Privacy Policy

Introduction

This Privacy Policy describes how VoxFi collects, uses, shares, and protects the personal data of users of VoxFi (the "App", "Game", "Platform"), available on iOS, Android, and the web at voxfi.com. VoxFi is a fantasy prediction game: users record opinions on real-world events and accumulate scores based on them. Game mechanics are fictional — there is no real-money wagering, deposits, or withdrawals in the game. The App may separately offer an optional paid subscription (VoxFi Pro) for additional features; billing is not functionally enabled in this version.

This policy was prepared in compliance with Brazil's Lei Geral de Proteção de Dados Pessoais (LGPD — Law No. 13.709/2018) and applies to all users, with a focus on the Brazilian audience.

1. Data controller

VoxFi ("VoxFi", "we"), operated by VOXFI BRASIL DIGITAL LTDA, CNPJ 65.698.697/0001-61, headquartered at Avenida Paulista, 726, Bela Vista, São Paulo – SP, Brazil, is the controller of personal data processed through VoxFi under LGPD art. 5(VI). VoxFi defines the purposes and means of processing personal data collected through the App and voxfi.com.

For any privacy-related questions, requests, or complaints, contact privacy@voxfi.app.

2. Data we collect

We collect the following categories of personal data:

a) Identity and account data (via Supabase, our authentication provider): email address; OAuth account identifier when signing in with Google or Apple; display name and/or chosen username (handle); profile photo (avatar) when provided by the user or OAuth provider.

b) Gameplay data: opinions and votes on Platform events (YES/NO and other available response formats); score, ranking position, and performance history; follower/following relationships; notification preferences; event feed interaction history (for personalization — see section 3).

c) Technical and device data: device model, OS and version; installed app version; installation/session identifiers; IP address for security and fraud prevention; access logs generated by App use.

d) Support contact data: when you message privacy@voxfi.app or another support channel, we collect the message content and email address used to respond.

The App does not currently process payments: we do not collect credit card, bank account, PIX key, or other financial data. VoxFi may offer an optional VoxFi Pro subscription in the future; before any in-app billing goes live, this Privacy Policy will be updated to disclose the payment processor and any financial data processed.

3. Purposes

Personal data listed in section 2 is processed to: operate the game and its features — record opinions, calculate scores, display rankings, and enable social interactions (follow, comment, etc.); authenticate users and maintain secure sessions, including email OTP and Google/Apple social login; personalize the event feed and recommendations based on interaction history; send notifications related to user activity when enabled; ensure Platform security and prevent fraud, multi-account abuse, and misuse; respond to support requests and data-subject rights; comply with applicable legal and regulatory obligations.

4. Legal basis (LGPD)

Processing by VoxFi relies on LGPD art. 7 bases: contract performance (art. 7(V)) to run the game, authentication, scoring, ranking, and essential features for registered users; legitimate interest (art. 7(IX)) for security, fraud prevention, and feed personalization proportional to user behavior in the App; consent (art. 7(I)) when required, e.g. notification preferences and social login via Google or Apple; legal/regulatory obligation (art. 7(II)) when required by law, court order, or competent authority.

5. Sharing and processors

VoxFi does not sell, rent, or trade users' personal data. Data is shared only with processors strictly necessary to provide the service, or when required by law: Supabase — authentication and database; Vercel — web hosting and CDN; api-dev.voxfi.app — VoxFi backend (opinions, scores, rankings, follows, notifications); Google and Apple — when the user chooses social authentication, under their respective privacy policies.

All listed processors act on VoxFi's instructions and are contractually bound to process data only for the purposes described here, with security standards appropriate to the data processed.

6. Retention

Personal data is kept while the user's account is active and as long as needed for the purposes in this policy. On account-deletion requests (section 7), VoxFi processes the request within 15 business days; complete deletion or anonymization within 30 calendar days, except where law requires minimum retention (access logs for 6 months under Brazil's Marco Civil da Internet; data required for legal compliance; data needed for legal proceedings; fraud prevention for the strictly necessary period).

7. Data subject rights (LGPD)

Under LGPD art. 18, you have the right to: confirm processing exists; access your data; correct incomplete, inaccurate, or outdated data; anonymize, block, or delete unnecessary or excessive data; port data to another provider; delete data processed on consent; information on sharing; information on refusing consent and consequences; revoke consent where applicable.

To exercise these rights, email privacy@voxfi.app with the email or handle linked to your account and the right you wish to exercise. We respond within 15 business days.

Account deletion: you may delete your account in the App under Settings → Delete account. Deletion is permanent and removes ranking, history, opinions, and verification linked to the account. Alternatively, email privacy@voxfi.app with subject "Account deletion". After identity verification, VoxFi processes within 15 business days; complete deletion or anonymization within 30 calendar days, except data legally required to be retained.

8. Minors

VoxFi is intended for users aged 13 and over, aligned with store age ratings at launch. We do not knowingly collect personal data from children under 13 without prominent, specific parental consent under LGPD art. 14.

If VoxFi identifies a user below the minimum age, the account may be suspended and associated personal data deleted, except where retention is legally required.

9. International transfers

Infrastructure providers used by VoxFi — Supabase and Vercel — may store and process personal data outside Brazil, including in the United States and the European Union.

These transfers comply with LGPD art. 33. VoxFi selects processors with contractual safeguards and security standards consistent with international data-protection best practices.

10. Changes to this policy

This Privacy Policy may be updated periodically to reflect changes to the App, applicable law, or our processing practices. Material changes will be communicated through the App and/or registered email when possible, with reasonable advance notice.

The current version will always be available on this page, identified by the "last updated" date and version number at the top.

11. Contact / Data Protection Officer (DPO)

To exercise LGPD rights, ask about this policy, report security incidents, or contact VoxFi's data protection officer (DPO): privacy@voxfi.app.

We will respond to all requests within applicable legal timeframes.