Volley holds photographs of the things you own, sometimes of your home, and sometimes of you. This page says what we collect, why, who helps us run Volley, and how to make all of it disappear. It covers the iPhone app, the web app at app.onvolley.com, and this website.
This page is the policy. If anything you read elsewhere about Volley says something different, this page wins.
What changed on October 6, 2026. Two things.
This website and the web app now look more closely at how people use them: where they click and how far they scroll, so we can see which parts of a page work. The website used to count a few steps of a visit and nothing more, and we said so here, so we're saying plainly that it changed. Nothing is replayed, and nothing on any screen is recorded. The section on this website and the web app below has the whole of it.
And this page got shorter. The step-by-step detail of how each part of the app handles your things will move inside the app, next to the things it describes. Nothing we promised you was dropped. A few things this page used to leave out are now here: the rough region our analytics works out from your IP address, the notes you send us, your sizes if you add them, and the place names you search when you plan a trip.
Earlier versions of this page are kept at onvolley.com/privacy/2026-10-03.
We don't sell your data, we don't share it for advertising, we don't show ads, and we never use your photos to train AI. Nobody browses your closet. Lending is free and always will be, and nothing about lending, sharing or your court sits behind Volley Plus.
Volley runs on a small set of services. Each does one job for us and may use what we send only for that job. Each is bound to protect your data at least as carefully as this page describes.
These are named because they receive your photos, or watch how Volley is used:
And these do the plumbing:
That is every kind of company that receives your data. Write to us and we'll name each one.
When you visit, PostHog records how the visit goes: the pages you open, where you click or tap, and how far you scroll. We put those together into heatmaps, which is how we find the part of a page that loses people. Nothing is replayed and nothing on your screen is recorded.
What you type into a field is never collected by our analytics. Your email in the waitlist form goes only to the waitlist.
It uses a random id kept in your browser for as long as the tab is open, then it's gone. No cookie, no advertising pixel, and no profile of you. Nothing from this website is joined to your name, your email or your Volley account, including if you later join the waitlist or sign in.
If your browser sends Do Not Track or Global Privacy Control, the analytics doesn't load at all. Pages that open an invite or a friend's link never load it.
We also keep our own simple record of arrivals: which of our links you came in on, the exact address you landed on, the page that sent you (usually just a site name, because browsers hold the rest back), and the time. Nothing after a #.
The Journal and the sample closet keep their own counts in that same simple record: that the Journal's front page or a piece was opened, that a piece was read to the end, which block inside an interactive piece was tapped, and which parts of the sample closet were tried. Each is one count per visit, stored with the piece's name and the link you came in on, and nothing else: no id, no cookie, nothing that stays in your browser once the tab closes. These counts don't need the analytics to load and don't check the Do Not Track signal, because there is nothing about you in them.
One exception, and it's labelled where it sits: the Journal's front page carries a Spotify player for one song. Inside that frame Spotify sees your IP address and may set its own cookies, under Spotify's privacy policy rather than this one. Apart from that, no other company collects what you do on this site, here or across other sites.
The web app uses a cookie to keep you signed in. It sends the same kind of named product events as the iPhone app, tied to your account's id number once you sign in. It also notes where you click and how far you scroll, to make heatmaps, with every word on the page and everything you type hidden first, so it never learns what your pieces are called or what you searched for. It doesn't replay the page.
Neither the iPhone app nor the web app ever records your screen.
In the app: Settings → Delete my account. It's a real deletion. Every photo and every picture made from them leaves storage, including the photo of you if you added one. Your closet, your connections (from both sides), your invites, your shares, your borrow history, your subscription record and your analytics identity all go with it. Our backups roll off within 30 days, and a picture already open on a friend's screen can keep showing for up to an hour. What's left is a record of what processing cost, with nothing connecting it to you. Notes you sent us are kept separately so we could answer them; write to us and we'll delete those too. Cancelling Volley Plus itself happens in your Apple settings.
Changed your mind about one thing rather than everything? Remove a piece, unshare it, disconnect from a friend, or remove the photo of you, each in the app. Location and notifications can be turned off in your iPhone's settings. No longer have the app? Email us from your account's address and we'll delete it for you.
Wherever you live, you can ask us what we hold about you, for a copy of it, to correct it, or to delete it. Write to hello@onvolley.com from your account's email so we know it's you, or have someone you've authorised write for you. We'll answer within 45 days, and asking will never change how Volley treats you.
We don't sell or share personal information as California law uses those words, so there's nothing to opt out of. We don't use sensitive information to work out anything about you, and we don't give personal information to other companies for their own marketing.
The same thing, as California asks for it. What we've collected in the last twelve months, where it came from, and who it went to. None of it was sold or shared for advertising.
| Kind | Examples | Comes from | Goes to (for us only) |
|---|---|---|---|
| Identifiers | email, Apple's account number, account id, IP address, notification token | you, Apple, your device | storage host, email delivery, analytics, Apple, notification service |
| Photos and closet | photos of pieces, outfits and pins, tags, wears, looks, trips, sizes | you | storage host, AI and image services |
| A photo of you | one photo, only if you choose | you | storage host, image service, AI service |
| Purchases | that you subscribe to Volley Plus, which plan, until when | Apple | storage host, analytics (the plan only) |
| Activity | product events, clicks and scrolls on the website and web app | your device and browser | analytics |
| Rough location | region from IP address; rounded location or place name for weather | your device | analytics, weather services |
| Your friends | connections, courts, shares, requests, asks | you and your friends | storage host, email delivery, notification service |
| What you write to us | feedback and emails | you | storage host, web host |
Volley is for people 17 and older, and this website isn't meant for children. We don't knowingly collect anything from anyone under 13. If we learn we have, we delete it. If you think a child has signed up, write to us.
Volley is offered in the United States, and your data is stored and processed in the United States.
The date at the top is the honest one. If we change something here that matters, we'll say what changed at the top of this page rather than quietly editing it, and keep the earlier version where you can read it.
Write to hello@onvolley.com. A person reads it.