Effective Date: April 2, 2026
Last Updated: April 2, 2026
Welcome to Voli ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").
Developer Information:
By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.
Account Registration:
Event Participation:
Vouchers:
Communications:
Device Information:
Usage Information:
Local Storage (on your device only):
If you choose to sign in using Google or Facebook, we receive the information you authorize those services to share:
Google Sign-In:
Facebook Login:
We do not receive your Google or Facebook password. Authentication is handled entirely by those platforms via a secure OAuth flow. We only receive a token confirming your identity.
Account and Core Functionality:
Notifications:
Communication:
Phone Verification:
Safety and Security:
Service Improvement:
Note: Firebase Analytics is currently disabled in the App. We do not use third-party analytics platforms.
Marketing: We do not send marketing emails or promotional messages. We do not use your data for advertising purposes.
We do not sell your personal information. We share your data only in the following limited circumstances:
Partner Organizations (Voucher Redemption):
When you redeem a voucher at a partner location, we share with that partner only the minimum information needed to process the redemption: your name, the voucher details, and the QR code scan confirmation. Partners do not receive your email address, date of birth, phone number, or any other personal data.
Third-Party Service Providers:
We use the following services that may process some of your data as part of operating the App:
Privacy policies of these providers:
Cloud Infrastructure:
Your data is stored on Kutaisi City Hall servers located in Kutaisi, Georgia.
Legal Requirements:
We may disclose your information if required by Georgian law, court order, or government authority, or to protect the rights, property, or safety of our users or the public.
Business Transfers:
We will not transfer your personal data to any third party in the event of a restructuring or transfer without your explicit consent.
If you delete your account, all personal data is permanently deleted within 30 days, except where we are required by law to retain it.
Access and Update:
You can view and update your name, phone number, date of birth, profile picture, and bio at any time via Profile → Edit Profile. You can change your password via Profile → Change Password.
Delete Your Account:
You can delete your account directly within the app by navigating to Profile → Settings → Delete Account. This will permanently delete all your data including volunteer hours, points, vouchers, and uploaded photos. Deletion is processed immediately, with backup data purged within 30 days.
Alternatively, you can request account deletion by emailing youth@kutaisi.gov.ge. We will process your request within 30 days.
Notification Preferences:
You can manage push notifications via Profile → Notifications, or disable them entirely in your device settings (iOS: Settings → Notifications → Voli / Android: Settings → Apps → Voli → Notifications). Note that some service notifications (email verification, password reset) are sent via email and are not affected by this setting.
Camera and Photo Library:
You can revoke camera and photo library access at any time in your device settings:
Revoking these permissions disables QR code scanning and photo uploads. The rest of the App continues to work normally.
Phone Number:
Providing a phone number is optional. You can remove it by editing your profile.
Third-Party Sign-In:
If you signed in with Google or Facebook, you can revoke the App's access via your Google or Facebook account settings. This will not delete your Voli account — contact us at youth@kutaisi.gov.ge to request full deletion.
If you are located in the EU or EEA, you have the following rights:
To exercise these rights, email youth@kutaisi.gov.ge. We will respond within 30 days.
If you are a California resident:
You have rights under UK GDPR equivalent to those listed for EU residents above. Contact youth@kutaisi.gov.ge to exercise them.
We implement the following security measures to protect your information:
Encryption in Transit:
All data transmitted between the App and our servers uses HTTPS (TLS) encryption.
Password Security:
Passwords are never stored in plain text. They are hashed using industry-standard algorithms before storage. We never have access to your plain-text password.
Token Security:
Authentication tokens are stored on your device using platform-provided secure storage — iOS Keychain and Android Keystore — via the expo-secure-store library. Tokens are never stored in unencrypted local storage.
Token Rotation:
Access tokens are short-lived and automatically refreshed using a secure refresh token. On logout, both tokens are invalidated and deleted from your device.
Access Controls:
Employee access to personal data is restricted on a strict need-to-know basis.
Infrastructure Security:
Kutaisi City Hall maintains server security including firewalls and regular security updates.
Note: No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
The App is not intended for children under 13 years of age. We require users to provide their date of birth at registration and do not permit accounts for users under 13.
If we learn that a child under 13 has created an account, we will delete the account and all associated data promptly.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at youth@kutaisi.gov.ge and we will delete it immediately.
Users between 13 and 18 confirm that a parent or guardian has given permission for them to use the App.
Voli is committed to maintaining a safe environment for all users, especially minors.
Our standards against Child Sexual Abuse and Exploitation (CSAE):
Contact for child safety concerns:
youth@kutaisi.gov.ge
To report child safety concerns in-app, use the report function available on user profiles and content.
Your data is stored and processed on servers located in Kutaisi, Georgia. We do not transfer personal data outside of Georgia. Third-party services (Google, Meta, Expo) may process limited technical data (device tokens, OAuth credentials) on their own infrastructure outside Georgia, in accordance with their own privacy policies and applicable data transfer frameworks.
The Voli App uses the following local storage mechanisms:
We do not use web cookies or web tracking technologies. We do not use advertising SDKs or tracking pixels.
The App may contain links to partner organization websites or event pages. We are not responsible for the privacy practices of those websites. We recommend reviewing the privacy policies of any third-party sites you access through the App.
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via an in-app notification and update the "Last Updated" date at the top of this document. Continued use of the App after changes constitutes acceptance of the updated policy.
The Voli mobile app does not use cookies. We use the following device-side storage:
We do not use web tracking technologies or advertising cookies.
The App does not respond to Do Not Track (DNT) signals. Analytics are currently disabled in the App.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data:
Email: youth@kutaisi.gov.ge
Address: Rustaveli Ave N3, Kutaisi, Georgia
Phone: +995 595 250 309
Response Time: Within 10 business days
This Privacy Policy is governed by the laws of Georgia. Any disputes arising from this Privacy Policy will be resolved in the Kutaisi City Court.
For EU/EEA residents who wish to file a complaint with a supervisory authority, see: https://edpb.europa.eu/about-edpb/about-edpb/members_en
This Privacy Policy is provided in English. A Georgian-language version is available upon request at youth@kutaisi.gov.ge. In the event of any discrepancy between versions, the English version prevails.
By registering an account or using the Voli App, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.
Version: 1.1