Privacy Policy

Your personal data is processed by VOW TECNOLOGIA LTDA, registered under Brazilian company number (CNPJ) 68.303.661/0001-20, with offices at Rua Visconde do Rio Branco, 1488, suite 909, floor 09, Centro, Curitiba/PR, Brazil, 80.420-210, acting as controller under the Brazilian General Data Protection Law (Lei nº 13.709/2018, the LGPD).

Data Protection Officer: privacy@vowapp.io. That address is only for requests about your data. For general support, write to support@vowapp.io.

Account and profile

• email address
• @username, chosen by you
• date of birth
• gender, used in the ranking’s gender tabs
• profile picture and profile background image, if you upload them
• the date and time you accepted the Terms of Use

Financial

• tax ID (CPF), needed to receive payment and to withdraw
• history of amounts committed, refunds and withdrawals

Service use

• the commitments you create: activity, goal, duration and amount
• your check-ins, with date, time and any text you write
• check-in photos
• your reactions, comments and direct messages
• who you follow and who follows you
• reports you file and blocks you apply

Integrations

• Strava workout data, only if you connect your account, as described in section 6

Technical

• your device's push notification token
• your device's time zone, so that reminders arrive at your local time
• access and error logs generated by normal operation of the service

This section exists because the absence of a piece of data is as concrete a guarantee as its presence.

We do not collect your location. VOW never asks for access to your device's location, and no check-in records where you were. The app does report your device's time zone, which tells us what time band you are in, not where you are. It is used only so that reminders arrive at your local time.

We do not collect your name. Sign-up does not ask for a name, and since August 24, 2026 we no longer store even the name and picture supplied by the login provider you use, such as Google or Apple. Those stored before that date have been deleted.

We do not collect your PIX key. Withdrawals always go to the key matching the tax ID registered on your account, looked up on the server. The app has no field for entering a key, and withdrawals to third-party accounts are not possible.

We do not use your data for advertising and we do not sell it, in any form.

Where the basis is consent, you may withdraw it at any time by disconnecting Strava inside the app.

Every photo has its metadata stripped before it leaves your device. That includes the location recorded by the camera and the identification of the device model and serial number.

That cleaning fails closed: if for any reason it cannot be done, the check-in is refused and the photo is not uploaded. Losing a check-in is preferable to uploading a photo with your home marked on it.

Photos are stored at a publicly readable address, so that they appear on the commitment. The address is a random identifier and does not contain your user identifier, deliberately: the path of a photo must not reveal whose anonymous commitment it belongs to.

Connecting Strava is optional, and you only need it if you want to prove commitments with recorded workouts. For activities that support Strava, you choose between photo and Strava at each check-in, and the amount you commit does not change that choice.

Once connected, VOW reads the activities you record there, solely to verify your commitments. From each workout we store duration, average pace, average speed, elevation gain, calories and device name, when Strava provides them.

You may disconnect at any time inside the app. Disconnecting revokes the authorisation at Strava itself, not merely deleting the credentials held here: VOW stops appearing as a connected application in your account there. Closing your account does the same.

This is the most important section to read before creating a commitment.

A commitment created as public appears in the app's feed, and the feed is open to people without an account. Anyone who downloads VOW and opens it, without signing up, sees public commitments. In practice that means open to the internet.

What appears in that case: your @username, your profile picture, the activity, the amount committed, the duration, how many check-ins you made, the check-in photos, the text you wrote on them and the outcome of the commitment.

What never appears, under any circumstances: your email address, your tax ID, your date of birth and the content of your direct messages.

Your @username, profile picture and score also appear in the ranking. The ranking has separate tabs by gender, and that is where the gender you gave at sign-up shows: being listed in one of them reveals what you chose there.

If you do not want that exposure, VOW offers the alternative: creating the commitment as anonymous. In that case no server response links that commitment to you. Your identifier, your @username, your picture, your statistics and the text you wrote are all withheld, because free text identifies a person on its own.

Two things you need to know before choosing:

8.1. The choice is final. Once created, a commitment does not switch from public to anonymous or the other way round. This is not a technical limitation: turning it anonymous later would not retract what has already been seen and copied, and the promise would be false.

8.2. An anonymous commitment does not score. It earns no points, enters no ranking and does not count towards your profile statistics. That is the price of anonymity, and it exists for a reason: if anonymous commitments added to the visible totals, what they hide could be deduced by subtraction.

There is an honest limit to the anonymity: if you prove with Strava, the workout data still appears on the anonymous check-in. Someone following your Strava can match the activity and the time. If that concerns you, prove with a photo.

We share only what is necessary, and only with those who operate part of the service:

Asaas receives your @username, not a civil name, because VOW does not store names. Your email address is not sent either: the provider record uses an address generated by VOW, and the app is what talks to you.

We may also share data with authorities where required by law or court order.

The services listed above, with the exception of Asaas, run on servers outside Brazil. That means your data is transferred to another country.

The LGPD permits that transfer where it is necessary to perform the contract with you, which is the case here: without those services there is no app.

When you report content or a profile, we store who reported, what was reported, the reason chosen and any text you write, limited to 500 characters. This is necessary to review the case and to identify repeated or abusive reporting.

The reported person is not told who reported them.

When you block someone, we store both identifiers. Blocking hides content in both directions, undoes any following between you, and deletes the notifications exchanged between you. You can see and undo your blocks on the account security screen.

Accounts suspended by a moderation decision have the suspension date recorded.

You close your account in the app itself, without having to ask anyone.

Closing deletes:

• your personal data: email address, @username, tax ID, date of birth, gender, profile picture and notification token
• your photos, both the avatar and the check-in ones, removed from storage and not only from the database
• your Strava connection, revoked at Strava too
• all of your public content: your commitments, public and anonymous, their threads in full, the check-ins, the comments you wrote on any thread, the reactions you gave and those given to your content, and the notifications your profile generated for other people
• your login account

The thread of one of your commitments is deleted in full, including comments written by other people inside it. This is deliberate: the thread is the commitment, and without it the comments would hang on nothing.

Two things remain, for different reasons:

• direct message conversations, with no link to your profile, which appears empty to the other person. A conversation has two owners, and deleting it unilaterally would remove what the other person kept
• financial records, detached from your identity. There is a legal obligation to retain them, and without your account row they identify no one

Closing cannot be undone. Withdraw any available balance first.

Your data is kept for as long as your account exists.

When you close your account, everything listed in section 12 is deleted at the time of the request, with no waiting period.

Financial records are kept for 5 years from the date the account is closed, the period set by Brazilian tax and accounting law and by the limitation period of the Consumer Protection Code, detached from your identity. Technical access and error logs are kept for as long as operational security requires and are discarded in the normal cycle of the hosting services.

We do not profile you, and we keep no copy of your data for any purpose other than those described here.

Under the LGPD, you may request at any time:

• confirmation that we process your data, and access to it
• correction of incomplete, inaccurate or outdated data
• anonymisation, blocking or deletion of unnecessary or excessive data
• portability of your data
• information about who we share it with
• withdrawal of consent, where consent is the basis
• deletion of data processed on the basis of consent

Most of this you can do yourself in the app: correct your profile, disconnect Strava, and close your account.

For the rest, write to privacy@vowapp.io. We reply as soon as we can, and within 15 days where the law sets that deadline.

Access to data is restricted in the database by row level security rules, and no sensitive data is read directly by the app: everything goes through the server, which checks who is asking.

Photos have their metadata stripped before upload, and listing the stored files is blocked for anyone not authenticated.

No system is immune. In the event of a significant security incident, we will notify you and the Brazilian data protection authority (ANPD), as required by article 48 of the LGPD.

VOW is for people aged 18 or over. Sign-up asks for your date of birth and refuses dates indicating a lower age. We do not knowingly collect data from anyone under 18. If we identify such an account, it is closed and the data is deleted.

We may update this Policy. Significant changes will be announced inside the app before they take effect, and the date at the top of this page always indicates the version in force.