Privacy Policy

Last updated: 9 October 2026

‍Effective: 9 October 2026 for new users, and for existing users who agree to our updated Terms of Service in the app; 9 November 2026 for all other existing users.

‍

1. About this policy

‍

This policy explains how Voda Technologies Limited ("Voda", "we", "us") collects, uses and protects your personal information when you use our app, our websites (including voda.co, its subdomains, and any other website we operate that links to this policy) and anything else we offer through them (together, the "Services"). Voda Technologies Limited, a company registered in England and Wales (company number 13539218), is the controller of your personal information.

‍

This policy sits alongside our Terms of Service. It applies wherever you live. This policy only covers information collected through the Services. It doesn't cover third-party websites or services we link to, or information collected through other channels, which may have their own notices.

‍

The key points, in plain English:

  • Voda is a self-guided wellbeing app. Some of what you share with us is sensitive, such as how you're feeling, your sexual orientation or your gender identity. This policy explains how we handle it.
  • Your journals, check-ins and plans are private. We don't show them to other users, sell them or use them for advertising.
  • Some content is personalised by AI using your activity in the app.
  • Anything you post in community spaces might be seen by other people using Voda, and might be reviewed by our team.
  • You can access or delete your information, ask for a copy, and change your choices at any time.

‍

2. What we collect

‍

Information you give us

You can browse our website without telling us who you are. When you create an account, use the app or use certain features on our website, you may give us information including, but not limited to, the following:

  • Account details: your name or preferred name, email address, username, password, age or age confirmation, sign-in method (for example Apple or Google), and your profile icon.
  • Profile and identity information: for example your sexual orientation, gender identity, pronouns, neurotype, relationship status, interests, goals and what you'd like support with.
  • Content you create in the app: journal entries, answers to prompts, check-ins (such as how you're feeling), reflections, plans and the practices you use.
  • Mental wellbeing and personal information: because of what Voda is, you may share information about your mental wellbeing and your life, such as reflections on how you're doing, your mood or state of mind, your relationships, your personal history and experiences, and anything else you write in answers to prompts or add to your profile.
  • Files and media: voice notes, photos and other files you add.
  • Community posts: comments, reactions, Stars you send or receive, and anything else you post in community spaces.
  • Reports and appeals: reports you make about content, and messages you send us about moderation decisions.
  • Website interactions: information you give us on our websites, for example when you contact us, sign up for our newsletter, apply for a scholarship, or buy or gift Voda+, such as your name, email address and anything you include in your message.
  • Messages to us: emails, support requests and feedback.
  • Purchases: what you bought and when, your subscription status, and, for website purchases, your name and email. In-app purchases are processed by Apple (App Store) or Google (Google Play Billing), and website purchases by our payment provider (currently Stripe, which may offer options such as Apple Pay). They handle your card details, and we don't receive your full card details.

‍

Voda is a non-clinical service. When you write, reflect or record things in Voda, you may include details about your health, such as conditions, diagnoses or treatment. Entering this information doesn't make Voda a medical, clinical or therapy service, and it doesn't create a professional relationship with anyone at Voda. We don't use it to diagnose, treat or monitor any condition, or to provide you with individual care. We only use it as this policy describes.

‍

Information collected automatically when you use our app or website

  • Device and app data: device type, device identifiers, IP address, operating system, browser type, app version, language, time zone, and crash and performance data.
  • Usage data: how you interact with the app, such as the screens you view, the buttons you tap, the features and content you use, the practices you start or complete, and when and how long you use the app. We collect this through our own systems and third-party analytics tools (see section 6).
  • Website data: when you visit our websites, we and our analytics providers may automatically record information such as your IP address and domain, browser and device details (including device identifiers), the pages you visit, the date and time of your visit, files you download, the websites you came from and go to next, your approximate location (such as your city or region), and cookie data (see section 6). We collect this through web logs, cookies and similar technologies.

‍

Information from others

  • Sign-in providers: if you sign up with Apple, Google or another provider, we receive the information your settings allow, usually your name and email.
  • App stores and payment providers: confirmation of purchases and subscription status.
  • Partners: if you get Voda through an employer, charity or other partner, we may receive confirmation that you're eligible, such as an access code.

‍

Device permissions. Some features may ask for permission to access parts of your device, such as your microphone (for example, to record a voice note), your camera or photos (for example, to add an image), or notifications. We only access these when you give permission, and only for the feature you're using. You can change these permissions at any time in your device settings.

‍

3. How we use your information

‍

We use the information we collect for purposes including, but not limited to, the following:

  • To provide Voda: create your account, save your content, show you practices and reflections, and sync across your devices.
  • To personalise your experience: including with AI (see below).
  • To run community spaces safely: review posts, handle reports and appeals, and enforce our Community Guidelines (see section 4).
  • To keep people safe: we may check for content that suggests someone may need urgent support, so we can show support resources.
  • To manage purchases: subscriptions, Lifetime Memberships, gifts, scholarships and partner access.
  • To communicate with you: service messages and notifications (such as confirmations, account updates, reminders and changes to our terms), replies to your questions and support requests, and, if you choose, updates and offers you can opt out of at any time.
  • To improve Voda: understand how features are used, fix bugs and develop new content and features, mainly using aggregated or de-identified data.
  • To protect Voda and comply with the law: prevent fraud and misuse, enforce our terms, and meet legal obligations.
  • To fulfil our agreements: with you, and with partners who give you access to Voda.
  • To promote Voda: understand how people find us and measure how well our marketing works, as described in section 6.
  • To run and manage our business: including accounting, audits, planning, reporting, fundraising, insurance, and any merger, acquisition or sale of our business.

‍

Combining information. We may combine information we collect through our app, our websites and other sources, such as partners and service providers. When we do, we handle the combined information in line with this policy.

‍

AI-personalised content

Some content in Voda may be generated or personalised by AI, using information you provide and your activity in the app.

  • The AI is used to create personalised content for you, for non-clinical purposes. It doesn't diagnose, treat, assess or monitor any health condition.
  • Our AI providers process this information only to generate your personalised content. Our agreements with them don't allow them to use your information to train their AI models.
  • Our team may review samples of AI-generated content to check its quality and safety.
  • We label AI-generated content and explain how we use AI in Settings → How We Use AI.

‍

Safety screening

In some parts of Voda, we may automatically check for content that suggests someone may need urgent support. Not everything you write is checked. If something is flagged, we may show you support resources, and we may decide not to generate content or publish a post. These checks are there to support safety, not to assess, diagnose or monitor your health. Voda is a non-clinical service and isn't a crisis service, so please don't rely on it to recognise when you need help.

‍

4. Community spaces

‍

What others can see. When you post in a community space, other people using Voda might see what you post, along with any profile information shown in community spaces (for example, your profile icon). Your private content, such as journals, check-ins and plans, isn't shown to other users. The app shows what's visible to others when you post.

‍

Think before you share. What you post may reveal sensitive information about you, such as your sexual orientation, gender identity or how you're feeling. You choose what to share. Please leave out anything that could identify you or anyone else. To protect you and others, we may decline, edit out or remove content that includes identifying or other sensitive details, in line with our Community Guidelines.

‍

Review and moderation. We may review, moderate and act on content in community spaces, for example before it's published or after it's reported. To do this, authorised team members, and service providers or automated tools that help us, may see the content, related account information and any reports. We may hide or restrict content while we review it. We keep records of reports, moderation decisions and appeals for as long as we need them to handle appeals, keep the community safe and meet legal requirements. We may use internal tools and third-party services to manage moderation and alert us to content that needs review.

‍

Blocking and safety choices. If you block, mute, hide or report someone or something, or change similar safety settings, we store those choices so we can apply them and keep you and others safe. We may also use them to spot patterns of misuse.

‍

Use outside Voda. We may use short excerpts of community posts, such as in our social media or marketing. When we do, we don't include anything we know could identify you.

‍

Deleting posts. You can ask us to delete something you've posted. We may keep a copy where we need it for safety, legal or moderation records. Excerpts already used outside Voda without anything identifying you may remain.

‍

5. Our legal reasons for using your information

‍

If you're in the UK or EU, data protection law requires us to have a legal reason ("lawful basis") for each use of your information.

  • Running your account and providing the Services: our contract with you, or steps you ask us to take before entering into one.
  • Using sensitive information (such as information about your mental wellbeing, sexual orientation, gender identity or neurotype), including to personalise your content, publish your community posts, and understand how Voda is used in a pseudonymised form: your explicit consent.
  • Safety screening, and reviewing posts and reports: your explicit consent, and our legitimate interest in keeping users safe.
  • Processing purchases and subscriptions: our contract with you.
  • Sending service messages and notifications: our contract with you.
  • Sending marketing emails: your consent, which you can withdraw at any time.
  • Product analytics, fixing bugs and improving Voda: our legitimate interest in running and improving Voda, mainly using aggregated or de-identified data.
  • Non-essential website cookies: your consent, where the law requires it.
  • Using anonymised excerpts of posts outside Voda: our legitimate interest in sharing Voda's community voice, without identifying you.
  • Preventing fraud, keeping Voda secure and enforcing our terms: our legitimate interests.
  • Responding to legal requests and keeping required records: legal obligation.

‍

Your consent for sensitive information. Under UK and EU data protection law, some information you enter, such as about your wellbeing or sexual orientation, may count as "special category data" (which includes "data concerning health"), even though Voda is a non-clinical service. When you create an account, we ask for your explicit consent to use sensitive information as this policy describes. By giving that consent and going ahead with creating your account, you agree to us using this information in that way. You can withdraw your consent at any time by emailing support@voda.co. If you do, some features may stop working, and we may not be able to keep providing the Services to you. Withdrawing consent doesn't affect anything we did before you withdrew it.

‍

6. Who we share your information with

‍

We don't sell your personal information, and we don't share your private content, such as journals, check-ins and plans, with advertisers.

‍

Service providers. We use trusted providers to run Voda. They act only on our instructions, under contracts that require them to protect your information.

  • Hosting, storage and backend providers, to store your account and content and run the app and websites.
  • AI providers, to generate and personalise content.
  • Subscription and payment providers, including app stores, to process purchases and manage your access.
  • Email and communication providers, to send service messages and, if you choose, marketing emails.
  • Analytics and measurement providers, to understand how the app and websites are used and how people find us.
  • Team, support and moderation tools, to handle support requests, manage community spaces and alert our team to content that needs review.
  • Professional advisers, such as lawyers, accountants and insurers, where needed to run our business.

‍

Partners. If you get Voda through an employer, charity or other partner, we may share limited information to confirm your access, and aggregated statistics that don't identify you, such as how many people signed up. Partners don't see your private content, and we don't share what you post with them.

‍

At your request or with your consent. We may share information when you ask us to, when you consent, or where needed to complete something you've requested, such as a purchase, a gift, access through a partner, or sharing content to social media or other apps, or to meet our agreements with you or our partners.

‍

Legal reasons and safety. We may use or share information where we believe, at our discretion, that it's necessary to: comply with the law, a court order or other legal process; investigate, prevent or act on illegal activity, suspected fraud, misuse or breaches of our terms; protect the rights, property or safety of Voda, our users or anyone else; or establish, exercise or defend legal rights or claims.

‍

Business changes. We may share or transfer your information as part of, or when preparing for, a merger, acquisition, investment, financing, insurance, restructuring, insolvency, assignment or sale of all or part of our business or assets. This may include sharing information with potential buyers or investors and their advisers, under confidentiality.

‍

SDKs, advertising IDs and measurement. Our app may include software development kits (SDKs) from service providers, for example for analytics, crash reporting, subscriptions or advertising measurement. These may collect information such as device details, app events (for example, that the app was installed or a subscription started) and, where you allow it, advertising identifiers such as Apple's IDFA or Google's Advertising ID. On iPhone, we only access your advertising identifier if you allow tracking when asked. We advertise Voda on other platforms and may measure our campaigns using privacy-preserving tools such as Apple's SKAdNetwork or AdAttributionKit, which report aggregated results rather than who you are. We don't share your private content, profile and identity information or community posts with advertising platforms. You can reset or limit your advertising identifier at any time in your device settings.

‍

Third-party analytics. We work with third-party analytics and measurement providers to collect and analyse information about how our app and websites are used, and for auditing, research and reporting, such as which features and pages are used and how people find us. These providers may use cookies, SDKs, web beacons, pixels and similar technologies in our app, on our websites and in our emails. This may include profile information you've provided, such as your age or gender, linked to an account identifier rather than your name or email. They process this information on our behalf to help us understand and improve the Services.

‍

Cookies on our website. Cookies are small files stored by your browser. They let a website recognise you, remember your preferences, and understand how the site is used over time, for example the pages you view, your browser and device, your approximate location, and the sites you came from and go to (see "Website data" in section 2). Our website uses:

  • Essential cookies, which the site needs to work, such as for security and payments.
  • Analytics cookies (such as Google Analytics), to understand how people use the site. Where the law requires, we only use these with your consent.
  • Marketing or advertising cookies, if we use them, only with your consent where the law requires.

‍

You can change your choices at any time through our cookie settings, where available, or by contacting us at support@voda.co. You can also set your browser to refuse cookies, warn you before accepting them, or delete them. If you block or delete cookies, some parts of the site may not work properly. Some emails we send may also contain similar technologies, such as tracking pixels, to tell us whether an email was opened.

‍

International transfers. We're based in the UK, and your information may be accessed or processed in other countries, such as the US and countries in the EU, by our team, any affiliates, or our providers. Data protection laws in these countries may differ from those where you live. When we transfer personal information out of the UK or EU, we rely on safeguards permitted by law, such as adequacy decisions, certification frameworks like the EU–US Data Privacy Framework and its UK Extension, the UK International Data Transfer Agreement or Addendum, and EU Standard Contractual Clauses.

‍

Links and third-party services. Our app and websites may link to third-party websites and services, including support services, and may let you share content to social media or other apps. We don't control these third parties and aren't responsible for their content, products or privacy practices, and linking to them doesn't mean we endorse them. Their own privacy policies apply, so please review them. You use them at your own risk.

‍

7. Keeping your information safe

‍

How long we keep it

We keep information only for as long as we need it for the purposes in this policy. How long depends on the type of information and why we have it:

  • Account details and content you create: while your account is open. When you delete your account, we delete or anonymise this information within a reasonable period, unless we need to keep some of it for the reasons below. Copies in backups are removed as part of our normal backup cycle.
  • Community posts: until you or we remove them. If you delete your account, we may remove your posts or keep them in a form that's no longer linked to you.
  • Moderation records (reports, decisions and appeals): for as long as we need them to handle appeals, keep the community safe and meet legal requirements.
  • Purchase records: for as long as tax and accounting laws require.
  • Usage and device data: for as long as it's useful for understanding and improving the Services, after which we delete, aggregate or anonymise it.
  • Messages to us: for as long as we need them to help you and keep a record of our conversations.

‍

We may keep information for longer where the law requires or permits, or where we need it to resolve disputes, enforce our terms, or establish or defend legal claims.

‍

Security. We use technical and organisational measures designed to protect your information, such as encryption and access controls. We aim to limit access to team members and providers who need it, for example to review posts, handle reports, respond to support requests or keep people safe. No system is completely secure, and we can't guarantee the security of information you send to us. If a data breach affects you, we'll notify you and the relevant authorities where the law requires.

‍

Aggregated and de-identified information. We may create aggregated, anonymised or de-identified information from information collected through our app, websites and other Services, so that it no longer identifies you. We may use and share this information for any lawful purpose, for example to improve Voda, carry out research, understand and share our impact, and publish insights (such as how many people found a practice helpful). We keep de-identified information in that form and won't try to re-identify it, except where the law allows, such as to check our de-identification works.

‍

Research. We may use anonymised or aggregated data to understand trends and improve Voda, including with academic or research partners. We may also invite you to take part in surveys, interviews, user testing or research studies. Where a study involves information that could identify you, we'll explain what's involved and ask for your consent before you take part.

‍

Children. Voda is only for people aged 18 or over. We don’t knowingly collect information from anyone younger. If we learn that an account belongs to someone under 18, we’ll close it and delete their information, except where we need to keep some of it for legal or safety reasons. If you believe a child is using Voda, please contact us at support@voda.co.

‍

8. Your rights and choices

‍

Things you can do in the app: depending on the features available, you can view, edit or delete content you've created, change your notification preferences, read about how we use AI in Settings → How We Use AI, and delete your account in Settings → Delete Account. You can also stop the app collecting information by uninstalling it, although uninstalling doesn't delete your account or the information we already hold.

‍

Your rights. Depending on where you live, you may have the right to:

  • access the personal information we hold about you and get a copy
  • correct information that's wrong
  • delete your information
  • receive your information in a portable format
  • object to, or ask us to limit, how we use your information
  • withdraw consent at any time
  • not be subject to decisions based solely on automated processing with significant effects (we don't make these)

‍

To use any of these rights, email support@voda.co. We'll respond within the time the law requires, usually one month. We may need to confirm your identity first. Sometimes we may not be able to do everything you ask, for example where the law requires us to keep certain information, and we'll explain why. We won't treat you differently for using your rights.

‍

UK and EU. If you believe we haven't handled your information properly, you can complain to the UK Information Commissioner's Office or your local EU data protection authority, though we'd appreciate the chance to help first.

‍

United States. Depending on your state, you may have rights to know about, access, correct or delete your personal information, and to opt out of certain uses of it, such as sale, targeted advertising or profiling. We don't sell your personal information. If you allow tracking on your device, limited app information may be used to measure and improve our advertising, as described in section 6. You can change this at any time in your device settings. To use your rights, or to appeal a decision about a request, email support@voda.co. Where the law allows, someone else can act on your behalf.

‍

Consumer health data. Some US states, such as Washington and Nevada, have laws that treat certain information, for example about your wellbeing, sexual orientation or gender identity, as "consumer health data", even when it's collected by a non-clinical app like Voda. We use this information only as this policy describes, and you have the same rights over it as above, including to withdraw your consent.

‍

Marketing. You can unsubscribe from marketing emails at any time using the link in any email, or by contacting us. We'll still send service messages, such as changes to our terms.

‍

9. Changes and contact

‍

Changes to this policy. We may update this policy as Voda changes or the law changes. For significant changes, especially new uses of sensitive information, we'll tell you in advance by email, in the app, or both, and ask for your consent again where the law requires. Other changes take effect when we post the updated policy at voda.co/privacy-policy. The "Last updated" date at the top shows the latest version, so please check back from time to time.

‍

Contact us. For any privacy question, or to use your rights, email support@voda.co.

‍

Voda Technologies Limited, a company registered in England and Wales. Company number: 13539218