Privacy Policy

Your personal data is processed by VOW TECNOLOGIA LTDA, registered under Brazilian company number (CNPJ) 68.303.661/0001-20, with offices at Rua Visconde do Rio Branco, 1488, suite 909, floor 09, Centro, Curitiba/PR, Brazil, 80.420-210, acting as controller under the Brazilian General Data Protection Law (Lei nº 13.709/2018, the LGPD).

Data Protection Officer: privacy@vowapp.io. That address is only for requests about your data. For general support, write to support@vowapp.io.

Account and profile

• email address
• @username, chosen by you
• date of birth, used to confirm you are 18 or older and in the ranking’s age tab
• gender, used in the ranking’s gender tabs
• the state you live in, if you choose it in your profile or it comes from the postal code of your payment account, used in the ranking’s geographic tab when you choose to appear there
• profile picture and profile background image, if you upload them
• your Google account picture, if you create your account by signing in with Google (see section 3)
• the date and time you accepted the Terms of Use

Financial

• tax ID (CPF), needed to receive payment and to withdraw
• history of amounts committed, refunds and withdrawals
• to open your payment account: full name, date of birth, mobile number, monthly income and address. They pass through VOW only to reach Asaas, and are not stored by VOW, except for the state (section 3)
• the photo ID and the selfie used to verify the payment account go straight from your device to the Asaas page, and do not pass through VOW

Service use

• the commitments you create: activity, goal, duration and amount
• your check-ins, with date, time and any text you write
• check-in photos
• the stories you publish, and which stories by other people you have already seen
• your reactions, comments and direct messages
• who you follow and who follows you
• reports you file and blocks you apply

Integrations

• Strava workout data, only if you connect your account, as described in section 6

Technical

• your device's push notification token
• your device's time zone, so that reminders arrive at your local time
• access and error logs generated by normal operation of the service

This section exists because the absence of a piece of data is as concrete a guarantee as its presence.

We do not collect your location. VOW never asks for access to your device's location, and no check-in records where you were. The app does report your device's time zone, which tells us what time band you are in, not where you are. It is used only so that reminders arrive at your local time. The state you live in, when you give it or it comes from the postal code of your payment account, is stored only as the state’s abbreviation: the postal code and the city are not stored.

We do not collect your name. Sign-up does not ask for a name, and the name supplied by the login provider you use, such as Google or Apple, is not stored.

Your Google picture becomes your profile picture, at sign-up only. Since September 28, 2026, anyone who creates an account by signing in with Google starts with that account's picture as their VOW profile picture. It is copied once, at sign-up, and is visible wherever your profile picture appears (section 7). You can change it at any time on your profile screen. Signing in with Apple or with email and password imports no picture, and accounts created before that date are not changed.

We do not collect your PIX key. Withdrawals always go to the key matching the tax ID registered on your account, looked up on the server. The app has no field for entering a key, and withdrawals to third-party accounts are not possible.

We do not use your data for advertising and we do not sell it, in any form.

Where the basis is consent, you may withdraw it at any time by disconnecting Strava inside the app.

Every photo has its metadata stripped before it leaves your device. That includes the location recorded by the camera and the identification of the device model and serial number.

That cleaning fails closed: if for any reason it cannot be done, the check-in is refused and the photo is not uploaded. Losing a check-in is preferable to uploading a photo with your home marked on it.

Photos are stored at a publicly readable address, so that they appear on the commitment. The address is a random identifier and does not contain your user identifier, deliberately: the path of a photo must not reveal whose anonymous commitment it belongs to.

Connecting Strava is optional, and you only need it if you want to prove commitments with recorded workouts. For activities that support Strava, you choose between photo and Strava at each check-in, and the amount you commit does not change that choice.

Once connected, VOW reads the activities you record there, solely to verify your commitments. From each workout we store duration, average pace, average speed, elevation gain, calories and device name, when Strava provides them.

You may disconnect at any time inside the app. Disconnecting revokes the authorisation at Strava itself, not merely deleting the credentials held here: VOW stops appearing as a connected application in your account there. Closing your account does the same.

This is the most important section to read before creating a commitment.

A commitment created as public appears in the app's feed, and the feed is visible to anyone with a VOW account. They do not need to follow you: any registered person sees public commitments.

Until 18 September 2026 the feed was also open to people without an account, and anyone who downloaded the app could see public commitments without signing up. That is no longer the case: the app now requires sign in before showing any content. Public commitments created during that period were seen under the previous rule.

What appears in that case: your @username, your profile picture, the activity, the amount committed, the duration, how many check-ins you made, the check-in photos, the text you wrote on them and the outcome of the commitment.

What never appears, under any circumstances: your email address, your tax ID, your date of birth and the content of your direct messages.

Your @username, profile picture and score also appear in the ranking. The ranking has separate tabs by gender and by age group (18 to 24, 25 to 34, 35 to 44, 45 to 54 and 55 or over), and that is where the gender and age you gave at sign-up show: being listed in one of them reveals the gender you chose and the group your age falls into. Your date of birth itself does not appear. A group with few people makes it easier to tell who is in it.

The ranking also has a geographic tab, by state and by region, and it is off by default: you only appear there if you choose to, in your profile. If you do, being listed in a state or region reveals that you live there. A state or region only appears once at least 10 people there have chosen to appear, so that no one can be identified in a place with few people. Your city never appears.

Your stories appear to anyone who opens your profile, except people you have blocked. Each person sees each story once, and you do not see who saw it. A story can be a photo of yours, a clip of up to 7 seconds from a video in your gallery, with its sound, or the commitment kept video that VOW generates for you, with the activity and the numbers of the commitment, without your name or photo. From a gallery video, VOW keeps only the clip you chose, without the data the file carries, such as where it was recorded; the full video is deleted right after the cut.

If you do not want that exposure, VOW offers the alternative: creating the commitment as anonymous. In that case no server response links that commitment to you. Your identifier, your @username, your picture, your statistics and the text you wrote are all withheld, because free text identifies a person on its own.

Two things you need to know before choosing:

8.1. The choice is final. Once created, a commitment does not switch from public to anonymous or the other way round. This is not a technical limitation: turning it anonymous later would not retract what has already been seen and copied, and the promise would be false.

8.2. An anonymous commitment does not score. It earns no points, enters no ranking and does not count towards your profile statistics. That is the price of anonymity, and it exists for a reason: if anonymous commitments added to the visible totals, what they hide could be deduced by subtraction.

There is an honest limit to the anonymity: if you prove with Strava, the workout data still appears on the anonymous check-in. Someone following your Strava can match the activity and the time. If that concerns you, prove with a photo.

We share only what is necessary, and only with those who operate part of the service:

For charges, Asaas receives your @username as the name. To open your payment account, it also receives your full name, date of birth, mobile number, monthly income and address, which it requires to verify who holds the account, and the ID document and the selfie, which you send on its page. VOW does not store this data: it passes through VOW only to reach Asaas. Your email address is not sent: the provider record uses an address generated by VOW, and the app is what talks to you.

We may also share data with authorities where required by law or court order.

The services listed above, with the exception of Asaas, run on servers outside Brazil. That means your data is transferred to another country.

The LGPD permits that transfer where it is necessary to perform the contract with you, which is the case here: without those services there is no app.

When you report content or a profile, we store who reported, what was reported, the reason chosen and any text you write, limited to 500 characters. This is necessary to review the case and to identify repeated or abusive reporting.

The reported person is not told who reported them.

When you block someone, we store both identifiers. Blocking hides content in both directions, undoes any following between you, and deletes the notifications exchanged between you. You can see and undo your blocks on the account security screen.

Accounts suspended by a moderation decision have the suspension date recorded.

During the test phase, after your second check-in of the week, the app may ask for your opinion about VOW. Answering is optional. If you answer, we store the text you write, limited to 500 characters, and up to 4 images you choose to attach, with no location data. Only the VOW moderation team reads it.

The images may show what is on your screen, including other people's information. Check what appears in them before attaching.

You close your account in the app itself, without having to ask anyone.

Closing deletes:

• your personal data: email address, @username, tax ID, date of birth, gender, state, profile picture and notification token
• your photos, both the avatar and the check-in ones, removed from storage and not only from the database
• your Strava connection, revoked at Strava too
• VOW's access to your Apple account, revoked at Apple, if you signed in with it
• all of your public content: your commitments, public and anonymous, their threads in full, the check-ins, the comments you wrote on any thread, the reactions you gave and those given to your content, and the notifications your profile generated for other people
• your stories
• the feedback you sent, text and images
• your login account

The thread of one of your commitments is deleted in full, including comments written by other people inside it. This is deliberate: the thread is the commitment, and without it the comments would hang on nothing.

Two things remain, for different reasons:

• direct message conversations, with no link to your profile, which appears empty to the other person. A conversation has two owners, and deleting it unilaterally would remove what the other person kept
• financial records, detached from your identity. There is a legal obligation to retain them, and without your account row they identify no one

Closing cannot be undone. Withdraw any available balance first.

Your data is kept for as long as your account exists.

Images attached to feedback are deleted 30 days after they are sent. The text is kept for as long as your account exists.

Story photos and videos are deleted 24 hours after they are published, together with the record of who saw them. A reported story is kept until moderation decides, for at most 30 days.

When you close your account, everything listed in section 12 is deleted at the time of the request, with no waiting period.

Financial records are kept for 5 years from the date the account is closed, the period set by Brazilian tax and accounting law and by the limitation period of the Consumer Protection Code, detached from your identity. Technical access and error logs are kept for as long as operational security requires and are discarded in the normal cycle of the hosting services.

We do not profile you, and we keep no copy of your data for any purpose other than those described here.

Under the LGPD, you may request at any time:

• confirmation that we process your data, and access to it
• correction of incomplete, inaccurate or outdated data
• anonymisation, blocking or deletion of unnecessary or excessive data
• portability of your data
• information about who we share it with
• withdrawal of consent, where consent is the basis
• deletion of data processed on the basis of consent

Most of this you can do yourself in the app: correct your profile, disconnect Strava, and close your account.

For the rest, write to privacy@vowapp.io. We reply as soon as we can, and within 15 days where the law sets that deadline.

Access to data is restricted in the database by row level security rules, and no sensitive data is read directly by the app: everything goes through the server, which checks who is asking.

Photos have their metadata stripped before upload, and listing the stored files is blocked for anyone not authenticated.

No system is immune. In the event of a significant security incident, we will notify you and the Brazilian data protection authority (ANPD), as required by article 48 of the LGPD.

VOW is for people aged 18 or over. Sign-up asks for your date of birth and refuses dates indicating a lower age. We do not knowingly collect data from anyone under 18. If we identify such an account, it is closed and the data is deleted.

We may update this Policy. Significant changes will be announced inside the app before they take effect, and the date at the top of this page always indicates the version in force.