Our six commitments to every crew member:
- Your health data stays on this device unless you choose to send a report.
- Nothing leaves without your tap. Apart from loading the page itself, only three buttons send anything, and each says what it sends.
- No accounts, cookies, analytics, advertising or trackers.
- You see every report before it is sent. Only the team can read the inbox, and every report is deleted automatically after 90 days.
- You can download or delete everything at any time in Crew profile & data.
- Open and auditable. The full source code is public on GitHub under the MIT license.
Who is responsible
Team Void Voyagers, the NASA Space Apps Challenge 2026 team that built this app, is responsible for the report inbox (the “data controller”). To ask about your data or have a report deleted, write to us privately through the private report form on our GitHub page, with the time you sent the report and your callsign. Nobody else can see that message.
What Void Voyagers stores, and where
- Your readings, crew profile (pre-flight mass, sex for the fluid target, mission dates, bone medication plan), the symptoms you tick, emergency and storm-shelter logs, your medicine-kit list, reports waiting to be sent, and settings (including the place you chose for Window to Earth and your body-map view) are saved in this browser’s local storage under the keys
voidvoyagers.v1 and voidvoyagers.theme. They never leave the device unless you send a report.
- To work without a connection, Void Voyagers keeps a copy of the app itself (its page, fonts and 3D model, never your data) in the browser’s cache.
- Anyone who uses this browser on this device can open Void Voyagers and see your readings. On a shared device, delete your data when you finish.
- Backups you download are ordinary files you keep. They are not encrypted, so anyone with the file can read your readings: store it somewhere safe.
- If you open Void Voyagers as a file saved on a computer rather than as the website, other web pages saved on that computer can read its storage. For private use, open the website (it keeps working offline after the first visit).
- “Delete all my data” in Crew profile & data removes everything listed above from this device.
No cookies
Void Voyagers does not set or read cookies, and it uses no third-party scripts, fonts or trackers: its fonts, 3D viewer and model are served from the same site as the app.
When something leaves your device
Only when you press a button that says so:
- Window to Earth (“Show latest view”) sends the place you chose (its coordinates) to Microsoft’s Planetary Computer to find a recent satellite image from NASA’s HLS data. No health data is sent. If you use your own coordinates, pick a place you are happy to share rather than your home.
- Space weather (“Check space weather”) asks NASA’s DONKI service at api.nasa.gov for solar events in the last 30 days. Only a date range and the app’s public demo key are sent, with no health data.
- Send report to flight surgeon sends the report you are shown first: your latest reading of each check with its time and age, the findings and advice (which can include your wellbeing and mood answers), symptoms you ticked in the last 24 hours, the emergency log if there is one, your mission environment and day, your pre-flight body mass and bone medication plan, whether it is example data, and an optional callsign (please don’t use your real name). It goes to the team’s inbox, a Supabase database in the EU (Frankfurt). With no connection, the report waits on this device and is sent when the connection returns.
All of these requests are made with cookies switched off and without a referrer. Like any web request, each service sees your IP address and browser type, and keeps it briefly under its own privacy policy. Microsoft and NASA are US organisations. Links to other sites, such as NASA, GitHub and journals, open those sites, where their own privacy policies and cookies apply.
The report inbox
In this prototype the Void Voyagers team reads the inbox. It is not a real flight surgeon, it is not watched around the clock, and nobody will reply with medical advice. If you need help now, contact your crew medical officer, your doctor or local emergency services. Don’t wait for a report.
The public key in the app can only add reports, at most 30 a minute across the inbox; nobody can read them back through it. Reports are deleted automatically 90 days after they arrive.
Why we may use a report, and your rights
We use a report only because you chose to send it: pressing “Send report” is your explicit consent. You can withdraw it at any time by asking us to delete the report. You can also ask for a copy, ask us to correct it, or object to how we use it, through the private report form above, and you can complain to your data protection authority.
Children
Void Voyagers is not meant for children. If you are under 16, use the checks on your device but don’t send a report. If we learn that a report came from a child, we delete it.
Hosting
The website is served by Vercel and Microsoft Azure. GitHub hosts only the source code and the research document. Like any web server, these providers log technical data such as your IP address and browser type to deliver the page and protect against abuse, and keep it for a short time under their own privacy policies. We don’t use these logs to identify or track anyone. Vercel and Microsoft are US companies and may process this data outside the EU under their data processing terms.
Not a medical device
Void Voyagers is a research and training prototype built for the NASA Space Apps Challenge 2026. It does not replace your crew medical officer, flight surgeon or doctor. Do not rely on it for real medical decisions.
Contact
Private questions and deletion requests: the private report form. General questions: open an issue on the project’s GitHub page.