Privacy Policy
Last updated: 17 August 2026
Vouch (“we”, “us”) is a referral-and-commission ledger for local businesses: a host records the guests they send to a nearby business, and that business records the discount given and the commission agreed. Vouch is provided by Ayda Yazdani (AYDA Digital), United Kingdom. This policy explains what we collect, why, and your rights. By using Vouch you agree to it and to our Terms of Use. Questions: admin@aydayazdani.com.
Please read this first
Vouch is a record-keeping tool. It does not pay you, does not guarantee that any commission or discount will ever be paid, and does not verify the figures. Amounts shown are what you entered or what a partner business reported, and may be wrong. Nothing in Vouch is financial, tax or legal advice — see the Terms of Use.
Who this applies to
Vouch is used by businesses (hosts such as guest houses, and the local places they recommend). Tourists and guests use Vouch without an account — they simply scan a QR code. We do not ask guests for a name, email, phone number or any contact details, and we do not track anyone across the web or between apps.
What we collect
- Account — when a business signs up: a username and password, or, if you use Sign in with Apple or Google sign-in, the identifier (and email, where the provider supplies one) they give us. Used only to sign you in and to link your records to you. Passwords are stored hashed, never in plain text.
- Business information you enter — your business name, type, address or map link, phone and email, your properties/residences, and the local places you recommend with the discount and commission you agree.
- Referral records — when a guest’s voucher is applied at a business: the place, the date, an optional bill amount you type, and the resulting discount and commission. A guest is identified only by an anonymous code plus any label or note you choose to add (e.g. “Room 3”) — never by personal contact details. Please keep such notes brief and factual, and only add them where you have a lawful reason and the person knows.
- Staff — if you use staff PINs on a shared till device, a display name and a hashed PIN, so a scan can be attributed.
- Notifications — if you allow push notifications, a device token so we can alert you when one of your guests is served.
- Camera — the app uses the camera only to read a guest’s barcode at the till. Frames are processed on the device to decode the code; no photo or video is stored or uploaded.
- Technical — a session cookie to keep you signed in, and standard server logs (IP address, timestamp, page requested) kept briefly for security and troubleshooting.
We do not collect your location from your device, and we do not read your phone’s contacts, photos, calendar or health data. There is no advertising SDK and no analytics tracking in Vouch.
How we use it
Only to provide the service: to record referrals and commissions transparently for both businesses, to show you your guests and earnings, to send the notifications you ask for, and to keep the service secure. We do not sell your data, and we do not use it for advertising or cross-app tracking. Our lawful basis is performing the contract with you (running your account and your ledger) and our legitimate interest in keeping the service secure.
Who we share it with
A referral record is visible to the two businesses it concerns — the host and the place that served the guest. That shared transparency is the whole point of Vouch. Otherwise we share data only with the providers that run Vouch for us: our hosting provider (a UK/EU server), Apple and Google for push notifications and for sign-in, and Apple Wallet when a guest chooses to add a pass. No money moves through Vouch; commission is settled directly between the two businesses. We may disclose data if the law requires it or to protect the service against abuse.
Security and its limits
Traffic is encrypted in transit (HTTPS) and passwords and PINs are hashed. But your records are protected only by your device and your account. Anyone who can unlock your phone, sign in as you, or holds a poster, link or QR code you shared can see what that gives access to — a partner, a member of staff, family, an employer, anyone. Keep your device locked, use two-factor authentication with your sign-in provider, and sign out on shared devices. We are not responsible for what other people do with information you shared with them, or for anyone who gains access to your account, device or links.
Data loss
Vouch is free and provided as is. We make no promise that your data will be kept or delivered, and we are not liable for lost, deleted or corrupted data. Export your records as JSON from Settings and keep your own copy.
Where it is stored, and for how long
Data is stored on our server in the UK/EU. We keep your account and records while your account is active. Delete your account from Settings (or email us) and your business, guests and records are removed; server logs age out within about 30 days, and backups within about 90 days.
Your rights
Under UK GDPR and equivalent law you may access, correct, export, delete or restrict your data, and object to certain processing. Email admin@aydayazdani.com and we will respond within one month. If you are unhappy with our response you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, or to your local supervisory authority.
Children
Vouch is a business tool. It is not directed at children and is not intended for anyone under 16.
Changes
We will update this page if our practices change and revise the date above.
Contact
Ayda Yazdani (AYDA Digital), United Kingdom · admin@aydayazdani.com