Privacy policy
Effective: September 27, 2026
Language Watch stores what you follow so it can check bills and deliver the updates you choose.
Information we handle
Your account uses an email address and sign-in information handled by our authentication provider. Our server stores your saved bills, monitoring settings, review marks, notes, matching passages and retained findings. If you choose email digests, we use your verified sign-in email to send them. If you choose push alerts, we store an installation identifier and push token. We may process technical request and delivery records to operate, troubleshoot and protect the service.
How we use it
We use this information to maintain your account, monitor saved bills, find shared wording, show alerts, send optional notifications, and respond to support requests. Language Watch is an invitation-only beta at present. We do not use your bill choices to target ads.
Service providers and sharing
Supabase handles sign-in; our hosted server processes your account records; an email delivery provider processes the recipient address and digest content when you opt in; and Expo and Apple process generic push notifications when you enable them. Generic push notifications do not contain bill titles, notes or account details. Congress.gov and linked government sources provide public legislative data. If you use your device’s Share action, you choose the destination and recipient; public document links may be included, while private review notes are excluded from the app’s shared evidence.
Your choices
Turn email digests and push alerts on or off in the app’s Settings. You can export your account data as a JSON file on iPhone under Settings → Account & data. You can request account deletion from the same screen. If deletion is accepted, monitoring stops and live account data and the sign-in identity are removed; if a provider is unavailable, deletion can remain pending and the server retries. If a deletion remains pending, contact support@civilsheep.com for help and a status update.
Retention
We keep live account data while your account is active. Push device registrations expire after 30 days without renewal; switching push off or signing out normally removes the registration sooner. If your session ends unexpectedly while offline, a generic notification could still arrive until the registration expires or the next sign-in removes it. A minimal hashed deletion record and timestamps are retained to prevent deleted accounts from being restored unintentionally. Separate backups, provider records, and service logs may outlast removal of live data. We remove operator-created backups containing account data within 30 days of creation. Our hosting provider creates daily disk snapshots, which it makes available for at least seven days; the provider controls when those snapshots are finally removed. Under our current hosting plan, dashboard service logs are available for seven days. Other providers may retain operational records under their own policies. Copies of exports you save or share from your phone remain under your control.
Security and accuracy
We limit account access and use encrypted network connections, but authorized service operators can access server data; it is not end-to-end encrypted. We cannot guarantee uninterrupted delivery or complete coverage of legislative material. For questions or privacy requests, email support@civilsheep.com.
Changes
We may update this policy as the service changes. The effective date above shows the current version.