Privacy policy

Effective date: October 15, 2026
Operator: Megan Rustigian, doing business as VOÛTE
Mailing address: 528 SE Fascino Cir, Port Saint Lucie, FL 34984
Privacy contact: hello@voûte.com

1. Scope

This policy explains information processed through VOÛTE’s website, mobile app, product searches, saved finds, subscription features and support. The current app does not require a VOÛTE account. A search uses external services; processing does not take place entirely on your device.

2. Photos and product searches

When you submit a photo, the app sends the cropped image for analysis. Before transmission, the app redraws the image to remove embedded camera and location metadata. VOÛTE does not request device location permission. Removing metadata does not remove personal information visible in the photograph, such as faces, documents or an identifiable location. Avoid including unnecessary information about yourself or other people.

Search processing includes detecting a bag or watch, identifying and comparing likely products, conducting photo-assisted web searches, and finding listings. We also process the brand, model, visual attributes, typed references or other search terms needed for your request, together with candidate matches and results. Product descriptions and matches derived from an image may be inaccurate.

Viewing product listings or alternatives, including reopening a saved find, can send a smaller copy of the cropped photo to the backend again for matching. Product-history requests send product details without the photo. The app sends photo data inside requests and does not create a publicly accessible link to your uploaded photo. No photo is sent before you choose “Agree and continue” on “How your photo is used.” The consent-update TestFlight release asks holders of an older consent version to review the materially updated explanation before their next upload. This permission covers processing for your search; it does not authorize keeping your photos to develop or train VOÛTE’s systems. See Help improve VOÛTE below.

3. Where search information goes

VOÛTE uses third-party AI and search services to identify items and find relevant products. Our own catalog and curated recommendation service are being developed separately; they do not currently replace the search pipeline. This service does not make your submitted photo available through a public catalog or API.

The cropped photo passes through VOÛTE’s backend, hosted on Cloudflare through Rork, to Rork’s AI service and the Vercel AI Gateway. Depending on the task and fallback, OpenAI models perform category detection and photo-assisted web search; Anthropic models perform identification and visual comparisons; Google models provide a fallback. Not every request reaches every model or hosting provider.

Model-serving infrastructure may include OpenAI or Microsoft Azure for OpenAI models; Anthropic, Amazon Bedrock or Google Vertex for Anthropic models; and Google Vertex for Google models. These are possible processing routes, not a statement that every provider receives every photo. We are still confirming the routing and retention settings applied by Rork’s proxy.

For visual comparison, retailer images may be supplied alongside your crop to the relevant AI service. Experimental integrations such as SerpApi/Lens, Google Cloud Vision, SearchApi and eBay are not active recipients of customer photos in the current customer search routes.

Our AI requests ask the gateway to use zero-data-retention routing, and applicable OpenAI requests disable response storage. Public gateway endpoint information lists compatible routes. However, we have not verified that Rork’s proxy forwards every setting unchanged or what Rork itself logs or retains. These request settings are not a guarantee of end-to-end zero retention. Infrastructure logs, backups and provider handling are separate from the storage performed by VOÛTE’s application code. We do not claim a universal provider retention period or that all provider processing excludes training.

Provider references: Rork, Vercel, OpenAI, Anthropic, Google, Microsoft, Amazon Web Services, Google Cloud, Exa, wsrv.nl and Cloudflare. These references do not establish the contractual settings applying to VOÛTE.

4. Saved finds and information on your device

Saved finds and their photos are stored on your device. The app also stores search-access information and photo-processing consent on your device. The consent-update TestFlight release records the version and date of your Terms acceptance and age statement, photo-processing permission and withdrawal, and “Help improve VOÛTE” preview preference. It also records where the preview preference was chosen and when it changed. These consent and preference records stay on your device. Holders of an older photo-consent version review the updated disclosure before their next upload. Earlier builds may store only a yes/no consent flag. Terms acceptance and its age statement are separate from photo-processing consent. The product-image cache is configured for up to 24 MB in memory and 160 MB on disk. Saved finds, their photos and device settings can be included in iCloud or computer backups according to your settings; the product-image cache is not backed up by the app. Local storage is not the same as an account-based VOÛTE cloud-sync service.

Removing a saved find deletes that find and its associated saved photo from the app’s local storage. A separately cached product image, server result or earlier device backup may remain. Uninstalling removes the app’s local data but does not delete server caches, AI-provider records or previous backups. Restoring a backup may restore information that the backup contains. Manage backups through the relevant Apple or computer settings.

5. Server caches, logs and retention

VOÛTE’s application code processes uploaded photos for the request but does not deliberately write the photo image to persistent backend storage. This statement does not cover unverified platform or provider logs and backups. No customer-photo improvement or training dataset is currently collected.

Recognition results are cached under a key derived from a fingerprint of the submitted photo, its category and any typed hint. Cached results may include inferred product details, candidates, detected-item regions and source pages, but not the uploaded photo image. A fingerprint is a technical reference, not a guarantee of anonymity.

Recognition-cache entries written since October 14, 2026 schedule deletion at expiry: 24 hours for a clear match and three hours for other cacheable recognition results. No-match results are not stored. Entries written before October 14, 2026 may have no deletion alarm and are removed only when the same item is requested again. Platform backups and point-in-time recovery retention have not been confirmed; cache expiry does not establish deletion from those systems.

Other caches are keyed by product rather than the submitted photo: pre-owned listings have a two-hour freshness window, new listings four hours, alternatives six hours and item details 30 days. Each product-cache entry written since October 14, 2026 also schedules deletion at its expiry. Older entries have no scheduled deletion and are removed when the same item is requested again. These schedules do not establish deletion from platform backups, logs or provider systems.

Photo fingerprints and access records: the backend stores shortened SHA-256 photo fingerprints, up to six per search, within an installation-specific access record. They tie follow-up requests to the original photo. The record is deleted after 180 days without use. It is separate from the shorter recognition-result cache. Although the install record does not require an account name or email, it can distinguish an installation and is not treated as guaranteed anonymous data.

Diagnostic logs include item names, search phrases, page URLs and timings. Application code does not deliberately log photo image data or IP addresses. Text or retrieved content may nevertheless contain personal information. Retention of these logs by Rork and Cloudflare, and separate infrastructure records and backups, has not been confirmed.

Photo contributions and improving VOÛTE — not active

VOÛTE is preparing a voluntary photo-contribution program to develop, evaluate and train its own item-recognition and recommendation systems. The contribution program is not active, and VOÛTE does not currently collect uploaded photos into an improvement or training dataset. Ordinary searches do not require participation. Our private catalog and recommendation service does not make customer photos publicly available.

In the new TestFlight preview, “Help improve VOÛTE” is an unchecked preference stored on your phone. Selecting it does not send a contribution, enable collection or authorize future training. You can change the preview preference in Settings. Accepting the Terms or agreeing to photo processing for a search does not enable photo contributions.

Before contributions launch, we will provide a separate notice explaining eligible photos, recipients, intended uses, retention periods and withdrawal and deletion arrangements, and request fresh affirmative permission. Earlier uploads and preview preferences will not automatically become training contributions. We do not promise that deleting a source photo can remove its influence from a model already trained on it; any applicable limitations must be explained before launch.

The initial contribution program is planned for adults aged 18 and older, with a separate adult confirmation. This restriction applies to contributions only: the ordinary Service remains available from age 14, subject to the Terms and applicable local requirements. The TestFlight adult-confirmation preview does not activate the program.

Participation will not transfer ownership of a photo or grant public-display, marketing or sale rights. A future contribution choice will not authorize third-party providers to train their own general-purpose models. Processing by providers for ordinary searches remains a separate matter, described above.

6. Subscriptions

Apple handles App Store subscription payments. RevenueCat processes an app-specific identifier, purchase history and receipts, and app, operating-system and locale information to validate purchases and manage subscription access. An identifier described by the SDK as “anonymous” can still distinguish a particular app user or installation; it is not treated here as a guarantee of anonymization. RevenueCat starts when the app launches, independently of photo consent. VOÛTE’s support inbox does not need your full payment-card information.

Relevant references include RevenueCat’s Privacy Policy and Apple’s Privacy Policy. RevenueCat customer records can be deleted through its dashboard when the relevant record can be identified and the request is appropriate. Provider, purchase and legal records may be subject to separate retention requirements. Deleting records or the app does not cancel a subscription; manage cancellation through your Apple Account.

7. Retailer content and shopping links

Product images load from retailers or their image-delivery services. Those services receive network information needed to deliver the image, including your IP address. This can happen while viewing results, before you tap a shopping link. Opening a retailer page also connects your device to that retailer and its services. Their terms, privacy practices and choices apply to activity on their sites.

Retailers handle product checkout, delivery, returns and related personal information. VOÛTE does not process the physical-product order. A link or listing is not a promise that the retailer has the same privacy practices as VOÛTE.

8. Technical information, advertising and support

The app does not require an account and does not include analytics SDKs, advertising SDKs or tracking features. This website contains no analytics scripts, advertising pixels or newsletter form. These statements do not mean that hosting, AI, purchase or retailer services receive no technical information. Their network requests and records are described separately above; infrastructure logging still requires confirmation.

When you contact us, we receive your email address, message, attachments and information needed to respond. We use correspondence to provide support, handle privacy or content concerns, investigate problems and meet applicable legal requirements. Relevant information may be shared with a service provider or an affected party where necessary to address the request. Do not send passwords, payment-card details or unnecessary identity documents.

9. Choices and deletion requests

You can manage camera and photo-library permissions in your device settings, remove saved finds in the app, and manage device backups through Apple or your computer. Changing a permission does not delete information already transmitted.

You can decline initial photo processing by choosing “Not now.” The consent-update TestFlight release also provides an in-app withdrawal control in Privacy & Settings. Withdrawing stops subsequent photo transmissions for new searches, saved finds, listings and alternatives until you allow processing again. It does not undo earlier processing, delete cached results, remove provider records or cancel a subscription. You can also change your “Help improve VOÛTE” preview preference there. Earlier builds may not have this control. Camera permission and photo-processing consent are separate. Contact us with questions about prior processing or deletion.

Contact hello@voûte.com to ask about access, correction or deletion. Rights and exceptions depend on applicable law. We may need proportionate information to identify the relevant record and verify a request. Do not send identification documents unless a secure and necessary verification process has been arranged.

Server caches are not indexed by a customer account or email address, and the Service has no email-based mechanism to locate and erase all of a person’s server records. Installation-specific access records and photo fingerprints are separate from product caches. An email address alone therefore cannot identify all relevant cached results or access records. We do not promise that removing a saved find, emailing us or uninstalling will delete every provider record.

Requests concerning subscription records must be matched to the relevant RevenueCat record. Requests concerning a retailer’s own data may need to be directed to that retailer. Any information retained to meet a legal obligation or resolve a dispute remains subject to applicable limits. Deletion and subscription cancellation are separate actions.

10. Age, security and international processing

VOÛTE is intended for users aged 14 and older. Children under 14 may not use the Service. Users below the age of legal majority need a parent or legal guardian’s permission as described in our Terms; higher local age or consent requirements may apply. If you believe a child under 14 has provided personal information, contact us so we can investigate and take appropriate steps, subject to applicable legal obligations.

No transmission or storage system is perfectly secure. Processing by service providers may take place outside your location. The countries, safeguards and account-specific arrangements for the current service require confirmation; we do not claim that all information stays in the United States.

11. Changes and contact

We will identify policy changes with an updated effective date and provide additional notice or obtain new consent where required. Questions may be sent to hello@voûte.com or the mailing address above. We will update this policy to reflect material changes to our information practices.