Voting is anonymous: a random session id, no email, no ad trackers.
EXIF metadata, including location, is stripped from every upload.
Photos awaiting checks stay in private storage and are never shown publicly.
Verification material (liveness capture, documents, biometric templates) is handled by the specialised provider and is not stored in this app by default.
Deleting a photo removes it from this site, but cannot remove copies other people may already have saved.
Selfies and verification material are never cached for offline use.