Effective 23 August 2026 · Version 1.0
The short version
- Civix works entirely on your device. Your progress, streak, and answers stay there.
- There are no ads, no analytics, no trackers, and no advertising identifiers. None.
- Nothing about you is sold, rented, or shared with data brokers. Ever.
- You only give us an email address if you choose to create an account to sync between devices.
- You can delete your account and everything in it at any time.
This policy explains what Civix does with your information. It is written to be read, not to be survived. Where the honest answer is “nothing”, it says nothing.
Two states, and which one you are in
Civix behaves differently depending on whether you have created an account. This is the most important thing on this page, so it comes first.
Playing without an account (the default). Everything — your name, progress, XP, streak, hearts, and answers — is stored only in Civix’s own storage on your device. It is never transmitted anywhere. If you delete the app, it is gone.
Playing with an account (opt-in). You choose to create an account so progress follows you between devices. Only then does anything leave your device, and only the fields listed below.
As of this version, account sync is not enabled in the shipping app. The feature is built but switched off, which means the current release transmits no personal information at all. This section describes what happens when sync is turned on, so that this policy is accurate the day it is.
What an account stores
If you create an account, this is the complete list. There is nothing else.
- Email — to sign you in and recover your account. Optional for accounts belonging to children under 13.
- Password — stored only as a bcrypt hash. We cannot read your password.
- Display name — what Civix calls you in the app. A first name or nickname is fine.
- Birth year — the year only, never a full date. Used to apply the right protections for children.
- Parent email — only for accounts identified as belonging to a child under 13, to request parental consent.
- Progress — XP, streak, hearts, difficulty tier, which lessons you finished, and your best score on each.
- Entitlement — whether a Quest Pass is active, and when it expires.
We do not collect your precise location, contacts, photos, calendar, browsing history, device advertising identifier, or anything from other apps. Civix does not request microphone or camera access, and the app ships with those permissions explicitly blocked.
Children
Civix is built to be usable by children, and that carries obligations we take seriously under the Children’s Online Privacy Protection Act.
Civix asks for a birth year before an account is created. If it indicates the person is under 13, the account is marked accordingly and we ask for a parent or guardian’s email address so that consent can be requested. Until a parent grants consent, the account collects no email address for the child and stores no personal information beyond what is needed to hold that consent request open. A parent may refuse, and may later withdraw consent and have everything deleted, by writing to the address at the bottom of this page.
Children can play Civix in full without an account, in which case nothing about them leaves the device at all.
Purchases
The Civix Quest Pass is sold through the App Store and Google Play. We never see your payment details. Card numbers, billing addresses, and bank information go to Apple or Google, not to us, and we have no way to retrieve them.
To know whether your pass is active, Civix uses RevenueCat, a subscription management service. RevenueCat receives a randomly generated identifier for your installation and the purchase receipt issued by the store. It does not receive your name, your email address, or your payment details.
What Civix never does
- No advertising, of any kind, anywhere in the app.
- No analytics or telemetry SDKs. We do not measure what you tap.
- No third-party trackers, pixels, fingerprinting, or advertising identifiers.
- No selling, renting, or sharing of personal information with data brokers.
- No profiling, and no automated decisions that produce legal effects.
- No email from us that you did not ask for.
The narrated lesson audio is generated before release and shipped inside the app. Playing a lesson contacts no server and sends nothing anywhere.
Who else can see your information
Only the services required to run the parts of Civix you actually use:
- Apple and Google — process your purchase and tell us whether it is valid.
- RevenueCat — tracks subscription status, as described above.
- Our own server — stores account and progress data, only if you create an account.
We may disclose information if legally compelled to, and we will tell you when we are permitted to do so.
How long we keep it
Account data is kept for as long as your account exists. Delete your account and it is removed from our database, along with your progress, entitlement record, and sign-in sessions. Backups roll off within 30 days.
Data held only on your device lives there until you delete the app or reset your progress from the profile screen.
Security
All network traffic uses HTTPS. Passwords are stored as bcrypt hashes and never in readable form. Sign-in tokens are stored hashed, so a copy of our database cannot be used to impersonate you. Sign-in endpoints are rate limited against credential-stuffing attacks.
No system is perfectly secure, and we will not claim otherwise. If we discover a breach affecting your information, we will notify you and the relevant authorities as the law requires.
Your rights
Wherever you live, you may ask us to show you what we hold, correct it, delete it, or hand it to you in a portable format. Account deletion is available inside the app, and needs no correspondence with us.
If you are in the European Economic Area or the United Kingdom, our lawful basis is your consent for optional account sync, and the performance of our agreement with you for delivering a purchased Quest Pass. You may withdraw consent at any time by deleting your account, and you may complain to your local data protection authority.
If you are in California, you have the right to know, delete, correct, and to be free from discrimination for exercising those rights. Civix does not sell or share personal information as those terms are defined by the CCPA, so there is no opt-out to offer you.
Changes to this policy
If this policy changes in a way that materially affects you — most likely when account sync is switched on — we will update the date at the top and tell you inside the app before the change takes effect. We will not quietly broaden what we collect.
Contact
Questions, requests, or a parent withdrawing consent: [email protected]
Civix · com.demelos.civix