Votails

Votails Privacy Policy

Effective Date: May 15, 2026 Last Updated: May 15, 2026

This Privacy Policy describes how Lash Digital Solutions LLC, a Florida limited liability company ("Votails," "we," "us," or "our"), collects, uses, discloses, and protects information when you use the Votails mobile application and any related websites or services (collectively, the "Service").

By creating an account or using the Service, you acknowledge that you have read and understand this Privacy Policy.

1. Who We Are and How to Contact Us

You may also send privacy-related correspondence to the email above with the subject line "Privacy Request."

2. Age Requirement

The Service is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 13 (in compliance with the U.S. Children's Online Privacy Protection Act, "COPPA") and we do not allow anyone under 18 to register, regardless of jurisdiction. If you believe a minor is using the Service, contact us immediately and we will remove the account and delete associated data.

3. Information We Collect

We collect information in three ways: (a) information you provide directly, (b) information collected automatically, and (c) information from third parties.

3.1 Information you provide

  • Account information: name, email address, date of birth, phone number (if used for verification). You create your account with Sign in with Apple — we receive an Apple-provided identity token and account identifier, and we never collect, receive, or store a password.
  • Profile information: photos, gender identity, sexual orientation, pronouns, zodiac sign, biography, interests, lifestyle attributes (drinking, smoking, exercise, religion, children preference, height, education, occupation), relationship goals, prompts/answers.
  • Pet information: pet name, species/type, breed, description, pet photos, pet parenting style answers.
  • Preference information: age range, distance, pet preferences, dealbreakers.
  • Communications: messages exchanged with other users, playdate proposals, support requests.
  • Subscription / payment information: Apple App Store and Google Play handle payment processing — we do not receive or store your credit card number. We receive a transaction identifier and subscription status from Apple/Google.
  • Verification information: if you opt in to photo verification, a selfie used to compare against your profile photos (deleted within 30 days of verification).
  • Reports & support submissions: content of any user reports, blocks, or messages to our support team.

3.2 Information collected automatically

  • Device & technical information: device model, operating system, OS version, language, time zone, device identifiers (IDFA on iOS if you grant App Tracking Transparency consent; Android Advertising ID with consent), IP address, crash logs.
  • Usage information: features used, screens viewed, swipes, matches, session length, performance metrics.
  • Approximate location: derived from IP address.
  • Precise location: if you grant location permission, GPS-level coordinates used to show distance-based matches. You can revoke this at any time in your device settings.
  • Cookies & similar technologies: our website (votails.com) does not set cookies (see Cookie Policy). The mobile app uses on-device local storage (UserDefaults on iOS, DataStore on Android) for session and preference persistence.

3.3 Information from third parties

  • App stores: Apple and Google provide your subscription status, refunds, and limited account data (no full payment details).
  • Authentication provider (Apple): sign-in uses Sign in with Apple. Apple shares the name and email address you approve at sign-in (which may be a private relay address if you choose "Hide My Email"), along with a unique account identifier and identity token. We do not receive your Apple ID password or any other Apple account credentials.
  • Service providers: crash analytics or moderation vendors may surface data linked to your account.

4. Sensitive Personal Information

The Service necessarily collects information that may be considered sensitive under various privacy laws, including:

  • Sexual orientation
  • Gender identity
  • Precise geolocation (if enabled)
  • Religious beliefs (if voluntarily disclosed)
  • Biometric data (only if you opt in to photo verification; the verification selfie is deleted within 30 days of verification)

Under the California Consumer Privacy Act (CCPA/CPRA), you have the right to limit the use of sensitive personal information. We use sensitive personal information only to (a) provide the matchmaking service you signed up for, (b) ensure platform safety, and (c) comply with law. We do not "sell" or "share" sensitive personal information for advertising.

We use sensitive personal information only with your knowledge and consent, as required to provide the matchmaking service you signed up for.

5. How We Use Information

We use the information described above to:

  • Create and maintain your account
  • Show you potential matches based on your preferences
  • Facilitate messaging and pet playdate proposals
  • Process subscriptions and renewals (via Apple/Google)
  • Send transactional emails (account notices, receipts, security alerts)
  • Send marketing communications, only with your consent
  • Detect, investigate, and prevent fraud, scams, abuse, and policy violations
  • Respond to support requests
  • Comply with law, court orders, and lawful requests
  • Improve and develop new features (using aggregated and anonymized data)
  • Enforce our Terms of Service

We do not use your messages, profile content, or pet information to train external AI models without your explicit opt-in consent.

6. How We Share Information

We share information only as described below. We do not sell personal information for money. We do not "share" personal information for cross-context behavioral advertising as defined by the CCPA.

6.1 With other users

Your profile (photos, name, age, gender, bio, interests, lifestyle attributes, prompts, pet information, parenting style) is visible to other users of the Service who meet your filter criteria. Your precise location is never shown — only an approximate distance.

6.2 With service providers

We share information with vendors who process data on our behalf under contract, including:

  • Amazon Web Services (AWS) — database hosting (Postgres on AWS RDS), file storage, compute.
  • Resend — transactional email delivery.
  • Apple App Store / Google Play — payment processing and subscription management.
  • Crash analytics / observability (when implemented) — error and performance monitoring.
  • Content moderation tools (when implemented) — automated detection of CSAM, nudity, harassment.

All vendors are bound by data processing agreements and may only use data for the purposes we instruct.

6.3 For legal reasons

We may disclose information to law enforcement, regulators, or other parties when we believe in good faith that disclosure is necessary to (a) comply with legal process, (b) protect the safety of users or the public, (c) investigate fraud or violations of our Terms, or (d) protect our legal rights.

6.4 In connection with a business transfer

If Lash Digital Solutions LLC is acquired, merges, or transfers assets, your information may be transferred to the successor entity. We will notify you and continue to honor this Privacy Policy unless and until a successor publishes a different policy.

6.5 With your consent

We share information beyond the above scenarios only with your explicit consent (for example, if you choose to share your match list with a friend via a third-party app).

7. Data Retention

  • Active accounts: we retain your information for as long as your account is active.
  • Deleted accounts: when you delete your account, we delete or anonymize your personal data within 30 days, except (a) information we are required to retain by law (e.g., tax records for 7 years, fraud-prevention records); (b) information retained for safety purposes (e.g., reports/blocks linked to a banned user, which may be retained indefinitely to prevent return); and (c) backups, which are purged on a rolling 90-day schedule.
  • Messages: retained while both parties' accounts exist. If either deletes their account, the conversation is removed within 30 days.
  • Photos used for verification: deleted within 30 days of verification.

8. Your Rights

8.1 All users

Regardless of where you live, you may:

  • Access the personal information we hold about you (request a data export by emailing jay.lash@lashdigitalsolutions.com).
  • Correct inaccurate information (most fields are editable in the app).
  • Delete your account from Settings → Account → Delete Account, or by emailing us.
  • Object to certain processing.
  • Withdraw consent at any time (this does not affect prior lawful processing).

8.2 California residents (CCPA/CPRA)

You have the right to:

  • Know what personal information we collect, use, disclose, and retain. The categories we collect are listed in Section 3.
  • Delete personal information, subject to legal exceptions.
  • Correct inaccurate information.
  • Opt out of "sale" or "sharing" — note that we do not sell or share personal information as defined by the CCPA. There is therefore no "Do Not Sell or Share My Personal Information" link required, but you may still contact us to confirm.
  • Limit the use of sensitive personal information — we limit our use of sensitive PI to providing the Service, safety, and compliance, as described in Section 4.
  • Non-discrimination — we will not deny service, charge different prices, or provide a different level of service for exercising your rights.

To exercise these rights, contact jay.lash@lashdigitalsolutions.com. We may verify your identity before responding. We will respond within 45 days (extendable to 90 if needed).

An authorized agent may submit a request on your behalf with written, verifiable authorization.

California Shine the Light: California Civil Code § 1798.83 allows California residents to request information about disclosures of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

8.3 Other U.S. state residents

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Indiana, Tennessee, New Hampshire, New Jersey, Minnesota, Maryland, Nebraska, and other U.S. states with comprehensive privacy laws have rights similar to the CCPA rights listed above. We honor these rights consistently for all U.S. users.

9. Territorial Scope; International Users

The Service is offered only to U.S. residents, and we process information on servers located in the United States (AWS U.S. regions). We do not target users outside the United States. If you access the Service from outside the U.S., you do so on your own initiative, and your information will be transferred to and processed in the United States.

10. Security

We use commercially reasonable safeguards to protect your information, including:

  • TLS encryption for data in transit
  • Encryption at rest for stored data (AWS RDS encryption)
  • Passwordless authentication via Sign in with Apple — there is no Votails password that could be lost or stolen
  • Access controls limiting employee/contractor access
  • Regular security review and dependency updates

No method of transmission or storage is 100% secure. If we become aware of a data breach affecting your information, we will notify you and applicable regulators as required by U.S. state breach-notification laws.

11. Children's Privacy

The Service is strictly for users 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected information from someone under 18, we will delete it and terminate the account. To report a suspected minor, contact jay.lash@lashdigitalsolutions.com.

In compliance with the U.S. Children's Online Privacy Protection Act (COPPA), we do not target the Service to children under 13 and do not knowingly collect information from children under 13.

12. Cookies and Tracking Technologies

The Votails mobile app uses on-device storage (UserDefaults / DataStore) to remember preferences and session state. The app does not include third-party advertising trackers. If you opt in to App Tracking Transparency on iOS, we may share an anonymized device identifier with analytics providers (currently none enabled).

Our website, votails.com, does not set cookies. See the separate Cookie Policy for details.

13. Do Not Track

Some browsers transmit "Do Not Track" ("DNT") signals. There is no consistent industry standard for DNT, so we do not currently respond to DNT signals. We do, however, respect the Global Privacy Control (GPC) signal where applicable to opt you out of sales/sharing (we do not sell or share data regardless).

14. Third-Party Links

The Service may contain links to third-party websites or services (for example, conversation starter integrations, news articles, support pages). We are not responsible for the privacy practices of those third parties. Review their privacy policies before sharing information.

15. Notice to Nevada Residents

Nevada residents may opt out of the future sale of their personal information by emailing jay.lash@lashdigitalsolutions.com with the subject "Nevada Opt-Out." We do not currently sell personal information.

16. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and/or in-app notice at least 30 days before the change takes effect. The "Last Updated" date at the top reflects the most recent revision. Continued use of the Service after the effective date constitutes acceptance.

17. Contact Us

For privacy questions, data subject requests, or to report a concern:

Lash Digital Solutions LLC Attn: Jay Lash, Privacy jay.lash@lashdigitalsolutions.com

We will respond within 30 days, or as required by applicable law.