Privacy
Privacy policy
This policy explains what personal data the VotePeer app for Nexa (Android package org.nexa.voting, also built for iOS) and the website votepeer-nexa.web.app process, why, and what you can do about it. VotePeer lets groups create elections and vote on the Nexa blockchain.
Who is responsible
B.U. Incorporated (Bitcoin Unlimited) is the data controller for VotePeer for Nexa. Contact: jqrgen@nexa.org.
What we process
- Your Nexa identity. When you sign in, the app proves that you hold a Nexa key by signing a one-time challenge. We store your Nexa identity address and the public keys you link to it. We never receive your private keys or recovery phrase; they stay in the app on your device.
- Sign-in challenges. Short-lived challenge records used to complete a sign-in.
- Elections and groups you create or take part in. The election description, options, tags, visibility, end time, and the Nexa addresses of the participants and the organiser.
- Push notification token. If you allow notifications, a Firebase Cloud Messaging token for your device, used only to tell you about elections you are invited to.
- Technical data. Our hosting and backend (Google Firebase) and the Nexa Electrum servers the app connects to receive your IP address and the requests you make, as part of normal operation and security logging.
Votes on the blockchain are public
Votes, ballots and election contracts are Nexa transactions. Anything written to the blockchain is public, permanent, and cannot be changed or deleted by us or anyone else. Ring-signature elections hide which participant cast which ballot, but the transactions themselves are still public. To read the blockchain, the app asks Electrum servers about the addresses it uses: by default Nordic Crypto's server (electrum-nexa.nordiccrypto.no), with public Nexa servers as fallbacks. Those servers see your IP address and the addresses you look up.
Camera
The app uses the camera only to scan QR codes, for example to sign in on the website or to add a participant. Camera images are processed on the device and are not stored or sent anywhere.
Why we process it
- To sign you in and keep your account linked to your Nexa identity.
- To create, show, run and count elections, and to show you the elections you organise or are invited to.
- To send you notifications you have allowed.
- To operate, secure and debug the service.
The legal basis is that the processing is necessary to provide the service you ask for, and, for notifications, your consent, which you can withdraw in your device settings at any time.
Who we share it with
We do not sell personal data, show ads, or use analytics or advertising trackers. Data is processed by these service providers on our behalf:
- Google (Firebase): Authentication, Cloud Firestore, Cloud Functions, Hosting and Cloud Messaging, in the Firebase project
votepeer-nexa. Google may process data in the EU and the United States under its data processing terms. - Nordic Crypto, which operates the Nexa Electrum server the app uses by default, and the operators of the public Nexa Electrum servers used as fallbacks.
- Google Play and Apple, which distribute the app and process data under their own policies when you install or update it.
Information that is part of an election, such as its description and participants, is visible to the other participants of that election, and to everyone if the organiser makes the election public.
How long we keep it
Account, election and group data are kept for as long as the service needs them or until you ask us to delete them. Sign-in challenges are short-lived. Technical logs are kept by our providers for their standard retention periods. Data on the blockchain cannot be deleted.
Your rights
You can ask us for a copy of your data, and ask us to correct or delete it, by writing to jqrgen@nexa.org. Deleting your account removes your identity, linked keys, push token and the elections you organise from our database; it cannot remove anything already written to the blockchain. If you are in the EU or EEA, you can also complain to your data protection authority.
Children
VotePeer is not directed at children under 13 and we do not knowingly collect their data.
Changes
We will publish any changes to this policy on this page and update the effective date above.