The short version

• We never ask for your name, email, phone number or address.
• Your vote is secret. Nobody, including the party, can see how you voted.
• No ads, no tracking, no cookies, and we sell nothing.
• The party's record is public on purpose, so anyone can check it. You choose what goes into it.

Your key

When you join, the app makes a key on your phone and shows you 12 words that can bring it back. Your key is how the app knows it's you. It stays on your phone, in the phone's secure storage. It is never sent to us or anyone else.

Finding your grid

To place you in a grid, the app asks for your address or town. The app matches it on your phone. What you type is never sent anywhere. Only your grid and the nearest town are kept.

What goes on the public record

The record is copied by computers ("hosts") that the party and members run. Anyone can read it, and it can't be erased. It holds:

• Your member record: your grid, the nearest town, the date you joined and whether you moved. It's labeled with a code made from your key, not your name.
• Proposals you make, labeled with that same code.
• That you took part in a vote (not how you voted). It's used to apply the rules for missed votes.
• Your secret ballot. It's signed with a separate voting key that can't be linked back to you.

Hosts see the internet address of the phone or computer that connects to them, like any website does. In the Android app, your ballot travels through Tor, which hides your internet address from the host.

Feedback and reports

If you send feedback or report a proposal, we keep your message, the page you sent it from and your email address if you gave one. It's stored privately by the party, never on the public record. We don't store your internet address. To limit spam, we keep a scrambled code made from it that changes every day.

If you sign up to test the app on Google Play, we keep your Google email address and name, if you gave one. We use them only to add you to the test and send you the link, and we delete them after the test.

Services we use

• Cloudflare runs this website, the list of hosts and the feedback inbox. It also tells the app which country you're connecting from, so the app knows whether Tor is likely to work there.
• Google Fonts supplies the lettering on the site and in the app. Your browser downloads it from Google.
• The camera is used only if you choose to scan a QR code to put your key on another phone. Nothing is recorded or sent.

Delete your account

In the app, go to your page, then Settings → Delete my account. This takes you off your grid's member list and removes your key and the app's records from your phone.

• Your past ballots stay in the vote record. They were never linked to you.
• Proposals you made stay, because members voted on them.
• Lost your phone? Install the app, choose "Welcome back", enter your 12 words, then delete. Without your 12 words, nobody can act for your account, including us.
• To have your feedback messages deleted, email admin@citizensparty.ca.

Who can join

Citizens Party is for adults who live in British Columbia. The app isn't meant for children.

Contact

Questions about privacy: admin@citizensparty.ca. During the beta, the party's accounts and servers are held by its founder. If this policy changes, we'll update this page and its date.