings, orders and wallet, including any remaining coins, and cannot be undone. You can also email us from your registered address at elevium2026@gmail.com; we complete such requests within 30 days.

Backups are kept for up to 14 days and then expire. We keep only minimal App Store purchase records (transaction identifiers, without your profile) so that the same receipt cannot be credited twice. Moderation reports are kept so that we can enforce our rules; after you delete your account they no longer link to you as the sender.

Security

Traffic is encrypted with HTTPS, passwords are hashed and access to production systems is restricted. No system is perfectly secure, so please use a strong, unique password.

Your rights

Depending on where you live, you may have the right to access, correct, delete and export your data, to object to or restrict its processing, to withdraw consent, and to complain to a data protection authority. Write to elevium2026@gmail.com and we will answer within 30 days.

International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

Children

Vouchat is not intended for children under 16 and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

We may update this policy. The date above will change, and for material changes we will notify you in the app or by email.

Contact

Elevium Software Design L.L.C. S.O.C. — elevium2026@gmail.com