The short version
Veto collects as little as possible, sells nothing, and shows no ads. Here's the whole picture.
Local rounds stay on your phone
Pass-and-play rounds, saved lists, and results are stored on your device. They never leave it.
Online rounds
Hosting or joining an online round stores the round (name, options, code, winner), your display name, and your avatar on our server (Supabase) so your group can play together. Your individual vetoes are protected so that no other player — not even the host — can read them; the winner is computed without revealing anyone's picks.
Crews and avatars
If you save a crew, we store the crew's name and a snapshot of its members (names and avatars) so future rounds can include them. If you set a custom photo avatar (a Pro feature), that image is stored on our server and shown to people you play with. You can replace or remove it anytime in the You tab, and it's erased with your account.
Signing in
Online play uses Sign in with Apple on iPhone and Sign in with Google on Android; on Android you can also play as a guest without any account. We receive a random account identifier and, if you share it, your name and email. No password is ever seen by us, and we take nothing else from your Apple or Google account.
Notifications
If you turn on notifications, we store a device token so we can tell you a round started or everyone has voted. It identifies a device, not you, and it's deleted when you sign out or delete your account. Notifications never contain anyone's vetoes.
Location
The “where to eat” option search uses your location on-device to query your platform's map service (Apple Maps on iPhone, Google on Android). Your location is never sent to our servers or stored.
Microphone & speech
Adding options by voice uses your platform's built-in speech recognition (Apple on iPhone, Google on Android). Audio is processed to text and discarded; we don't store recordings.
The waitlist
If you join the waitlist on this site we store your email so we can email you about the launch. Waitlist members get Veto Pro free, so when you sign in we check whether your account's email is on the list in order to unlock it. Unsubscribe anytime; we never share your email.
No tracking
No ads, no data brokers, no selling anything to anyone, and nothing that follows you across other apps or sites. This website uses Vercel Analytics, which counts page views without cookies and without building a profile of you — the app itself has no analytics at all. Purchases are handled entirely by Apple or Google; we never see your payment details.
Delete your account anytime
In the app: You tab → Delete account. It permanently erases your account, every round you hosted, your crews, your avatar photo, and all your vetoes from our servers — immediately, no email required.
How long we keep things
Online rounds and your display name stay until you delete your account (or a round is deleted). Waitlist emails are kept while we're still sending launch news and, because waitlist members get Veto Pro free, for as long as we need them to honour that unlock — email us and we'll remove yours sooner. Abandoned lobbies and long-finished rounds are cleared out automatically. Deleting your account removes your data immediately — we don't keep archival copies.
The services we run on
Your data is processed by the infrastructure we build on: Apple (Sign in with Apple, purchases, speech recognition, push delivery on iPhone), Google (Sign in with Google, Play purchases, speech recognition, and Firebase Cloud Messaging for push on Android), Supabase (database hosting for online rounds and the waitlist), Vercel (website hosting and privacy-friendly page-view analytics), and Resend (waitlist emails). Each receives only what's needed for its job; none of them get data to use for their own purposes.
Kids
Veto isn't directed at children under 13, and we don't knowingly collect personal information from them. Online play on iPhone requires Sign in with Apple; on Android it requires a Google account or a guest sign-in.
If this policy changes
We'll update this page and the date below. Material changes to what we collect will be called out in the app before they apply to you.
Who's behind this
Veto is made by Fathom Dev (Trey Jackson). Data questions, requests, or complaints: trey@fathomdev.io — we answer everything.