Last Updated: 2 May 2026
This Privacy Policy explains how Void Deck collects, uses, discloses, stores, and otherwise processes personal data in connection with the Void Deck mobile application, the Void Deck legal and support pages, backend systems, notification systems, moderation tools, account systems, subscription entitlement checks, advertising integrations, and related services that support the app (collectively, the "Service").
Void Deck is operated from Singapore and is designed primarily for users in Singapore. We seek to handle personal data in accordance with applicable laws, including the Personal Data Protection Act 2012 of Singapore ("PDPA"), and in accordance with relevant platform requirements. This Policy describes our practices for transparency. It does not create promises, warranties, fiduciary duties, professional duties, or service-level commitments beyond those required by applicable law.
By using the Service, submitting content, enabling permissions, creating a Deck profile, saving items, following users, reporting content, subscribing to Premium, receiving notifications, or otherwise interacting with the app, you acknowledge that personal data may be processed as described in this Policy. If you do not want certain data to be processed, you should avoid using the relevant feature, disable the relevant permission or setting, or stop using the Service.
Apple's App Store privacy labels are a short platform summary of some data categories that may be collected through an app and its integrated third-party partners. They are not a replacement for this full Privacy Policy. Because the labels use broad categories and must include certain third-party SDK practices, they may group together data that is collected only when you use a particular feature, grant a permission, sign in, upload content, enable notifications, subscribe, interact with ads, or contact support.
For example, Void Deck may need to disclose identifiers, usage data, advertising data, diagnostics, and coarse location because advertising, consent, authentication, analytics, notification, or infrastructure providers may process that data as part of operating the app. We aim for the App Store labels, our privacy manifest, and this Policy to describe the same overall practices, while this Policy provides the more detailed explanation of context, purpose, providers, retention, and choices.
Certain Deck community features may require phone verification. When you verify a number, we process the phone number, normalized Singapore mobile format, Firebase verification result, verification status, related anti-abuse checks, and records needed to help prevent spam, impersonation, duplicate-account abuse, ban evasion, vote manipulation, harassment, and other misuse of the Service. Your phone number is not intended to be shown to other users through ordinary product flows, but it may be processed internally and by verification providers.
If you use image upload features, including Deck post images, Premium profile photos, or Premium profile banners, we process the files you choose to upload, related metadata, storage paths, resized or transformed versions, public or signed display URLs where applicable, upload-rate records, moderation tokens, safety analysis results, rejection reasons, and review records associated with those uploads. We may strip, transform, compress, resize, moderate, reject, remove, or replace uploaded media. You are responsible for ensuring that you have all rights and consents needed for any media you upload.
Some features use location or place-related data when you choose to enable them or enter a location. Examples include weather, dengue alerts, bus stops, journey planning, nearby Makan places, Google Places search, directions, geocoding, traffic cameras, saved places, and location-specific notifications. Depending on the feature, this may include:
Void Deck does not request continuous background location tracking for ordinary Deck social features. Location access is optional, but some local-information features may not work, may be less accurate, or may require manual selection if permission is denied.
Subscriptions and in-app purchases are processed by Apple. We do not receive your full payment card details. We may process App Store product identifiers, signed transaction information, original transaction identifiers, subscription status, entitlement status, expiration dates, grace-period state, billing retry state, revocation state, storefront or environment information, and related account records needed to verify and provide Premium features. Premium features are limited to the features described in the app at the time of purchase or use; Premium does not guarantee that ads, third-party content, service limits, moderation, or all future feature changes will be removed or avoided unless expressly stated in the purchase flow.
Void Deck uses Google Mobile Ads SDK, Google AdMob, Google's User Messaging Platform, Apple's App Tracking Transparency framework where applicable, SKAdNetwork, and related advertising or measurement systems. Depending on your device settings, region, consent choices, subscription status, build configuration, and ad availability, Google, Apple, and related partners may process device identifiers, advertising identifiers where permitted, IP address, app interaction data, ad request data, consent-state information, ad performance data, and measurement signals under their own privacy terms. Ads may be unavailable, limited, personalized, non-personalized, failed to load, or shown only in certain regions or contexts.
Like most internet services, our infrastructure and service providers may automatically process technical data such as IP address, timestamps, user agent or device characteristics, app version, request identifiers, route or endpoint information, headers, error logs, rate-limit records, security events, admin access records, analytics events, and related logs for hosting, security, debugging, fraud prevention, abuse prevention, reliability, and operational integrity.
The Service may include system-generated, bot-assisted, test, seed, or automated content and activity used for product operation, moderation testing, quality control, or community experience. Records relating to such content may be stored and processed with other Deck content and moderation data.
You should not post, upload, report, or send personal data, sensitive data, confidential information, government-issued identifiers, financial information, medical information, private photos, information about minors, or information about third parties unless you have a lawful basis and all required consents to do so. You are responsible for the information you submit.
We may use personal data as reasonably necessary to operate, secure, improve, and support the Service, including to:
Depending on the context, we may collect, use, or disclose personal data with your consent, where reasonably necessary to provide a feature you requested, where necessary to perform or administer the Service, where reasonably necessary for security or safety, where permitted under legitimate interests or comparable grounds recognized by applicable law, where the PDPA or other applicable law permits or requires processing without consent, or where processing is reasonably related to maintaining the Service and protecting users and the platform.
If you withdraw consent, deny a device permission, disable notifications, change ad choices, delete content, request account deletion, or stop using a feature, certain features may no longer work, may work only in a limited way, or may continue to retain limited records where permitted or required for safety, compliance, dispute handling, backups, auditability, or legal reasons.
Void Deck is built around public and semi-public community interactions. Your display name, avatar, profile photo, profile banner, Deck Score, account tier, posts, comments, profile elements, follower/following information where visible, saved or voting signals where surfaced by the product, and certain social actions may be visible to other users inside the app. Private profile settings may hide profile history, followers, and following lists from visitors, but they do not make your public posts, comments, reports submitted by others, moderation records, or already-visible interactions private.
Reports and internal moderation records are not exposed to the reported user through ordinary product flows, but reports, report outcomes, warnings, case identifiers, and moderation notices may be used internally, shown to moderators or administrators, or disclosed where necessary for safety, enforcement, legal compliance, or dispute handling. Other users may save, copy, quote, screenshot, record, index, or share content they see. We cannot control what third parties do with information you make available to them.
| Provider / Category | Purpose | Typical Data Involved |
|---|---|---|
| Google Cloud Platform (GCP), including Cloud Run, Cloud SQL, Cloud Storage, and Cloud Tasks | Backend hosting, database, object storage, task queues, API delivery, admin systems, and server-side processing | Request data, technical logs, account data, settings, moderation records, social activity, uploaded files, queue metadata |
| Cloudflare | Edge security, traffic filtering, and protected admin access | IP address, request metadata, security event data, technical logs |
| Apple | Sign in with Apple, push notifications, subscriptions, platform services | Account/auth data, device tokens, subscription-related signals |
| Google Sign-In and Firebase Authentication | Authentication and phone verification | Email address, provider identifiers, phone number, verification records, security challenge data |
| Google Places / Directions / Geocoding / related APIs | Maps, nearby places, place details, photos, directions, autocomplete, station/place lookups, location-based results | Search queries, coordinates, place identifiers, route inputs, request metadata |
| Google AdMob / User Messaging Platform | Ads, ad measurement, consent and privacy messaging | Advertising/consent identifiers, device and request data, ad interaction data |
| Apple App Store Server APIs | Subscription verification and entitlement state | Signed transaction data, subscription status, product identifiers, app account token where applicable |
| Microsoft Azure Content Safety / Google Gemini / AI or assisted moderation providers | Content review, image safety analysis, text screening, moderation recommendations, community safety tooling | Submitted text, uploaded images, report context, content snapshots, safety outputs, moderation categories |
| NEA, data.gov.sg, LTA-related sources, WeatherAPI, Google Places content, and similar public or third-party information sources | Weather, dengue, transit, traffic, place, directions, and local-information features | Queries, selected areas, coordinates, route/place inputs, cached responses, request metadata |
If ads are available in your version of the Service, Google AdMob may be used to request and display advertisements. Depending on your device settings and region, you may be presented with privacy or ad-consent choices. You may also be able to change certain ad-related privacy choices later through the app or your device settings. Ad availability, targeting, personalization, measurement, and display may differ based on consent status, App Tracking Transparency settings, subscription status, region, provider availability, platform rules, and service configuration.
Unless the app purchase screen expressly states otherwise for a particular product or period, Premium should not be assumed to remove all ads, all third-party content, all tracking-related processing, or all measurement. If an ad, consent, or tracking setting is controlled by Apple, Google, your device, or a third-party provider, you may need to manage that setting with that provider or through your device.
We retain personal data for as long as reasonably necessary for the purposes described in this Policy, including to operate the Service, maintain safety controls, administer accounts, provide features, resolve disputes, comply with legal obligations, enforce our terms, protect the Service, and preserve evidence of misuse or safety decisions. Retention periods vary by data type, feature, context, and legal requirement.
The app includes an in-app account deletion flow. The current flow may deactivate your account immediately and schedule permanent deletion after a grace period shown in the app. Deletion may remove or hide your account, profile, and user-generated content, subject to lawful retention, backups, moderation records, audit records, safety records, and technically necessary residual copies. Some content may remain visible in modified, anonymized, quoted, cached, logged, or moderation-preserved form where permitted by law or reasonably necessary.
Account deletion does not automatically cancel an active Apple subscription. You are responsible for cancelling subscriptions through Apple. If you delete your account while a subscription remains active, Apple billing may continue unless you cancel it separately through Apple's subscription management tools.
Subject to applicable law, verification requirements, and permitted exceptions, you may have rights to:
We may ask you to verify your identity, clarify the scope of your request, or provide additional information before acting on a request. Where permitted by law, we may decline, defer, or limit a request, or charge a reasonable administrative fee for certain access requests. Requests that affect core service data, public content, reports, moderation records, audit logs, security logs, backups, legal records, or content shared with others may be subject to legal, technical, safety, or operational limitations.
Your information may be processed, hosted, stored, moderated, analyzed, or accessed in countries outside Singapore, depending on the infrastructure, platforms, and providers used to operate the Service. Where personal data is transferred internationally, we seek to use providers and arrangements that are intended to provide a standard of protection comparable to that required under applicable law. You acknowledge that third-party providers may process data under their own global infrastructure arrangements.
We use administrative, technical, and organisational measures designed to protect personal data, such as access controls, authentication controls, rate limits, moderation controls, encryption in transit, service-provider security features, audit records, and operational restrictions. No system, provider, device, user account, app, network, or transmission method is completely secure. You are responsible for protecting your own device, Apple or Google account, email account, phone number, and access credentials.
Void Deck is not directed to young children. If you are below the minimum age required to use the Service under our Terms, App Store rules, or applicable law, you must not use the Service. You must not submit personal data about minors, upload images of minors, or involve minors in Deck content unless you have all lawful authority and consent to do so. If we become aware that an account was created in violation of our age rules or applicable law, we may suspend, restrict, delete, or remove the account and take appropriate action regarding associated data.
We may preserve, use, and disclose personal data where reasonably necessary to:
We may also preserve or disclose information where we reasonably believe there is a risk of harm, misuse, coordinated abuse, platform manipulation, unlawful conduct, public safety risk, or regulatory concern. We are not responsible for notifying users before making legally permitted or legally required disclosures.
If we become aware of a data breach affecting personal data, we may investigate, contain, remediate, and assess whether notification is required under applicable law. Where a breach is legally notifiable, we may notify affected individuals, regulators, service providers, platform providers, or other relevant parties as required or permitted by applicable law. Not every security incident is a legally notifiable breach.
The Service may include links to, embedded content from, data from, or integrations with third-party services. Those third parties operate under their own terms and privacy notices. We encourage you to review their policies, especially for Apple, Google, Firebase, AdMob, Google Places, Google Maps-related services, Cloudflare, Google Cloud Platform (GCP), Microsoft Azure, data.gov.sg, NEA, LTA-related information sources, WeatherAPI or weather providers, and any third-party services you use through the app.
We may update this Privacy Policy from time to time to reflect changes in the Service, our practices, legal requirements, providers, infrastructure, advertising configuration, moderation systems, subscriptions, or product features. We may update the "Last Updated" date, publish the revised policy on our legal pages, and, where appropriate, provide additional notice in the app or through other reasonable means. Your continued use of the Service after the updated policy becomes effective is subject to the revised Policy.
If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, contact us at info@voiddeckapp.com. Please include enough detail for us to understand and verify your request. Do not send passwords, full payment details, government identification numbers, sensitive third-party data, or unnecessary personal information by email.