Legal

Privacy Policy

Last updated: August 2026

This policy describes what PollVey actually does with your information today — what is collected, why, which other companies receive it, what survives when you delete your account, and what PollVey does not collect at all. Where the honest answer is a limitation rather than a feature, it is written here as a limitation.

Who this applies to

This policy covers the PollVey applications for iOS and Android and the PollVey website at pollvey.com. Questions and privacy requests go to support@pollvey.com, which is the contact address for everything on this page.

Information you give us

Account details. Your name, email address, password and date of birth. Date of birth is required when you sign up — it is how the 13+ minimum and the protections for 13–17 accounts are applied.
Profile details. Your username and handle, bio, profile photo, interests, the city and country you type in, and any profile attributes you choose to add. These are self-declared text. They are not read from your device.
Business account details. Business name, contact name, business email address, phone number, business address, industry and other business fields, plus your logo and banner images.
Guardian links. If a teen account and a supervising adult are linked, the link and the control settings attached to it are stored.
Support messages. The name, email address, topic and message you type into the contact form on this website.

Information from your device, only with your permission

PollVey asks for four device permissions and for notification permission. Each is optional, each is requested only when you first use the feature that needs it, and each can be withdrawn in your device settings.

Contacts — to build Poll Groups, invite people, and see which of your contacts already use PollVey. See the section below; this one deserves detail.
Camera — to take a photo or record video to attach to a poll, a survey or your profile.
Photo library — to choose existing photos and videos to attach. PollVey reads from your library and never writes to it.
Microphone — to record audio to attach.
Notifications — to send push notifications. This produces a push token for your device, stored so notifications can be delivered to it.

PollVey does not ask for location, calendar, health, motion, phone state, SMS or your music library, and the Android app actively removes those permissions from its build rather than leaving them declared and unused.

Contacts, in detail

Contact access is optional and nothing happens until you grant it. Two different things happen with contact data, and they are worth separating:

Checking who already uses PollVey. The app sends the contact records you selected — up to 500 at a time, as names, email addresses and phone numbers — to PollVey's server. The server compares the email addresses against registered accounts in memory, tells the app which ones matched, and stores nothing from the check.
Saving a Poll Group. When you add people to a Poll Group, the name, email address and phone number of each member you added are stored on PollVey's servers in readable form, for as long as that entry exists.

The people in a Poll Group may not have PollVey accounts and may not know their details are stored. Only you can change that: you can revoke contact permission, remove a member, delete imported contacts, or delete the group. Please only add contacts you have a reason to add.

If you delete your PollVey account, those contact entries are unlinked from your account but the name, email address and phone number you typed remain — they are the contact-book entries of a group, not data about you.

Information created as you use PollVey

Your content. Polls, poll options, surveys, survey questions, votes, survey responses and answers, comments, poll discussion, group messages, direct messages, hashtags, and the photos, video and audio you upload.
Sign-in records. Each sign-in creates a session record which includes the IP address the request came from and the browser or device identification string it carried. The record is removed when the session ends, and with your account.
Purchase records. What was bought through the App Store or Google Play, which transaction it was, and what the store product costs. See "Purchases, Poll Credits and subscriptions" below.
Safety and moderation records. Reports you file, reports filed about you, the events behind a safety decision, moderation cases, and any restriction or sanction applied to an account.
Business trial records. One-way identifiers used to establish that a business organisation has already had its one complimentary trial. See "Business Trial and abuse prevention" below.
Server logs. PollVey's server writes an ordinary request log line for each API call — the method, the path, the response status and how long it took.

What PollVey does not collect

No location. PollVey does not collect location from your device. There is no location permission, no location code in the app, and the location permissions are explicitly removed from the Android build. The city and country on your profile are text you typed.
No advertising. There is no advertising in PollVey, no advertising identifier is requested or read, and there is no advertising or attribution software in the app. Nothing is used for ad targeting or ad profiling.
No analytics or crash-reporting tools. PollVey does not use a product-analytics service, a crash reporter or a performance-monitoring service. The server request log described above is the only usage record that exists.
No analytics or advertising cookies on this website. This site sets none, which is why there is no cookie banner. It does load its typeface from Google's font service, so your browser fetches the font files from Google.
No card details. PollVey never receives or stores card numbers, bank details or billing addresses. Payment is taken entirely by Apple or Google.
Nothing read from elsewhere on your device. PollVey does not read your email, SMS messages, calendar, browsing history, search history, installed apps, health or fitness data, or your music library.
No sale of personal information and no sharing with data brokers.

What "anonymous" means here

A survey can be set so the survey owner does not see who gave which answer. That setting changes what is displayed; it does not change what is stored. Every vote and every survey response is stored linked to the account that submitted it, because PollVey needs that link to stop the same person responding twice, to recognise an author's own response to their own content, and to meter Poll Credits correctly. Poll votes are always recorded with attribution — the setting applies to surveys.

So: your response can be hidden from the person who asked the question. It is not anonymous to PollVey.

How PollVey uses information

To run the service — create and deliver polls and surveys, record responses, and show results.
To sign you in and keep your session working.
To deliver privately targeted content to the people it was addressed to.
To produce results, analytics and AI-assisted insights for the person who created a poll or survey.
To moderate content and enforce the safety rules, including protections for 13–17 accounts.
To detect and prevent fraud and abuse, including repeated claiming of the complimentary Business Trial.
To process purchases and to meter Poll Credits.
To send the notifications you have enabled.
To answer support enquiries.

AI features

PollVey's AI features send content to OpenAI, which processes it and returns a result. This affects the following features:

Drafting and coaching. The draft text you ask PollVey to generate or improve.
Translation. The text you ask to have translated.
Moderation. The classifier runs before content is published. That means content you wrote and then decided not to publish has still been sent for classification.
Insights. When a survey owner requests AI insights, up to 60 open-text responses are sent word for word, together with the aggregate tallies and, if the survey collected them, the demographic breakdown. Those responses were written by respondents, not by the person requesting the insight.

What is not sent: no account identifier, email address, name, session token or push token accompanies any of these requests. Direct messages are never sent to an AI feature. Audio is never sent — the AI features accept text only.

These requests leave PollVey's servers through an outbound network proxy operated by Vibecode, so the traffic passes through Vibecode's infrastructure on its way to OpenAI.

Other companies that process data for PollVey

Running PollVey means other companies handle some of your information. This is the list, and what each one receives:

Apple and Google. They take the payment and hold the billing relationship. PollVey sends them a receipt or purchase token to verify a purchase and receives back whether it is valid.
RevenueCat. Provides the in-app purchase infrastructure. PollVey does not send it an account identifier, and stores no RevenueCat identifier against your account.
OpenAI. Receives the content described in "AI features" above.
Vibecode. Three separate things: file storage for the photos, video and audio you upload; delivery of your sign-in one-time codes by email; and the outbound network proxy that AI requests pass through.
Resend. Delivers messages submitted through this website's contact form to PollVey's support address.
Expo. Delivers push notifications, relaying them to Apple's and Google's notification services. Your push token and the notification's content pass through.
Supabase. Hosts the PostgreSQL database that stores PollVey's data.

PollVey also shares information where the law requires it, such as in response to a valid legal request, and would transfer it as part of a merger or acquisition of the business.

Purchases, Poll Credits and subscriptions

Every digital purchase — Business subscriptions and Poll Credit packages — is processed through Apple In-App Purchase or Google Play Billing. PollVey never collects or stores your payment details.

What PollVey does keep is the record of the purchase itself: the platform, the product identifier, the store transaction identifiers, the price of the store product, what type of event it was, and a one-way hash of the receipt.

Poll Credits are prepaid consumables. Publishing is free. A credit is consumed only when a business account receives an accepted, eligible response. Personal accounts never consume credits, duplicate responses are never charged, and an author's own first valid response to their own content is free.
Credits do not expire through inactivity — there is no expiry timer and no decay. But unused Poll Credits are forfeited if you permanently delete your account, and they are not refunded or transferred.
Subscriptions are bought and renewed through the store. PollVey cannot cancel an App Store or Google Play subscription — that has to be done in your Apple or Google account settings. Deleting your PollVey account does not cancel it either, and PollVey will never tell you a store subscription was cancelled, because it cannot cancel one.

Business Trial and abuse prevention

The complimentary 14-Day Business Trial belongs to the business organisation, keyed by its business email domain — not to the individual person — and each organisation gets exactly one. No payment method is required to start it.

To make "one per organisation" enforceable, PollVey stores one-way hashes of the business name, the email domain, the phone number and the address, plus a hash of a device identifier supplied by the app, and compares those hashes across organisations to spot the same business or device applying repeatedly. The device identifier is stored only as a hash; the raw value is not kept, and the hashed business details are not kept in readable form.

These records survive account deletion, which is why deleting a Business Account does not restore complimentary trial eligibility. This restricts the complimentary Business Trial only — a paid subscription is never blocked by any of it.

Signing in

You sign in with your email address and a password of at least six characters, plus one-time codes sent to your email address. Those codes are delivered by a third-party transactional email service, so your email address is transmitted to that service each time one is sent.

PollVey does not currently offer two-factor authentication for user accounts.

Moderation and safety

Content is checked by an AI classifier before publication and can be blocked, and people review reports and cases. PollVey records reports filed by and about an account, the events behind a safety decision, open moderation cases, and any live restriction or sanction.

A live sanction is stored against a one-way identifier derived from your identity, which means it can reattach to a new account if the same person registers again. Deleting your account is not a way to clear a suspension.

Visibility and sharing controls

Your profile can be public, private, friends only, or visible to your Poll Groups only — and individual fields can be hidden or shown independently.
You control who can follow you, who can send you friend requests, who can message you, and who can mention you, and you can block accounts.
Creators choose who can find and respond to each poll or survey, and when results are visible: live, hidden until the content closes, creator-only, or visible once you have participated.

One limitation worth stating plainly: uploaded media is served from unguessable web addresses, but those addresses are not checked per viewer. Anyone who has the link can open the file. Uploaded files are also not virus-scanned.

Teens (13–17) and guardians

You must be at least 13 to use PollVey, or older where your country sets a higher minimum. The service is not directed to children under this age. If we learn that an account belongs to an underage user, we will take appropriate steps to disable or remove it.

Protective defaults, locked. A known teen account starts private, is not discoverable in search, requires approval for new followers, has no public profile page, and limits mentions to friends. These are enforced on the server — if the app asks for a more open setting, it is corrected back.
Content filtering. Alongside the general moderation system, a dedicated explicit-content check keeps clearly adult material away from teen accounts.
No ad targeting of minors, because there is no advertising in PollVey at all, and no behavioural ad profiling of anyone.
Guardians. A teen and a supervising adult can be linked, initiated by either and confirmed by the other. A linked guardian can require approval for new follow and friend requests, set a daily time limit and a downtime window, and receive safety alerts. The daily time limit is applied by the app itself.
The guardian link and its control settings are deleted when the account is deleted.

Business data

Business Accounts may upload customer or employee contact information only when they have the necessary rights or permissions to do so. Businesses are responsible for complying with applicable privacy and marketing laws.

Deleting your account

You can delete your account yourself, at any time, from Settings in the app. Before you confirm, the app shows you an assessment generated from your actual account — including what you are about to lose. Deletion is permanent and cannot be undone.

Deletion removes your identity, your content and your access: your account and sessions, profile, polls and surveys and their results, votes and responses, comments and messages, poll groups, uploads and the stored files behind them, notification settings and push tokens, guardian links, your subscription record and Poll Credit balance, and your business profile and organisation membership.

A small set of records survives, stripped of your name, email address and phone number:

Purchase and credit-usage records, as financial evidence, and to stop the same store transaction being applied twice.
Safety and moderation records, so that deletion is not a way to erase evidence or shed a sanction.
Business Trial history and the organisation record, so trial eligibility cannot be reset by deleting and re-registering.
Invitation records, with any still-redeemable link revoked first.
Other people's records that mention you — notifications they received, the rows that made a private poll private, and a group owner's own contact-book entry — with your identity replaced by a marker that can never match a live account.

Messages sent through the website contact form carry no link to any account, so account deletion cannot reach them. To have support correspondence removed, email support@pollvey.com.

The full breakdown is on the Delete Account page.

How long information is kept

While your account exists, your information is kept for as long as it is needed to run the service for you.

The records listed above that survive deletion are kept indefinitely. PollVey does not run a job that purges them after a set period, and will not publish a retention period it does not enforce. Two things do end on their own: the queue that removes your uploaded files from storage runs until each file is confirmed gone, and a released handle is held for a period before anyone else can claim it.

Your choices

Edit or remove your profile information, and change what is visible to whom.
Delete imported contacts, remove Poll Group members, and delete groups.
Manage or turn off notifications, and block accounts.
Delete your account.

PollVey does not currently offer a general export of your personal data. You can export the results of polls and surveys you created as reports from within the app; that is a results report, not a copy of everything held about you. For anything beyond that, write to support@pollvey.com — and do it before deleting your account, because a deleted account cannot be recovered to answer.

Where information is processed

PollVey and the companies listed above operate in more than one country, so your information may be processed and stored outside the country you live in.

Security

Traffic between the app and PollVey's servers uses HTTPS, as does every outbound connection to the companies listed above. PollVey uses administrative, technical and organisational safeguards designed to protect information from unauthorised access, use or disclosure. No system is completely secure, and the limitation on uploaded media described above is a real one.

Changes to this policy

We may update this policy as the product changes. Material changes will be communicated in the app and reflected in the "last updated" date above.

Contact

PollVey · support@pollvey.com · pollvey.com