Poll City Social — Privacy Policy
App: Poll City Social · Bundle ID: ca.pollcity.social · Last updated: October 21, 2026
What This App Does
The election app focuses on public election discovery, candidate profiles and comparison, representatives, community polls, Ontario results and assigned campaign Routes and tasks. Public election information can be browsed without an account. Participation and private campaign work require sign-in and the matching permissions. This policy also explains data associated with your shared Poll City account from other website workspaces you have used.
Information We Collect
- Account information (if you create an account): name, email address, and password hash. Supported Google or Apple sign-in can provide profile details, provider identifiers and authorization credentials needed to authenticate. Apple-linked account deletion can require fresh Apple identity and authorization credentials to revoke the grant.
- Location and address information: a postal code or address you enter is sent to Poll City to resolve your electoral area. If you grant foreground location permission, the app may use your current device location while a canvassing map is open or convert it into an address or postal code for a civic lookup. Poll City does not request background location access.
- Poll votes: which options you selected. Votes are aggregated — individual votes are never disclosed to candidates or the public.
- Questions: questions you submit to officials are stored and may be displayed publicly with your display name.
- Follow relationships: which officials and candidates you follow.
- Group memberships: which civic interest groups you join.
- Issue interests: topics you engage with, used to personalise your feed.
- Device and notification delivery data: crash diagnostics can include device type and OS version. If you enable notifications, Poll City also sends your device platform, app version, time zone, an app-generated identifier stored on your device, and the Expo push token so the service can register, deliver, refresh, or revoke notifications for that app installation.
- Messages and other content: private in-app messages, questions, profile content, images you choose to upload, and other text you submit.
- Campaign workspace data: for authorized campaign users, assigned voter/contact records shown to you and the outcomes, notes, sign requests, volunteer leads, and other field actions you record. Offline field actions can remain encrypted on your device until they sync or you resolve a conflict.
- Advertiser workspace data: for verified advertiser users, organization registration details, authorized-user records, campaigns, audiences, creatives, and spend information associated with that advertiser account.
How We Use Your Information
- To show you your local elected officials and community polls
- To personalise your civic feed based on your location and interests
- To notify you about new polls, responses from officials you follow, and local election updates
- To aggregate poll results for public display (never individual-level disclosure)
- To improve the platform through usage analytics
- To provide permission-scoped campaign and advertiser workflows to authorized users
- To diagnose crashes and performance problems when production crash reporting is enabled
We do not sell your data. We do not use your data for advertising. We do not share your individual voting behaviour with any candidate or campaign.
What Candidates and Officials See
Candidates and elected officials can see: aggregate poll results (e.g. “62% support”), total follower counts, and questions submitted to them publicly. They cannot see who voted for which option, who follows them by name, or your personal profile unless you make it public.
Third-Party Services
- Vercel — hosting and CDN
- Supabase / PostgreSQL — the production database is hosted in Canada. App delivery, diagnostic and other service providers may process data in other locations.
- Apple Maps and Google Maps — map display and directions. Opening external directions sends the selected destination to the maps provider; precise device location is subject to your device permissions.
- Google Sign-In — optional account authentication where supported
- Apple Sign-In — optional account authentication and authorization revocation for Apple-linked deletion
- Represent API (OpenNorth) — Canadian electoral lookup; the normalized postal code you enter can be sent to this service to resolve your area
- Expo / EAS and Apple — signed app delivery, updates, and device push-notification transport
- Sentry — production crash and performance diagnostics. Poll City configures the mobile SDK not to send default personal information and removes custom breadcrumb payloads; diagnostic events can still include app/device context and technical exception details.
Data Retention
Your account data is retained while your account is active. You can initiate permanent account deletion from Settings in the app. The confirmation explains the personal data removed and the records retained; there is no restoration period after successful deletion. Completion is displayed only after the server confirms the operation. An Apple-linked account may require fresh Apple authorization. If authorization or deletion fails, the app shows an error and does not claim that deletion completed.
Your Rights (PIPEDA)
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Withdraw consent and request deletion of your account and data
- Know how your information is being used
To exercise these rights, contact us at the address below.
Age Requirement
Poll City Social is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us and we will delete it promptly.
Security
All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text. Access tokens use short-lived JWT tokens. We follow OWASP security guidelines and conduct regular security reviews.
Changes to This Policy
We will notify registered users by email of any material changes to this policy. The "last updated" date at the top of this page reflects the most recent revision.
Contact
Poll City Inc.
Privacy inquiries: pangaon@gmail.com