VOIHU
Legal

VOIHU Privacy Policy

Last updated: September 2026

At VOIHU, we believe that a human voice should be able to travel without requiring unnecessary surveillance.

VOIHU is designed to collect only the information reasonably necessary to operate the service, enable MESSAGEs and VOICES to travel, process payments, protect the platform, and show how MESSAGEs propagate between people and places.

This Privacy Policy explains what personal data we process, why we process it, how it is used, and the rights available to you.

Section 1

Who is responsible for your data

VOIHU is operated by:

CA HOLDING S.R.L.S.
Viale Italia 8/C
25126 Brescia (BS)
Italy
Italian Tax Code / VAT No.: 04672180983
REA: BS-632332
Certified Email (PEC): caholding@pec.it
Service / trading name: VOIHU
Website: voihuworld.com

CA HOLDING S.R.L.S. is the Data Controller for the processing described in this Privacy Policy.

Privacy and data-protection requests: support@voihuworld.com

Section 2

What VOIHU is

VOIHU is a platform designed to allow a MESSAGE to travel from person to person.

Users may create MESSAGEs, add their VOICE to existing MESSAGEs, pass MESSAGEs to other people, and observe their geographical propagation through VOIHU’s impact visualisations.

VOIHU is not designed around followers or advertising profiles.

The propagation of a MESSAGE may form a referral and participation chain showing how that MESSAGE travelled between participating users and locations.

Section 3

Personal data we process

Depending on how you use VOIHU, we may process the following categories of information.

Account information

When you create or access an account, we may process:

  • email address;
  • display name;
  • authentication provider;
  • account creation and update timestamps;
  • technical session identifiers.

VOIHU uses passwordless authentication.

Where Google authentication is used, Google may provide basic account information necessary to authenticate you.

VOIHU does not need your Google profile picture for the operation of the service and new Google authentication records do not retain that picture URL.

MESSAGE information

When you create a MESSAGE, we may process:

  • MESSAGE title;
  • MESSAGE text;
  • intended destination or audience;
  • selected origin city and country;
  • geographical coordinates representing the selected city’s approximate geographic centre;
  • any photograph you voluntarily upload;
  • creation and publication information.

New uploaded images are processed to remove embedded metadata, including EXIF information that may contain unnecessary information such as GPS data, camera information or timestamps.

VOIHU does not use embedded photograph GPS information to determine the origin of a MESSAGE.

VOICE and participation information

When you add your VOICE to a MESSAGE, we may process:

  • your user identifier;
  • the MESSAGE concerned;
  • the city and country you explicitly select;
  • approximate geographical coordinates for that city;
  • referral/share information showing how the MESSAGE reached you;
  • relationships between participation and subsequent participation generated through shares;
  • timestamps.

This information is used to provide MESSAGE propagation features, including Global Impact and My Impact.

Location information

VOIHU does not request your device’s GPS location.

You explicitly select a city through the VOIHU interface.

Coordinates stored by VOIHU represent the approximate geographical centre of the selected city returned by a geocoding service. They do not represent your street address or precise physical position.

VOIHU does not use a persisted IP-derived location as the geographic location of your VOICE.

Payment information

Where a VOICE or another VOIHU service requires payment, payments are processed by Stripe.

VOIHU may process or retain information such as:

  • payment identifier;
  • amount;
  • currency;
  • payment status;
  • refund status;
  • associated VOIHU user and MESSAGE identifiers.

Payment-card details entered into Stripe’s payment environment are processed by Stripe and are not stored by VOIHU.

Reports, moderation and HEARD claims

If you report content, appeal or request review of a decision, or use a HEARD-related feature, we may process information including:

  • your user identifier;
  • email address where required;
  • display name;
  • report or appeal reason;
  • information or evidence you voluntarily provide;
  • verification or review status;
  • timestamps and information necessary to preserve the integrity of the process.

Temporary verification tokens expire and are removed when no longer required for verification.

Underlying records may be retained where reasonably necessary to preserve audit integrity, prevent abuse, resolve disputes or document actions taken in relation to a MESSAGE.

Technical and first-party usage information

VOIHU uses limited first-party information to operate the platform and understand whether MESSAGEs are opened, viewed, participated in and passed on.

This may include:

  • MESSAGE identifier;
  • event type;
  • referral/share identifier;
  • source or campaign information;
  • random temporary session identifier;
  • user identifier where logged in;
  • relevant country information;
  • timestamp.

VOIHU does not use this information to build advertising profiles or track users across unrelated websites.

The VOIHU application does not persist IP addresses, User-Agent strings or device fingerprints as part of these analytics records.

Section 4

Information VOIHU does not seek to collect

VOIHU is designed to avoid collecting information that is not reasonably necessary for the service.

VOIHU does not intentionally collect or persist for its normal application functionality:

  • device GPS position;
  • precise street-level location;
  • device fingerprints;
  • advertising identifiers;
  • browsing histories across unrelated websites;
  • third-party advertising profiles;
  • payment-card numbers;
  • passwords;
  • persistent IP addresses as part of VOIHU application records.

IP addresses may nevertheless be processed transiently by network, hosting or security infrastructure for purposes such as routing, abuse prevention, rate limiting and network security.

Such processing does not make an IP address the geographic location of a user’s VOICE.

Section 5

Why we process your information

VOIHU processes personal data only where an appropriate legal basis exists.

Providing VOIHU

Account, MESSAGE, VOICE, participation, referral and location information may be processed where necessary to provide the service requested by the user.

This includes creating and maintaining an account, publishing MESSAGEs, adding VOICES, passing MESSAGEs, maintaining propagation relationships and providing Global Impact, My Impact and HEARD functionality.

The principal legal basis is performance of a contract or steps taken at the user’s request before entering into a contract.

Payments and legal obligations

Information may be processed to initiate, confirm, account for and, where applicable, refund transactions.

Information may also be retained where necessary to comply with accounting, tax and other legal obligations.

Safety, moderation and prevention of abuse

VOIHU may process MESSAGE content, uploaded photographs, reports, referral information and relevant account information to identify prohibited or unlawful content, prevent abuse or manipulation, investigate reports, protect users and the platform, maintain the integrity of MESSAGE propagation and enforce the Terms of Service.

Depending on the circumstances, this processing may be necessary for performance of the service, compliance with legal obligations, or VOIHU’s legitimate interests in operating a safe and trustworthy platform.

Limited product analytics

VOIHU processes limited first-party events to operate the service, prevent accidental duplicate counting and understand how MESSAGEs propagate.

This information is not used for behavioural advertising or cross-site profiling.

Section 6

Artificial intelligence and automated processing

VOIHU uses artificial-intelligence systems to support certain platform functions, including MESSAGE moderation, semantic duplicate detection, language detection, categorisation and translation.

Depending on the function, information submitted to these systems may include:

  • MESSAGE title and text;
  • destination or intended audience;
  • selected origin country;
  • an uploaded image, where a MESSAGE contains one;
  • limited information from existing public MESSAGEs for semantic duplicate detection.

VOIHU does not send your email address, session token, payment-card information, precise device location, referral history or account analytics to the AI system for these purposes.

Content moderation

Before a new MESSAGE can be published, its content and, where applicable, uploaded image may be automatically analysed for safety and compliance with VOIHU’s content rules.

The automated system may classify a proposed MESSAGE as SAFE, REVIEW or BLOCKED.

A SAFE classification allows the publishing process to continue.

A REVIEW classification may temporarily hold publication for manual review.

A BLOCKED classification prevents that particular MESSAGE from being published.

A BLOCKED or REVIEW decision does not by itself suspend or disable the user’s VOIHU account.

Users may request human review or appeal an affected publication through the mechanisms provided by VOIHU.

Semantic duplicate detection

VOIHU is based on the principle that substantially the same meaning should not unnecessarily create separate MESSAGEs.

Before publication, AI-supported semantic analysis may compare a proposed MESSAGE with a limited set of existing public MESSAGEs.

Where the system identifies an existing MESSAGE as substantially identical or similar, creation of a new MESSAGE may be stopped and the user may instead be directed to the existing MESSAGE.

A user who disagrees with that result may request human review.

Language, categorisation and translation

VOIHU may automatically detect the language of a MESSAGE and assign it to a category to organise and display content.

When a viewer requests a translation, AI may generate a translated version of a MESSAGE.

The original MESSAGE remains the authoritative source content.

Generated translations may be cached to avoid generating the same translation repeatedly.

Human review

Automated moderation and duplicate-detection decisions may affect whether a particular MESSAGE can be published, but VOIHU provides mechanisms through which affected users may request human review.

These processes are not used by VOIHU to create advertising profiles, determine creditworthiness, suspend accounts or make decisions concerning employment, health, insurance or other comparable matters.

Section 7

Public information and MESSAGE propagation

VOIHU is designed around the public propagation of MESSAGEs.

Information intentionally provided by users may therefore become publicly visible, including:

  • MESSAGE title and text;
  • uploaded photograph;
  • selected origin city and country;
  • cities and countries from which VOICES have been added;
  • approximate city-centre positions;
  • aggregate VOICE and propagation information;
  • MESSAGE journeys and propagation paths.

VOIHU does not need to publicly display your email address or payment details as part of MESSAGE propagation.

Global Impact

Global Impact represents the overall journey of a MESSAGE based on participation data.

My Impact

My Impact represents propagation attributable to a user’s participation and sharing activity.

These visualisations use approximate geographical information and are not intended to show an individual’s precise physical location.

Section 8

Sharing MESSAGEs

VOIHU allows users to pass MESSAGEs through messaging applications, social networks, email and native device-sharing functionality.

VOIHU does not automatically contact social networks merely because a user visits the platform.

When you actively choose a third-party sharing service, that third party may process information according to its own privacy terms.

A shared VOIHU URL may contain a referral identifier allowing VOIHU to understand how a MESSAGE travelled.

The referral identifier is designed to represent the propagation relationship rather than expose the sender’s email address to the recipient.

Section 9

Payments

Payments on VOIHU are processed by Stripe.

When a payment is initiated, Stripe may process payment-card information and other information necessary to process the transaction, prevent fraud and maintain payment security.

VOIHU receives information necessary to associate the transaction with the relevant account, MESSAGE or VOICE and determine whether the payment succeeded, failed or was refunded.

VOIHU does not store full payment-card details.

Section 10

Geocoding

When a user searches for a city, VOIHU submits the place query through its backend to a geocoding service.

VOIHU currently uses Geoapify for user-initiated locality autocomplete.

The geocoding service receives the place query from VOIHU’s server rather than directly from the user’s browser, together with technically necessary geocoding parameters. VOIHU does not intentionally forward the user’s email, user identifier, MESSAGE identifier, VOICE identifier, referral data, payment data, connection-country signal, device GPS, fingerprint data or end-user User-Agent to the geocoding service for this purpose.

The location ultimately stored is the city explicitly selected by the user together with its country and approximate city-centre coordinates.

VOIHU does not request device GPS location for this purpose and does not use Geoapify’s IP Geolocation service.

Section 11

Service providers and subprocessors

VOIHU relies on specialised service providers to operate parts of the platform.

These may provide cloud infrastructure, database, storage, payment, authentication, geocoding and artificial-intelligence services.

Relevant providers currently include:

  • Stripe, for payment processing;
  • Google, where a user chooses Google authentication;
  • Geoapify, for user-initiated locality and place autocomplete;
  • Emergent infrastructure and services, for parts of VOIHU’s application and AI infrastructure;
  • Anthropic AI models, currently accessed through Emergent’s LLM infrastructure, for functions including moderation, semantic analysis, language processing, categorisation and translation.
  • Resend, for transactional email delivery and authentication emails.
  • Google Analytics 4, for optional website measurement of traffic and traffic sources, only when the visitor has accepted analytics cookies.

VOIHU seeks to provide service providers only with information reasonably necessary for the relevant function.

Artificial intelligence service providers

Certain VOIHU functions use Anthropic AI models through Emergent’s LLM infrastructure.

Information submitted for those functions may therefore be processed through Emergent infrastructure and by Anthropic as necessary to provide the requested functionality.

Retention and processing within service-provider infrastructure are governed by applicable technical configurations, contractual arrangements and data-protection requirements.

Because VOIHU accesses Anthropic models through intermediary infrastructure rather than a direct Anthropic API connection, VOIHU does not represent that every copy of AI-processing data is necessarily subject to a single provider’s standard retention period.

Transactional Email Provider — Resend

VOIHU uses Resend to send transactional and authentication-related emails, including one-time verification codes and essential service communications.

For this purpose, the recipient’s email address and the minimum message content required for delivery may be processed by Resend on our behalf.

VOIHU does not use Resend for advertising or behavioural profiling. Resend acts as a service provider supporting email delivery.

Optional analytics — Google Analytics 4

VOIHU offers optional website measurement through Google Analytics 4. Google Analytics 4 is used to understand overall website traffic, traffic sources including social platforms and campaigns, landing pages and device or region information provided by Google Analytics.

Google Analytics 4 is loaded and receives data only after the visitor explicitly accepts analytics cookies. Advertising storage, ad-user-data and ad-personalization signals remain denied at all times. VOIHU does not use Google Analytics 4 for advertising, remarketing or behavioural profiling.

Visitors can withdraw or change their analytics preference at any time using the “Manage analytics preference” control on the Cookie Policy page.

Section 12

International data transfers

Some service providers used by VOIHU may process personal data outside Italy or the European Economic Area.

Where required by applicable data-protection law, international transfers will be subject to an appropriate lawful transfer mechanism or safeguard.

These may include an adequacy decision, Standard Contractual Clauses or another mechanism recognised under applicable law.

Section 13

Data retention

VOIHU retains personal data for no longer than reasonably necessary for the purposes for which it was collected, subject to legal, accounting, security, dispute-resolution and platform-integrity requirements.

Sessions

Authentication sessions expire after approximately 7 days.

New expired session records are configured for automatic deletion after expiration.

Temporary verification information

Temporary HEARD verification tokens expire after approximately 48 hours.

Expired token material is removed, while underlying claim records may be retained where necessary for verification integrity, abuse prevention, audit or dispute handling.

MESSAGEs, VOICES and propagation history

MESSAGEs, VOICES and their propagation relationships form part of VOIHU’s core functionality and may be retained while the MESSAGE remains part of the service or where necessary to preserve legitimate propagation history.

Where a valid erasure request applies, VOIHU will assess whether personal information can be deleted or anonymised while preserving legitimate non-personal or historical platform information.

AI-generated translations and classification information

Language and category information associated with a MESSAGE, together with cached translations, may be retained for as long as the underlying MESSAGE remains available on VOIHU, unless deletion is required earlier by law or the information is no longer necessary.

Moderation and appeal records

VOIHU may retain records relating to blocked, reviewed or appealed MESSAGEs where reasonably necessary to document moderation decisions, handle appeals, prevent abuse, resolve disputes or demonstrate enforcement of platform rules.

Such records are not used for advertising or commercial profiling.

Payments

Transaction and accounting information may be retained for periods required by applicable accounting, tax and legal obligations.

Security and disputes

Relevant information may be retained where reasonably necessary to investigate abuse, enforce the Terms of Service, establish or defend legal claims, comply with legal obligations or resolve disputes.

Section 14

Security

VOIHU uses technical and organisational measures intended to protect personal information against unauthorised access, alteration, disclosure or destruction.

Measures may include:

  • encrypted HTTPS communications;
  • restricted server-side secrets;
  • passwordless authentication;
  • expiring sessions;
  • payment-card isolation through Stripe;
  • removal of unnecessary metadata from new image uploads;
  • data minimisation;
  • limited collection of location information;
  • rate limiting;
  • content moderation;
  • restricted administrative functionality.

No internet service can guarantee absolute security.

Where applicable law requires notification of a personal-data breach, VOIHU will take the actions required by that law.

Section 15

Your rights

Where the GDPR or other applicable data-protection law applies, you may have rights including:

  • access to personal data concerning you;
  • correction of inaccurate personal data;
  • erasure where applicable;
  • restriction of processing;
  • objection to certain processing;
  • data portability where applicable;
  • withdrawal of consent where processing is based on consent;
  • the right to lodge a complaint with a competent supervisory authority.

Requests can be submitted to:

support@voihuworld.com

VOIHU may need to verify your identity before fulfilling a request in order to protect your information against unauthorised access or deletion.

Users in Italy may also lodge a complaint with the Garante per la protezione dei dati personali.

Section 16

Children

VOIHU is not intended for use by children under the age of 16.

You must be at least 16 years old to create a VOIHU account, create a MESSAGE or add your VOICE to a MESSAGE.

VOIHU does not knowingly seek to collect personal data from children under 16.

If we become aware that personal data has been provided by a child under 16 in circumstances where its processing is not lawful, we will take appropriate steps to remove or otherwise address that information.

If you believe that a child under 16 has provided personal information to VOIHU, please contact support@voihuworld.com.

Where applicable law requires a higher minimum age or additional parental or guardian authorisation, those requirements will apply.

Section 17

Cookies and similar technologies

VOIHU uses limited technical and functional browser-storage mechanisms necessary to provide authentication and basic platform functionality.

These currently include:

  • authentication session technology;
  • local browser storage used to maintain authenticated access;
  • temporary per-tab session storage used for limited first-party event deduplication and source attribution.

VOIHU does not currently use third-party advertising cookies, advertising pixels or third-party behavioural analytics during ordinary browsing.

Third-party services such as Stripe may use their own security and technical technologies when a user actively initiates the relevant service, such as a payment.

VOIHU will review its consent requirements before introducing non-essential tracking, advertising or similar technologies.

Further information may be provided in VOIHU’s Cookie Policy.

Section 18

Changes to this Privacy Policy

VOIHU may update this Privacy Policy as the service evolves or where legal, regulatory or technical changes require it.

Where changes are material, additional notice may be provided through VOIHU or other appropriate means.

The date at the beginning of this Privacy Policy indicates when it was last updated.

Section 19

Contact

For privacy questions or to exercise data-protection rights:

CA HOLDING S.R.L.S.
Viale Italia 8/C
25126 Brescia (BS)
Italy
C.F./VAT No.: 04672180983
REA: BS-632332
PEC: caholding@pec.it

Privacy and data-protection requests:

support@voihuworld.com