Privacy Policy

1. What data we collect

When you use VoxUK, we may collect:

• Account information — email address, display name, and postcode (used to identify your constituency)
• Location data — approximate location for weather display and constituency features (only with your permission)
• Voting activity — which petitions you agree or disagree with, and official Parliament petition sign-throughs
• Comments — content you post in petition discussion threads
• Device information — push notification tokens, device type, and app version for delivering notifications

2. How we use your data

• Personalising your feed — showing petitions relevant to your interests and location
• Leaderboard & streaks — tracking your civic engagement score, badges, and activity streaks
• Petition tracking — counting agree/disagree votes and determining when petitions reach submission thresholds
• Push notifications — alerting you to petition milestones and updates
• Constituency features — showing your MP and local leaderboard rankings

3. Third-party services

We use the following third-party services to operate VoxUK:

• Supabase — database hosting and user authentication (your data is stored securely in the EU)
• Google AdMob — serves advertisements within the app. AdMob may collect device identifiers and usage data for ad personalisation. You can opt out via the iOS App Tracking Transparency prompt.
• Expo (EAS) — push notification delivery and app build infrastructure
• Parliament.uk API — fetching official petition data (public, no personal data shared)

4. Data retention

We retain your account data for as long as your account is active. Voting records and comments are kept to maintain accurate petition counts. If you delete your account, we will remove your personal data within 30 days. Anonymised, aggregated statistics (e.g. total petition signatures) may be retained indefinitely.

5. Your rights (GDPR)

As a UK resident, you have the right to:

• Access — request a copy of all personal data we hold about you
• Rectification — correct any inaccurate personal data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Data portability — receive your data in a machine-readable format
• Object — opt out of personalised advertising via your device settings

To exercise any of these rights, contact us at the email below.

6. Children's privacy

VoxUK is intended for users aged 17 and over. We do not knowingly collect personal data from children under 17. If you believe a child under 17 has provided us with personal data, please contact us immediately.