Privacy Policy
Effective and last updated: 2 August 2026
Short version. Vouch stores the events you create, the RSVPs and comments you write, the invite codes you mint, and who vouched for whom — because those five things are the app. It has no advertising SDK, no third-party analytics SDK, never touches your contacts, never tracks your location, and can add to your calendar without being able to read it. You can delete your account and everything attached to it from inside the app.
Who this policy covers
This policy describes the Vouch iPhone app and the vouch.keenshift.ai website, both operated by KeenShift in Sydney, Australia. Vouch is a private guest-list and invitation app for social gatherings. It is not a ticketing platform, a payment processor, or a public social network.
Signing in
Vouch uses Sign in with Apple and nothing else. There is no password, no email sign-up form and no phone number. When you sign in, Apple returns a signed token that Vouch verifies against Apple’s public keys. From it the app keeps only the stable, app-specific user identifier Apple issues for you — a value that is unique to Vouch and cannot be used to identify you in another app.
Alongside that identifier your account row holds the display name you chose, the identifier of the person who vouched for you, how far down the chain you sit, how many unspent invite seeds you have, and the date you joined. There is no email address, no address book, no phone number and no advertising identifier in it.
You can also open Vouch and look through a built-in sample circle without signing in at all. That content is generated on your device, involves no real people and sends nothing anywhere.
What you create, and who can see it
- Events. Title, subtitle, start and end time, the location label you typed, description, host notes such as a menu or lineup, mood or format tags, an optional reference link, a guest cap, and the visibility you chose.
- RSVPs. Going, maybe or no, whether you are bringing a plus-one, and any note you attach. The full RSVP list is visible to the event’s host. Other guests see the tally, not each other’s notes. Hosts on Vouch Pro can export that list for an event they host.
- Comments. Threaded comments on an event are visible to the people who can see that event.
- Invites. Each code you mint is stored with who issued it, who redeemed it, and when it was created, redeemed or revoked. Codes expire seven days after they are minted.
- The trust chain. The link between you and the person who vouched for you is deliberately visible to other members, because being able to see how someone reached the room is the whole point of the app. Do not accept or issue an invite if you do not want that connection shown.
Cover photos
When you attach a cover photo to an event, Vouch re-encodes it on your iPhone and removes its EXIF, GPS, IPTC and TIFF metadata before anything leaves the device, so the coordinates of your home do not travel with a picture of your dinner table. The same strip runs again on the server as a second line of defence. Photos are stored in a private Cloudflare R2 bucket that is not publicly listable and is readable only through Vouch’s own service.
Calendar, reminders and Live Activities
Calendar permission is requested as add-only (write-only) access. With it, Vouch can place an event you have joined into your calendar; it is technically incapable of reading any other entry, and no calendar content is ever sent to us. Reminders for events you have joined are scheduled by iOS on your device. The countdown Live Activity for an upcoming event is rendered by iOS on your Lock Screen from data already on the device.
Vouch Pro and payments
Vouch Pro is an auto-renewing subscription sold through Apple. All payment handling belongs to Apple: we never receive or store your card details, billing address or Apple Account credentials. The app reads Apple-provided, signed purchase status through StoreKit to decide whether to unlock unlimited hosted events, guest list export and the Pro badge.
What Vouch does not do
- No advertising SDK, ad network, or advertising identifier.
- No third-party analytics or attribution SDK.
- No access to your contacts. Vouch never asks for the address book, and cannot upload or scan it.
- No location tracking. Vouch has no location permission; the place of an event is a line of text a host typed.
- No cross-app or cross-site tracking, and no data broker relationships.
- No sale of personal information and no sharing of it for cross-context behavioural advertising.
Service providers
Apple — Sign in with Apple, StoreKit purchases, calendar permission, notifications and Live Activities. Cloudflare — the app’s API runs on Cloudflare Workers, event and membership data is stored in Cloudflare D1, and cover photos in Cloudflare R2. Vercel — hosts this website. Cloudflare and Vercel necessarily process network information such as your IP address in order to deliver and protect requests; Vouch does not keep IP addresses in an analytics store, because it has no analytics store.
We may disclose information where we are legally required to, or where it is necessary to protect members and the service from abuse.
This website
vouch.keenshift.ai is a set of static pages. It sets no cookies and loads no scripts, advertising pixels, third-party fonts or embedded media. Nothing you do on it is linked to your Vouch account.
Retention and deletion
- Deleting an event removes that event together with its RSVPs and comments.
- Revoking an unredeemed invite code removes it. Unredeemed codes also expire on their own after seven days.
- Deleting your account — from Profile → Delete account in the app — removes your account row, every event you host along with its RSVPs and comments, all of your own RSVPs and comments on other people’s events, and every invite code you issued or redeemed. It is immediate and it is not recoverable.
- Content other members wrote about their own attendance on an event you did not host stays with that event, which belongs to its host.
Children
Vouch is not directed to children under 13 and we do not knowingly collect personal information from them. Hosts are responsible for who they invite.
Where processing happens, and changes to this policy
Apple, Cloudflare and Vercel all operate globally, so the handling of a request can take place on infrastructure outside the country you are sitting in. We may update this policy as Vouch changes; the date at the top changes when we do, and anything material will also be surfaced inside the app.