Privacy Policy

1. Data Controller

The data controller is Voxpop SARL, with its registered office located at Lotissement Taapuna, Lot 20, 98703 Punaauia, Tahiti, French Polynesia, reachable at the following email address: contact@voxpopapp.app.

2. Collected Data

We collect the following data:

• Identification: Username, Display Name.
• Verification: Phone number (stored in a non-reversible encrypted format to guarantee the uniqueness of the vote).
• Demographics: Age, gender, country of residence.
• Sociology: Profession, education level, political view, religion (optional).
• Usage Data: Survey responses, comments, interactions with AI.
• Connection: IP address (used only for approximate geographical location and security).
• Biometric data: if and only if you request identity verification, a digital template of your face is computed and stored by our provider Didit. It is not a photograph but a sequence of numbers from which your image cannot be reconstructed. It is used solely to check that the same person does not open several verified accounts. Identity verification is optional: you can vote without it, on surveys that do not require it.

3. Purposes of Processing

Your data is processed to:

• Guarantee the uniqueness and authenticity of votes, including, for verified accounts, by comparing your facial template against those of already-verified people so that one individual cannot hold several accounts.
• Provide anonymized statistical analysis to survey creators.
• Personalize your survey feed.
• Improve the application via Artificial Intelligence tools.
• Manage your subscription (Smart, Pro, Advertiser).

4. Legal Basis

Processing is based on:

• Your consent: For the sociological profile and notifications.
• Contract performance: For access to services and subscription management.
• Legitimate interest: For security and fraud prevention (vote uniqueness).
• Your explicit consent: For biometric data, within the meaning of Article 9 GDPR. It is requested separately, at the moment you start verification, and may be withdrawn at any time. Withdrawal deletes the template and removes the verified badge, with no other effect on your account.

5. Data Recipients

Individual profile data is never sold. Only aggregated and anonymized statistics are transmitted to advertisers or survey creators. Our technical service providers (Firebase, RevenueCat, Google AI) have access to certain data for the proper technical functioning of the application. Identity verification is operated by Didit, which receives your identity document and your image for that purpose, and stores the biometric template described above.

6. Retention Period

• User account: Until the account is deleted by the user.
• Voting data: Anonymized after 3 years of inactivity.
• Encrypted phone number: Retained as long as the linked vote is not deleted to prevent duplicate voting.
• Biometric template: Retained while your account is active. Deleted as soon as the account is deleted or consent is withdrawn, and at the latest 2 years after verification.
• Identity document and photograph submitted during verification: Retained for 2 years by our provider Didit, then automatically and permanently deleted. They serve only to establish the verification itself; after that period only the template remains, and only if it has not itself expired.

7. Your Rights (GDPR)

In accordance with the GDPR, you have the following rights:

• Right of access: Obtain a copy of your data.
• Right to rectification: Change your information.
• Right to erasure: Delete your account and your data.
• Right to portability: Retrieve your data in a structured format.
• Right to object: Object to certain processing.

You can exercise these rights directly in the application settings or by writing to contact@voxpopapp.app.

8. Security

We implement rigorous technical measures (AES-256 encryption, HTTPS, identifier hashing) to protect your data against unauthorized access.

9. Modifications

We reserve the right to modify this policy. You will be informed of any significant changes via a notification in the application.