Privacy Policy
VetoVow is designed to let two people consider baby names without exposing either person’s individual decisions. The app works locally without pairing. Optional couple sync uses an anonymous app identity and a narrowly scoped service so that mutual Yes matches can be calculated without showing one member’s private vote list to the other.
Information stored on your device
VetoVow stores onboarding status, filters, individual votes, shortlist membership, shortlist order, private notes, match references, and app settings on your device using Apple platform storage. If you enable pairing, an anonymous session credential is stored in the iOS or iPadOS Keychain.
Optional anonymous couple sync
When you create or join a couple space, VetoVow processes an anonymous user identifier, your chosen display name, couple-space identifier, role, individual vote records, mutation identifiers, and sync timestamps through a dedicated Cloudflare Workers and D1 service. A random bearer credential is stored in your device Keychain; the service stores only its SHA-256 digest. An invite code is presented to the creator once; the service stores a one-way hash of that code rather than the readable code.
Authenticated Worker routes limit each identity to its own couple space, and the service does not provide a raw-vote read route. Mutual match identifiers are returned only when both members marked the same name Yes. A paired member cannot request the other member’s vote list through the app’s service interface.
Data we do not request
VetoVow does not require an email address, phone number, contact list, precise location, photo library, advertising identifier, or social login. It contains no advertising SDK, third-party analytics SDK, or cross-app tracking technology. We do not sell personal information.
Purchases
Apple processes the optional VetoVow Lifetime in-app purchase. The app uses StoreKit to obtain product availability and verified entitlement status. We do not receive your complete payment-card number or Apple Account password. Apple retains purchase information under its own terms and privacy policy.
Name-content sources
The bundled name catalog includes meanings and origins from Baby Names API and U.S. popularity rankings derived from public Social Security Administration data. Your use of the app is not sent to either source.
Export and sharing
Shortlist export happens only after you choose it. The exported text or JSON may include shortlisted names, origin, meaning, rank, and any private note attached to those shortlist items. Apple’s system share sheet lets you choose the destination. VetoVow does not receive a copy of the export.
Retention and deletion
Local data remains until you delete it or remove the app, subject to device backup behavior. Unused invite codes expire after seven days. Sync identities, memberships, votes, deletion tombstones, and replay receipts remain until Delete all data removes local app data, Keychain sync credentials, and the associated anonymous account and couple-space data from the sync service. Deleting one paired account removes that couple space and its sync records for both members. Apple purchase records remain associated with the Apple Account and may be restored.
Security
VetoVow uses encrypted HTTPS connections, Keychain storage for the anonymous credential, server-side authorization, hashed bearer credentials and invite codes, bounded request sizes, rate limits, and authenticated service functions. No technical system can promise absolute security; please avoid placing sensitive medical or legal information in shortlist notes.
Children’s privacy
VetoVow is intended for adults choosing names and is not directed to children under 13. We do not knowingly collect personal information from children.
International processing
The optional sync service uses Cloudflare’s global network and D1 infrastructure. Depending on where you live, anonymous sync data may be processed outside your country. By enabling pairing, you request that processing so the app can provide couple matching.
Changes
We may update this policy when the app, its providers, or legal requirements change. The effective date above identifies the current version. Material changes will be reflected here before the changed behavior is released.
Contact
For privacy questions or deletion help, email [email protected] or visit VetoVow Support.