Privacy Policy
Last Updated: January 26, 2026 · Effective: January 26, 2026
Introduction
Welcome to VoteUpp, a civic engagement platform developed for Antigua & Barbuda's United Progressive Party ("UPP," "we," "us," or "our"). Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the VoteUpp mobile application (the "App").
By using VoteUpp, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the App.
1. Information We Collect
1.1 Information You Provide
Account Information:
- Name
- Email address
- Phone number (optional)
- Password (securely hashed)
- Constituency preference
Profile Information:
- Interest tags (volunteer interests)
- Volunteer metrics (tasks completed, hours contributed)
- Badge achievements
Content You Create:
- Forum posts and comments
- Poll responses
- Event RSVPs
- Issue reports (including location data if you choose to share it)
- Task submissions
- Canvassing field notes
1.2 Automatically Collected Information
Usage Data:
- App features you access
- Time spent in the app
- Device information (model, operating system, app version)
- Crash reports and error logs
Location Data:
- GPS coordinates (only when you use field canvassing features and with your explicit permission)
- Approximate location based on IP address (for analytics)
1.3 Information from Third Parties
- Firebase Authentication: We use Firebase for authentication, which may collect device identifiers
- Google Sign-In / Apple Sign-In: If you sign in with these services, we receive your name and email address
- Push Notification Services: Device tokens for sending notifications
2. How We Use Your Information
2.1 Core Platform Functions
- Account Management: Create and manage your user account
- Authentication: Verify your identity when you sign in
- Personalization: Show content relevant to your constituency
- Communications: Send event reminders, task notifications, and updates
2.2 Campaign Operations
- Volunteer Management: Track task assignments, completion, and progress
- Field Canvassing: Record door-to-door interactions and optimize routes
- Polling: Collect opinions through surveys and polls
- Analytics: Measure engagement and campaign effectiveness
2.3 App Improvement
- Performance Monitoring: Identify bugs and crashes
- Feature Development: Understand which features are most valuable
- Security: Detect fraud, abuse, and unauthorized access
3. Legal Basis for Processing (GDPR)
If you are a resident of the European Union or European Economic Area, we process your personal data based on:
- Consent (Article 6(1)(a)): You explicitly consent to data processing when you create an account
- Legitimate Interests (Article 6(1)(f)): We process data to operate the platform and support civic engagement
- Legal Obligations (Article 6(1)(c)): We may process data to comply with applicable laws
You may withdraw your consent at any time through the Privacy Settings in the App.
4. How We Share Your Information
We do not sell your personal information. We may share your data in these limited circumstances:
4.1 Within the Organization
- Party Officials and Campaign Staff: Access to volunteer data, canvassing results, and analytics
- Constituency Administrators: Access to data within their assigned constituency
- Global Administrators: Full platform access for moderation and support
4.2 Service Providers
- Firebase (Google LLC): Cloud hosting, authentication, database, and analytics
- Cloud Storage: Secure storage of images and attachments
- Email Services: Transactional and marketing emails (if you opt in)
4.3 Legal Requirements
- Law Enforcement: If required by law, court order, or legal process
- Safety: To protect against fraud, abuse, or threats to public safety
5. Data Retention
| Data Type | Retention Period |
|---|---|
| User accounts (active) | Duration of account + 30 days after deletion request |
| User accounts (deleted) | Anonymized after 30 days, fully deleted after 2 years |
| Issue reports | 2 years after resolution |
| Poll responses | 2 years from poll creation |
| Event RSVPs | 1 year after event date |
| Canvassing data | 2 years from creation |
| Audit logs | Permanent (legal requirement) |
| Anonymous analytics | 2 years |
6. Your Privacy Rights
6.1 All Users
- Access: View your personal data in Account Settings
- Update: Edit your profile information anytime
- Delete: Request account deletion (processed within 30 days)
- Opt-Out: Disable analytics, marketing emails, and activity tracking in Privacy Settings
- Data Portability: Export your data in JSON format
6.2 Account Deletion
You can permanently delete your account and all associated data directly from the app:
- Go to Profile → Delete Account, or
- Go to Profile → Security Settings → Delete Account Permanently
Account deletion is permanent and cannot be undone. All your personal data, poll responses, comments, event RSVPs, and canvassing data will be removed.
6.3 GDPR Rights (EU/EEA Residents)
- Right to Erasure (Article 17)
- Right to Rectification (Article 16)
- Right to Restriction (Article 18)
- Right to Data Portability (Article 20)
- Right to Object (Article 21)
- Right to Withdraw Consent
7. Data Security
- Encryption in Transit: TLS for all data transmission
- Encryption at Rest: Data in Firebase Firestore is encrypted
- Access Controls: Role-based permissions
- Security Rules: Firestore security rules enforce authorization
- Audit Logging: All admin actions are logged
- Password Security: Hashed via Firebase Authentication
No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Children's Privacy
VoteUpp is intended for users 18 years of age and older. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us immediately.
9. International Data Transfers
VoteUpp is operated in Antigua & Barbuda. If you access the App from outside Antigua & Barbuda, your data may be transferred to and processed in countries with different data protection laws. Firebase complies with the EU-U.S. Data Privacy Framework.
10. Third-Party Services
- Firebase (Google): Privacy Policy
- Google Sign-In: Privacy Policy
- Apple Sign-In: Privacy Policy
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted with a new "Last Updated" date. Material changes will be communicated via in-app notification and email.
12. Contact Us
If you have questions about this Privacy Policy or your data:
United Progressive Party
Email: goobil@icloud.com
Antigua & Barbuda
Version 1.0 · Last reviewed January 26, 2026