Privacy policy

01Who we are

Votu is made by dotxyzLabs, a personally owned business (CVR 44006928, Denmark). We decide how and why your personal data is used, which makes us the “controller” under the EU General Data Protection Regulation (GDPR).

You can reach us at xyz (at) votu.one about anything in this policy.

02What we collect and why

Here's everything Votu collects, what it's for and the legal basis we rely on.

03Location

Votu asks for location permission “While Using the App”. We use it to:

• show events and music near you on the map;
• check that you're really at an event when you check in, vote or send a request. We store how far you were from the event at that moment, not your coordinates;
• place a music pin where you identified a song. Its position and place name are public on the map;
• let artists and DJs set where their events take place.

Votu doesn't use your location in the background. You can turn location access off at any time in iOS Settings. The map still works, but nearby results and check-ins won't.

04Microphone, Apple Music and photos

• Microphone: used only when you tap to identify a song. Apple's song recognition service listens briefly and finds a match. Votu doesn't record or store the audio; we keep only the song that was identified.
• Apple Music: if you allow it, Votu searches the Apple Music catalogue so you can pick songs. We don't read your music library.
• Photos: Votu only receives the photos you choose. Photos you upload for your profile, events or music pins are stored publicly, so anyone with the link can view them.

05What other people can see

• Anyone, including people without an account: your profile (everything in the Profile row above), the events you publish, who you follow, and music pins with their photos.
• Anonymous mode: if you turn it on when you create or join a music pin, other people don't see your name on it. We still record that it was you, so we can act on reports.
• Artists and DJs see the check-ins, votes, rankings and song requests for their own events.

06Who we share data with

We don't sell your data and we don't use it for advertising. We use these providers to run Votu, under agreements that limit what they can do with it:

• Supabase: our database, sign-in and file storage, hosted in the EU (Ireland).
• Netlify: hosts the votu.one website and measures how quickly its pages load.
• Apple: song recognition, Apple Music catalogue search, and app distribution through the App Store and TestFlight. Apple's own privacy policy covers what Apple processes.
• Stripe: processes payments, if you make one. Your card details go straight to Stripe; we never see them.
• Email providers: to send sign-in codes and run our inbox.

We may also disclose data when the law requires it.

The app has no analytics, advertising or crash-reporting tools built in. If we add one, we'll update this policy before it ships.

07International transfers

Our main database is in the EU. Some providers, including Apple, Netlify and Stripe, may process data outside the EU/EEA, for example in the United States. When they do, the transfer relies on safeguards the GDPR allows, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

08How long we keep it

• Account, profile and activity: for as long as your account exists. When your account is deleted, we delete your personal data, apart from anything we're legally required to keep.
• Deleting your account: in-app account deletion is coming soon. Until it's available, email xyz (at) votu.one from the address on your account and we'll delete it within one month.
• Waitlist: until we've sent you access to the TestFlight beta or the launch message for your city, and then we delete it. You can ask us to delete it sooner.
• Music pins: pins disappear from the map after a while. We keep a history of pins, including where they were and who created them, for as long as the creator's account exists.
• Payment records: for as long as bookkeeping law requires, which in Denmark is five years.
• Server logs: kept by our providers for a limited period, for security.

09Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it or export it. You can also object to or restrict how we use it, and withdraw your consent at any time, for example by leaving the waitlist or turning off location access.

Email xyz (at) votu.one and we'll reply within one month. You can also complain to the Danish Data Protection Agency (datatilsynet.dk) or the authority where you live, such as Datatilsynet in Norway (datatilsynet.no).

10Children

Votu is for adults. You must be at least 18 years old to use it. If you believe a child has given us personal data, contact us and we'll delete it.

11Security

Data travels over encrypted connections, and access rules in our database limit who can read and change what. No system is perfectly secure, but if a breach puts your data at risk we'll tell you and the authorities, as the law requires.

12The website

votu.one has no advertising and no tracking cookies. It remembers your language choice in your browser's local storage. Our hosting provider, Netlify, logs requests, including IP addresses, for security and reliability. It also measures how quickly our pages load, together with your browser type, without using cookies.

13Changes to this policy

When something changes, we'll update this page and the date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect.

14Contact

Questions, requests or complaints about your data: