The ballot your constitution actually calls for.
Multiple positions, different counting methods per position, and a receipt every voter can check. Designed on screen, sealed before the poll opens.
How voting works
Three counting methods
First-past-the-post, ranked-choice and approval voting, chosen per position. Multi-seat proportional representation and single-transferable-vote counting are not supported today.
Ballot designer
Build the ballot on screen with templates, live preview and your own branding, then seal it so it cannot change once voting opens.
Vote on a phone or station tablet
Members vote in the Android app on their own phone. Members without an Android phone vote on an officer’s station tablet at a polling station.
Re-verification at the booth
Before a ballot is accepted, the voter can be re-checked with a device biometric and a live face match, so the person voting is the verified member.
One ballot per position
Eligibility is enforced from membership status and verification level, and the system accepts a single ballot per position per voter.
A receipt that can be checked
Each ballot produces a SHA-256 receipt. Anyone holding it can confirm the ballot was recorded, without learning how it was cast.
Notes on channels and secrecy
SMS is for reach, not for casting. We send notifications and one-time passcodes by SMS with delivery tracking, which is how you reach members on basic handsets. Ballots themselves are cast in the Android app or on a station tablet — we do not accept votes over SMS or on a web page.
Ballot secrecy is operational. Choices are separated from voter identity in what officials can see, and no administrator screen shows how an individual voted. That is enforced by system design and access control rather than by cryptography. If your election requires a mathematically guaranteed secret ballot, read our security page and talk to us first.
Not sure which method your rules require?
Send us the relevant clause and we will tell you whether it is supported.