How Vow handles your data.

Vow collects the information you provide to create and use your account. That includes your name, email address, username, profile photo, bio, interests and, when you join a challenge, the proof videos you record and submit.

We do not collect more than we need to run the product. We never see or store your password; authentication is handled by our providers. Payment card details are handled entirely by our payment processor and are never stored on Vow’s servers.

Your information is used to operate the service, and for nothing else:

• To create your account, keep you signed in, and let you join and run challenges.
• To verify your daily proof videos and settle challenge pots.
• To show your proof clips to the small accountability group you are placed in, and to the neutral reviewers assigned to your challenge.
• To send transactional messages about your account: sign-in codes, challenge reminders, and settlement results.
• To respond to support requests.
• To see which of our own links and partners bring people who stick with Vow (see Cookies and storage).

We do not sell your personal information, and we do not use your proof videos for anything except verification and review within the challenge you submitted them to.

Proof videos are the core of Vow, so we treat them with particular care. They are stored privately, not on any public feed, and are only ever shown to the other members of your accountability pod and to the reviewers assigned to your challenge. Reviewers are people drawn from other challenges who have no stake in yours.

Profile and cover photos you upload are stored in a public bucket and may be reachable by their URL. Do not upload anything to a public field that you would not want to be publicly visible.

Your accountability pod’s group chat and your direct messages are stored on our servers. Direct messages are only possible between friends, and people who meet in a challenge can’t message each other privately until it ends.

Because members of a pod can gain when someone else is removed, we check that reports are made independently. When several members report the same proof, we look at whether the reporters are friends or have messaged each other, and we read the pod’s group chat and the direct messages between those reporters for signs that they coordinated or swapped contact details. An AI model may do this reading. Reporters who look linked count as one report. The reviewers who decide see only a short summary, never anyone’s direct messages.

The limited sharing that does happen is strictly to operate the service:

• Supabase provides our database, authentication, and storage infrastructure.
• Cloudflare serves our website, protects it from attacks, and counts page views without cookies.
• Our payment processor handles deposits, withdrawals, and payouts.
• Our email provider sends the transactional messages described above.
• An ML review service processes proof videos to detect cuts, reused footage, and to count the movement you performed.
• An AI provider (Anthropic) may process the messages described under Messages and reports, only to check reports, and to suggest a title and verification method when you create a challenge.

These providers may process data in jurisdictions other than your own. Each is contractually limited to using your information only to provide the service we have engaged them for.

Vow does not use advertising or tracking cookies, and we don’t run ad pixels from Facebook, TikTok, Google or anyone else. Here is everything your browser keeps for us:

• Sign-in: a token that keeps you logged in. Signing out removes it.
• Security: Cloudflare, which serves our site, and our bot check may set short-lived cookies to stop attacks and bots. Stripe sets its own cookies on its checkout page.
• Settings: small preferences, like your color theme.
• Where you came from: on your first visit, your browser notes the link that brought you, like a creator’s code, a campaign tag or the site that sent you. After you sign up, we save it to your account once. We use it only to learn which of our links bring people who keep their vows, and we never share it.
• Page views: Cloudflare Web Analytics counts visits without cookies and without identifying you.

If we ever add advertising cookies, we will update this page first and give you a clear way to say no, including honoring your browser’s Global Privacy Control signal.

We keep your account information for as long as your account is active, so the app keeps working. If you delete your account, we delete your profile and the personal information associated with it. Proof videos may be retained for a limited period after a challenge settles to allow challenge dispute and anti-fraud review, then deleted.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or out of date.
• Delete your account and the data associated with it.
• Request a copy of your data in a portable format.
• Object to or restrict certain processing.

Most of these you can do yourself in the app’s settings. For anything else, email support@vow.now and we’ll help.

We use industry-standard measures to protect your data: encryption in transit, access controls, and least-privilege access to your proof videos. No method of transmission or storage is completely secure, but we work to keep your data private and protected.

Vow is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

If we make material changes to this policy, we will update the date above and notify you through the app or by email. Your continued use of Vow after a change means you accept the updated policy.