How to check a chat service's privacy claims

Before choosing a chat service, ask two separate questions: what can another participant learn about you, and what information can the provider process? A camera-free session or a nickname can change what the other person sees. Neither proves that the service collects no information.

Use the checklist below to compare the particular chat mode you plan to use. Keep the provider's stated policy separate from what a setting actually does.

Who can see what you share?

Start with the conversation itself. In text, another participant can read what you send. In video, think about your face, voice, surroundings and anything that enters the camera frame. Choosing not to share a real name does not erase identifying details you disclose elsewhere in the exchange.

Then examine the provider's role. Look for separate explanations of account information, chat content, technical logs, cookies, payment details and reports. These categories can have different purposes, access rules and retention periods.

Perspective: Another participant

What to check: Display name, profile details, messages, camera view, voice and anything you choose to share.

Perspective: The service provider

What to check: Data named in its policy, the purposes for using it, staff access and automated processing.

Perspective: Service partners

What to check: Hosting, payment, analytics or other partners listed or described in the policy.

Do not assume the same answer applies to each row.

What should a privacy policy help you understand?

For each question, write down the answer, its source and any limit. Use “not stated” when you cannot find an answer. That is more useful than guessing “no.”

Question: What is collected?

A useful answer would identify: Specific data categories, separated by feature or mode where needed.

Question: Why is it used?

A useful answer would identify: Purposes such as providing a session, handling abuse reports or processing a payment.

Question: How long is it kept?

A useful answer would identify: A period or clear retention criteria for the relevant category.

Question: Who receives it?

A useful answer would identify: Relevant recipients or categories of recipient and why they need it.

Question: Can I change my choice?

A useful answer would identify: Available settings, permission controls and the process for making a request.

Question: What happens after a report?

A useful answer would identify: Whether content or other evidence is captured and how it is handled.

“We value privacy” is a statement of intent. It is not an answer to how long a report, log or message remains available.

For example, imagine a service says, “Chats disappear when the session ends.” Its policy also says abuse reports can contain messages. Those statements could refer to different records: a participant's chat history and evidence sent in a report. Before deciding what the promise means, check what disappears, what a report preserves and how long that evidence is kept. This is a fictional example, not a description of Vooz's data handling.

What does an encryption claim actually cover?

Encryption protects information by encoding it so that access depends on the relevant key. The UK Information Commissioner's explanation distinguishes protection during storage from protection while data travels over a network.

When a chat provider says “encrypted,” ask which information, which mode and which part of the journey it means. Protection between your browser and a server does not, by itself, establish that only the conversation participants can access the content.

An end-to-end encryption claim needs a technical explanation of the endpoints and who can decrypt the content. Also check what happens to reports, stored history and backups. A short marketing label does not answer those questions. Do not assume Vooz or another provider offers end-to-end encryption without an explanation covering the specific mode.

How do reporting and deletion fit together?

Reporting may involve sharing evidence with the provider. Check what the report includes before assuming it is invisible to the platform. A useful reporting process and a clear explanation of evidence handling should be considered together.

Similarly, distinguish closing a chat, removing something from your screen, deleting an account and making a data-deletion request. They may be different actions. Look for the documented process and any stated exceptions; do not assume that ending a session immediately erases every related record.

For the different jobs performed by automated checks, human review and user reports, read the moderation guide.

How can you apply this checklist to Vooz?

Start with the Vooz privacy policy, cookie policy and anonymous-chat information. Review the exact feature you intend to use. Look for its data categories, retention periods and deletion process; ending a conversation alone does not answer those questions.

If a material answer is unclear, use the contact page for clarification before sharing information you would not otherwise disclose. For actions you can take yourself, see what to share during a chat. If you are still choosing a service, apply the same questions to each option in the alternatives guide.