Privacy

How Popdoxa treats your data, in plain language:

• Your ballots are private by default. Verified votes feed aggregate rankings; individual ballots are not publicly exposed. No public name or profile is required for your vote to count.
• Phone numbers are minimized. Verification uses a one-time code. We store a keyed fingerprint of your number for account uniqueness and recovery — not the number itself. Only transactional verification texts are sent; there is no marketing SMS.
• Your contacts stay on your device. Popdoxa never uploads, hashes, or stores address-book data. Sharing uses your device’s own share sheet.
• No precise location. Popdoxa does not require or collect precise geolocation.
• Deletion is real. “Delete my data” retracts your votes from rankings, removes your account and profile data, and severs the link between your identity and your past ballots.

A complete, counsel-reviewed privacy policy will be published before public launch. If it changes anything above, the change will appear on the public ledger.