Privacy Policy

Effective Date: February 27, 2026

LegisHawk ("we," "us," "our," or "the App") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, who we share it with, and what rights you have regarding your information when you use our mobile application and website (collectively, the "Services").

By using LegisHawk, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use our Services.

1. Information We Collect

1a. Information You Provide Directly

• Account Registration: Email address, display name, and password when you create an account.
• Profile Information: Display name updates you make through the Edit Profile screen.
• District / Address: A street address you voluntarily enter in the "Find My Representatives" feature. This address is transmitted to a geocoding service to determine your Iowa legislative districts. See Section 1d for full details.
• Your Interest Profile: Topic categories, subcategories, and specific policy interests you select through the "My Interests" quiz. See Section 1e for full details.
• Watchlist: The bills and legislators you add to "My Watchlist," stored in your account so notifications can be delivered.
• Notification Preferences: Your selections for which notification types you want to receive and at what frequency.
• Contact Submissions: Any message you send through our contact form, including your name and email address.

1b. Information Collected Automatically

When you use the App, the following data is collected automatically by the App and by third-party services we use:

• Device Information: Device model, operating system name and version, app version number, and mobile network type.
• Usage Data: Screens you view, navigation paths, features you use, session start and end times, and in-app interaction events. Collected via our app analytics provider.
• App Instance Identifier: A non-advertising, randomly generated identifier assigned to your app installation by our analytics provider. This is not linked to your advertising identity and resets when you reinstall the app.
• Crash & Stability Data: When the App crashes or encounters an error, our crash reporting service automatically collects the crash stack trace, device model, operating system version, device state (memory usage, available disk space, screen orientation), app version, and a random installation identifier. See Section 3b for full details.
• Performance Data: Network request durations, screen render times, and app startup time. Collected via our performance monitoring service. See Section 3c.
• Push Notification Token: If you grant notification permission, your device's push token is collected and stored to route notifications to your device. See Section 5.

Note on Advertising Identifiers: We have configured our analytics provider to disable collection of advertising identifiers (such as the IDFA on iOS and the Advertising ID on Android). We do not engage in cross-app tracking or behavioral advertising.

1c. Cookies and Web Technologies

Our website (legishawk.app) uses standard browser cookies and local storage to remember your preferences and analyze visitor traffic. You can control cookies through your browser settings. The mobile application does not use browser cookies.

1d. Address and Location Data (Find My Representatives)

The "Find My Representatives" feature lets you enter a street address to identify your Iowa House and Senate districts. Here is exactly what happens with that data:

1. Geocoding: Your address is sent over an encrypted (HTTPS) connection to a third-party geocoding service, which returns a latitude/longitude coordinate.
2. District Lookup: The coordinate is sent to a public Iowa Legislature GIS service to determine your House and Senate district numbers.
3. What We Store: We store only your district numbers (e.g., "House District 47, Senate District 24") in your account profile. We do not store your street address or GPS coordinates on our servers.
4. No GPS: We do not request access to your device's GPS. District lookup is driven entirely by the address you type.

District numbers are used to display your representatives in the app and to deliver "My Reps Activity" notifications. You may update or remove your district information at any time through the app's Settings.

Under California law (CPRA), precise geolocation derived from an address is sensitive personal information. We limit our use of this data to the specific purpose described above and do not use it for advertising or sell it to third parties.

1e. Your Interest Profile

Through the "My Interests" quiz, you may select legislative topics that reflect your policy interests (e.g., agriculture, education, healthcare). This creates an interest profile stored in your account that is used for two purposes only: (1) personalizing the bills shown in your home feed, and (2) delivering "Interests Bill Filed" push notifications when a new bill matches your selected topics.

This profile may reflect your political or policy views, which constitutes sensitive personal information under California's CPRA. We do not share your interest profile with third parties, advertisers, data brokers, or political organizations. You may view, update, or delete your interest profile at any time through the "My Interests" screen in the app. Upon account deletion, your interest profile is permanently and irreversibly deleted from our systems.

2. How We Use Your Information

• To operate and deliver the Services: Authenticating your account, displaying personalized bill feeds, delivering notifications, and providing legislative data.
• To personalize your experience: Using your district and interest profile to surface relevant bills and representatives.
• To send push notifications: Delivering bill updates, committee hearing alerts, and other notifications you have enabled.
• To improve the App: Analyzing usage patterns to identify bugs, optimize performance, and prioritize features.
• To ensure stability: Diagnosing and fixing crashes using crash report data.
• To communicate with you: Responding to support requests submitted through our contact form.
• To enforce our Terms: Detecting and preventing fraud, abuse, and violations of our Terms of Service.
• To comply with law: Responding to valid legal process, court orders, or regulatory requirements.

We do not use your information for advertising, cross-app tracking, or any purpose not listed above.

3. Third-Party Services We Use

The following categories of third-party services process data in connection with the App. Each service operates under its own privacy policy, which we encourage you to review. We select service providers that employ appropriate data protection practices and enter into data processing agreements where required.

3a. App Analytics

We use a third-party app analytics service to understand how users interact with LegisHawk. This service collects:

• Screen names and navigation paths within the app
• Custom in-app interaction events and their parameters
• Session duration and engagement time
• Device model, OS version, app version, and coarse country
• A randomly generated app instance identifier (not linked to your advertising identity)

We do not enable advertising identifier collection through this service. Analytics data is processed by our service provider on our behalf.

Opt-Out: You can disable analytics data collection at any time in the App under Settings > Privacy > Usage Analytics. Your preference is stored on your device and applied immediately. When analytics is disabled, no usage events are sent.

3b. Crash Reporting

We use a third-party crash reporting service to automatically detect, log, and help us diagnose app crashes and non-fatal errors. When a crash occurs, this service collects and transmits:

• The crash stack trace and error type
• Device hardware model and manufacturer
• Operating system version
• Device state at the time of the crash (available memory, available disk space, screen orientation, battery state, network connectivity)
• App bundle identifier and version number
• A random installation identifier (resets on reinstall)
• Your LegisHawk User ID (so we can identify if a specific account experiences repeated crashes)
• Custom log messages describing what action you were performing before the crash

Crash reporting does not collect your name, email address, watchlist contents, or any data you entered in the App. Crash reports are retained by our service provider for up to 90 days. This data is used solely to improve app stability and is not used for advertising.

3c. Performance Monitoring

We use a third-party performance monitoring service to measure how quickly the App loads, how fast network requests complete, and how long key operations take. This service collects:

• Network request response times and HTTP status codes
• App startup time and screen rendering performance
• Custom performance traces for key operations
• Device model, OS version, and app version

No personally identifiable information is included in performance traces.

3d. Push Notification Delivery

Push notifications are delivered through a third-party notification delivery service. When you grant notification permission, your device generates a push token that is stored in your account on our servers and transmitted to our notification provider to route notifications to your device. We delete your push tokens from our servers when you sign out, delete your account, or revoke notification permission in the App.

3e. App Configuration

We use a third-party remote configuration service to manage app settings, including enforcement of minimum app version requirements (force updates) and maintenance mode. This service uses an anonymous installation identifier to fetch configuration values. No personally identifiable information is collected.

3f. Account Authentication and Data Storage

Your account credentials are stored and managed by a third-party authentication provider. Your account profile, watchlist, notification preferences, values profile, and notification history are stored in a cloud database operated by our infrastructure provider. All data in transit is encrypted using TLS. Data at rest is encrypted by our provider.

3g. Address Geocoding

Address-to-coordinate geocoding for the "Find My Representatives" feature is performed by a third-party geocoding service. When you use this feature, your typed address is sent to that service's servers. Your address is not retained by LegisHawk after the district lookup completes.

3h. Iowa Legislature District Lookup

District lookup queries are sent to the Iowa Legislature's public mapping service (a government resource). No personally identifiable account data is transmitted to this service — only the coordinate derived from your address.

3i. Live Audio Streaming

The "Live Session" feature streams live Iowa Legislature floor session audio from a third-party content delivery service. When you stream live audio, your device connects directly to that service's servers. Your IP address is visible to the streaming service as part of normal network operation. LegisHawk does not record, store, or process your audio listening activity.

4. Data Sharing

We do not sell your personal information. We do not share your data for cross-context behavioral advertising. We may share information in the following limited circumstances:

• Service Providers: We share data with the third-party service providers described in Section 3, which are necessary to operate the App. These providers process data on our behalf and are prohibited from using it for their own purposes.
• Legal Process: We may disclose information if required by law, court order, subpoena, or other valid legal process, or when we reasonably believe disclosure is necessary to protect our rights, prevent fraud, or protect the safety of users or the public.
• Business Transfers: If LegisHawk is involved in a merger, acquisition, asset sale, or dissolution, your information may be transferred as part of that transaction. We will notify you via a prominent notice in the App or by email before your information is transferred and becomes subject to a different privacy policy.
• With Your Consent: For any other purpose with your explicit, affirmative consent.

5. Push Notifications

If you grant notification permission, LegisHawk may send you push notifications related to legislative activity you are tracking, such as updates to bills on your watchlist, committee and floor activity, representative actions, and other legislative events. The specific notification types available are described in the App under Settings > Notifications, where you can enable or disable individual categories or turn off all notifications entirely.

You may also disable notifications at any time through your device's system notification settings. Disabling notifications at the device level prevents delivery but does not immediately delete your push token from our servers. Your token is deleted when you sign out, delete your account, or we receive a permanent delivery failure indicating your token is invalid.

6. Data Retention

We retain your information for as long as your account is active and as needed to provide the Services. Specific retention periods:

• Account profile, watchlist, values profile, notification preferences, notification history, and district settings: Retained until account deletion. Deleted immediately upon account deletion request.
• Push notification tokens: Retained until sign-out, account deletion, or token invalidation by the delivery provider.
• Analytics data: Retained by our analytics provider per their standard retention policy. Opting out in Settings stops further collection immediately.
• Crash reports: Retained by our crash reporting provider for up to 90 days.
• Analytics opt-out preference (on-device): Retained until app uninstall or manual change. Stored in device secure storage, not on our servers.

7. Account Deletion

You may delete your account and all associated data at any time using either of these methods:

• In-App (preferred): Go to Settings > Account > Delete Account. This immediately and permanently deletes your account profile, watchlist, values profile, notification preferences, notification history, district settings, and push tokens from our servers. This action is irreversible.
• By Email: Contact us at privacy@legishawk.app with the subject line "Account Deletion Request." We will complete deletion within 30 days.

After deletion, residual data held by our third-party service providers (such as analytics events and crash reports already transmitted) may persist for the periods described in Section 6, subject to those providers' own data retention policies.

8. Your Privacy Rights

All Users

• Access: Request a summary of the personal information we hold about you.
• Correction: Update inaccurate information through the app's Edit Profile screen or by contacting us.
• Deletion: Delete your account and data as described in Section 7.
• Analytics Opt-Out: Disable analytics collection at any time in Settings > Privacy > Usage Analytics.
• Notification Opt-Out: Disable any or all notification types in Settings > Notifications or your device settings.

California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of personal information we have collected. See Section 7 for deletion methods.
• Right to Correct: You have the right to correct inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell your personal information and do not share it for cross-context behavioral advertising. No opt-out action is required.
• Right to Limit Use of Sensitive Personal Information: We collect two categories of sensitive personal information: (1) your address (transiently, for district lookup only), and (2) your values/interest profile (which may reflect political views). We limit our use of this sensitive information strictly to the purposes disclosed in Sections 1d and 1e.
• Non-Discrimination: We will not discriminate against you for exercising any CCPA rights.

To exercise these rights, contact us at privacy@legishawk.app or use the in-app deletion feature. We will respond to verified requests within 45 days.

Categories of Personal Information Collected (CCPA):

• Identifiers (email address, display name, account user ID, analytics app instance ID)
• Internet or other electronic network activity (screens viewed, features used, crash data, performance data)
• Geolocation information (district numbers derived from address; the address itself is not retained on our servers)
• Inferences drawn from personal information (interest/values profile derived from quiz responses)

Geographic Limitation — European Union and EEA

LegisHawk is designed specifically for Iowa residents and does not knowingly target or market its services to residents of the European Union, the European Economic Area, or the United Kingdom. If you are located in the EU, EEA, or UK, please do not use this App. If we become aware that we have collected data from an EU/EEA/UK resident, we will delete that data promptly.

9. Children's Privacy (COPPA)

LegisHawk is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. Account registration requires users to confirm they are at least 13 years old. If we discover that a child under 13 has created an account, we will promptly delete the account and all associated data. If you believe a child under 13 has registered, please contact us immediately at privacy@legishawk.app.

10. Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• All data transmitted between the App and our servers is encrypted using TLS/HTTPS.
• Authentication credentials are managed by our authentication provider and are never stored in plain text.
• Sensitive preferences (such as analytics opt-out status) are stored in your device's encrypted secure storage, not on our servers.
• Access to our database is restricted by security rules that prevent unauthorized access to user data.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that affects your rights or freedoms, we will notify affected users as required by applicable law.

11. Third-Party Links and External Content

LegisHawk displays links to external websites, including news articles, bill text documents, Iowa Legislature pages, Iowa Ethics Board pages, and other government or media resources. These links open in your device's browser or an in-app browser. We are not responsible for the privacy practices of any third-party website. Please review the privacy policies of any external site before providing personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective Date" at the top of this page. For changes that significantly affect how we handle your data, we will also notify you through the App. Your continued use of the Services after the effective date of the revised policy constitutes your acceptance of the changes.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

LegisHawk
Email: privacy@legishawk.app
Web: legishawk.app

For California privacy requests, please include "California Privacy Request" in the subject line. For account deletion requests, please include "Account Deletion Request."