What you say stays with you.

At a glance

Privacy without surprises

• Civisay does not require an account.
• Your saved study record and spoken interview content stay on your device. Limited study-activity events are measured separately.
• Civisay remembers whether the free face-to-face interview has been used without receiving your Apple Account name or email.
• On compatible Apple devices, Civisay uses Apple's Foundation Models framework on device. Official USCIS answers remain the source of truth.
• Civisay does not sell personal information, show third-party ads, or track you across other companies' apps and websites.
• The Civisay website uses cookie-free Cloudflare Web Analytics to understand aggregate visits and page performance.
• The app uses Firebase for usage and purchase measurement, diagnostics, and configuration. Pseudonymous identifiers can associate activity from the same app instance.
• A street address is used only when you request an exact U.S. representative lookup.
• A pronunciation report is sent only when you choose to submit one.
• Your email address is collected only if you affirmatively join the Android update list.

Local by default

Study data stays on your device

Your study progress, review history, preferences, selected test track, selected guide voice, state or territory, ZIP code, cached civics data, and mock interview history are stored in Civisay's private app storage on your device.

Deleting Civisay removes this local data unless it is later restored through an Apple device backup. Civisay does not operate a user account or cloud-sync profile for this information. Separate Analytics events can include the selected test track or guide voice, question identifiers, self-assigned ratings, session counts, and steps completed in study or an interview. These events do not contain your spoken answer or transcript. Deleting the app does not automatically delete data already held by service providers.

One fair free round

Free interview eligibility is remembered

Civisay uses an App Store-signed app transaction identifier and Apple DeviceCheck to determine whether the free face-to-face interview is available, in progress, or completed. This helps the offer survive an interrupted session and prevents repeated free rounds after reinstalling the app.

Civisay sends the signed identifier and a temporary DeviceCheck token to its protected Firebase service. Firebase stores a one-way hash of the app transaction identifier, the trial status, a random session identifier, and the test track and question identifiers needed to resume an interrupted free round. The raw DeviceCheck token and raw App Store identifier are not stored in the trial record.

This record does not give Civisay your Apple Account name or email and never includes your microphone audio, interview transcript, coaching, ZIP code, or street address. Free interview eligibility may remain after you delete and reinstall Civisay.

On-device speech and intelligence

Your mock interview is processed on your device

Marcus is an AI-generated, prerecorded practice officer, not a real person or USCIS officer. His question videos do not use your camera, receive your microphone audio, or process your answer.

Civisay requests microphone and speech-recognition access only when you choose to answer a mock interview question out loud. It transcribes the answer using Apple's on-device speech technology. On compatible Apple devices with Apple Intelligence enabled, Civisay may use Apple's on-device Foundation Models framework to compare the meaning of the transcript with accepted civics answers and offer focused coaching. Official USCIS answers remain the source of truth.

Your interview audio, transcript, and on-device coaching analysis are not sent to Civisay, Firebase, Cloudflare, an advertising service, Civisay's audio-review tools, or a cloud AI service. When Apple's on-device model is unavailable, Civisay uses its built-in answer matching so you can keep practicing. You can decline microphone or speech-recognition access and continue using study features that do not require spoken answers.

Only when requested

Representative lookup is temporary

If you ask Civisay to identify your U.S. representative, Apple Maps can provide address suggestions as you type. Civisay does not save those suggestions or what you type. When you choose Check my district, the selected street address, state, and ZIP code are sent over HTTPS to Civisay's lookup service. That service submits the address to the official U.S. Census Geocoder to determine the congressional district, then matches the district to the current House roster.

Civisay does not write the street address to its application logs, analytics, or civics database. The service returns the representative result, not the address. Civisay may save the resulting representative information on your device so it remains available during study.

You can avoid this lookup and verify your representative through the official U.S. House website instead.

Optional feedback

Pronunciation reports are reviewed by a person

If you choose Report Pronunciation, Civisay sends the displayed question and answer, selected Nora or Theo guide voice, exact spoken-text hash, exact remote audio revision when available, app version and build, and anything you type in the optional suggestion and note fields.

A pronunciation report does not automatically attach your name, email address, ZIP code, street address, interview audio, interview transcript, Analytics app-instance identifier, or trial identifier. Anything you enter in the optional text is included, so please leave personal information out. Reports are stored in a private Firebase Cloud Storage review inbox. Resolved or dismissed reports move to a private archive so Civisay can preserve an audio-correction history.

Reports are treated as review leads. They never change an answer or recording automatically.

Android updates by choice

Your email is saved only when you join the list

If you join the Android update list on civisay.com, Civisay stores the email address you enter, the exact consent statement and consent version you accepted, the date and time of your signup, and how many times that address confirmed its interest. Civisay may also store the website page, referring website's hostname, and campaign labels already present in the page URL so it can understand which outreach introduced people to Android.

The signup is stored in a private Firebase Firestore collection. Civisay uses a one-way hash of the normalized email address as the record identifier to avoid duplicate subscriptions, while retaining the email address inside the protected record so it can send the update you requested. Your email address is not sent to Google Analytics, Cloudflare Web Analytics, or the Civisay app.

Civisay will use this list for Android availability and occasional Civisay product updates covered by the consent shown beside the form. You can withdraw that consent at any time by using the unsubscribe option in an email or contacting support@civisay.com. Civisay will not sell or rent this list.

Website measurement

Aggregate traffic without an advertising profile

When you visit civisay.com, Cloudflare Web Analytics measures page views, referring websites, general country, device and browser type, and page-performance information. Civisay uses these aggregate measurements to understand whether people can find the site and whether its pages load well.

Across civisay.com, Google Analytics 4 receives page views. On the homepage, it also receives a limited set of conversion events: an App Store link tap, a product-video start or completion, whether the pricing or Android sections came into view, and a successful Android-list signup. Campaign labels already present in the page URL, such as utm_source and utm_campaign, may be included so Civisay can compare outreach channels. The signup event never includes the email address.

Google Analytics is configured with analytics and advertising storage denied, so this website does not add an analytics cookie, persistent Civisay browser identifier, or advertising profile. Limited cookieless measurements may include routine request information such as a timestamp, browser details, referring page, and IP address during transmission. Conversion events do not include your name, email address, study history, microphone audio, interview transcript, ZIP code, or representative address. When a browser reports Global Privacy Control or Do Not Track, Civisay does not configure Google Analytics or send these measurement events. The Google tag library may still be requested as a website dependency, which exposes routine network information to Google but does not activate Civisay measurement.

Reliability

Diagnostics, app usage, and configuration

Civisay uses Google Firebase services to understand whether important flows work, diagnose crashes, and safely configure current civics data and launch behavior:

• Firebase Analytics processes onboarding, study, interview, paywall, and purchase events, an app-instance identifier, device and app details, and general region. It can associate interactions and verified purchases from the same app instance. Civisay does not send your name, street address, ZIP code, interview transcript, or spoken answer as an analytics property.
• Firebase Crashlytics and Sessions process crash stack traces, application state, preceding app-interaction events, device and operating-system details, session timing, performance metadata, and pseudonymous installation or session identifiers so Civisay can diagnose failures and monitor reliability.
• Firebase Remote Config and Installations use app-installation and configuration information, country or general region, language, time zone, operating-system version, Firebase app ID, and bundle ID to deliver configuration values. Remote Config can also use Analytics properties and first-open information to evaluate configuration rules.
• Firebase Firestore stores the protected pseudonymous eligibility record described above. It also stores an Android update subscription when a website visitor explicitly joins that list.

Civisay has no account system and does not set a named Analytics or Crashlytics user ID. This does not make measurement anonymous: app-instance, installation, and hashed transaction identifiers can associate records. Collection is enabled automatically for eligible app runs; choosing not to speak does not turn off Analytics.

Apple may provide Apple Ads install attribution through AdServices so Civisay can evaluate acquisition. Civisay does not access the advertising identifier (IDFA), show third-party ads, or use Firebase data for cross-company targeted advertising. Firebase advertising storage, advertising user data, and advertising personalization are denied in the app.

Lifetime Pro

Purchases are handled by Apple

Civisay is free to download. Lifetime Pro is an optional one-time in-app purchase, not a subscription. Apple processes the purchase through the App Store. Civisay reads the StoreKit entitlement needed to unlock Pro and records purchase outcomes, such as completed, cancelled, failed, or restored. It also sends eligible verified StoreKit transactions to Firebase's native purchase-measurement service. This purchase information is associated with an Analytics app instance and is used to understand conversion and revenue; it is separate from the entitlement check on your device. StoreKit also supplies the signed app transaction identifier used for free-interview eligibility.

Civisay does not receive or store your payment-card details. Apple's handling of purchase information is governed by Apple's own privacy policy.

Limited providers

When information is processed elsewhere

Civisay uses information only for the purposes described in this policy and may rely on these providers:

• Apple for App Store purchases and app verification, DeviceCheck, device backup, microphone access, on-device speech recognition, on-device Foundation Models processing on compatible devices, and optional Apple Maps address suggestions.
• Google Firebase for analytics, crash diagnostics, remote configuration, free-interview eligibility, hosted civics services, verified audio delivery, private pronunciation-report storage, and the private Android update list.
• Cloudflare to deliver and cache prerecorded Marcus interview videos and provide cookie-free aggregate website analytics. Cloudflare may process routine network request information, such as IP address and traffic-routing data, for delivery and security. Civisay does not send Cloudflare your microphone audio, interview transcript, or representative address.
• Google Analytics 4 for limited, cookieless website conversion and campaign reports. Analytics storage, advertising storage, advertising personalization, and advertising user data are denied. Civisay does not add a user ID or send study activity, spoken answers, or representative-address information with these website events.
• U.S. Census Bureau for the address geocoding used in an exact representative lookup.
• Official public data sources used to keep civics answers and current officeholder information accurate.

Civisay may disclose information if required by law, to protect users or the service, or as part of a business transfer where this policy continues to apply. Civisay does not sell or rent personal information.

Control

Retention, security, and your choices

On-device study data remains until you reset it in Civisay, delete the app, or restore a different backup. Free-interview eligibility may remain for the life of the offer and as needed to prevent repeated free rounds. Deleting the app does not automatically erase information already held by service providers.

Representative addresses are processed for the immediate lookup and are not intentionally retained by Civisay. Pronunciation reports remain in the private inbox or archive for quality review and correction history without a scheduled expiry; you can request their deletion. Deleted objects in the report-storage service can remain recoverable for seven days under its soft-delete setting. An Android update subscription remains until you unsubscribe or request deletion; Civisay may retain the minimum suppression record needed to honor an opt-out.

Firebase Analytics event and identifier data follow the project's configured retention period, and aggregated reports may remain longer. Crash, session, and configuration data follow the relevant Firebase service's retention rules. Records may be retained longer where needed to resolve a dispute, prevent abuse, or comply with a legal obligation.

Civisay uses HTTPS, access-controlled Firebase services, input validation, and content hashes to protect information in transit and in its review systems. No method of electronic storage or transmission can be guaranteed completely secure.

You may study without speaking, decline microphone or speech-recognition access, avoid entering a street address, choose not to submit pronunciation feedback, and choose not to join the Android list. Contact Civisay Support about access or deletion, withdrawing from the Android list, or deleting a pronunciation note. Provide enough non-sensitive detail to locate the record. Because Civisay has no named app account, some pseudonymous service records may be difficult to identify. Do not send a street address, payment details, or interview transcript.

Younger users

Children's privacy

Civisay is not designed to collect a child's name, contact information, or spoken interview content. The app does not require an account and does not knowingly use personal information from children for advertising or profiling. A parent or guardian who believes a child submitted information through a pronunciation report may contact Civisay Support.

Policy updates

Changes to this policy

This policy may be updated when Civisay's features, providers, or legal obligations change. The current version will remain available at this URL and will show a revised date when material changes are published.

Questions

Contact Civisay

For privacy questions, support, or a request concerning information you submitted, email support@civisay.com.

Civisay is an independent study tool and is not affiliated with, endorsed by, or an official product of USCIS or the U.S. government.