Privacy Policy

Effective date: October 29, 2026

Last updated: October 29, 2026

Replaces: the first Privacy Policy at https://soapboxrepublic.com/privacy (effective October 2, 2026), which covered only the website and the support mailbox.

1. The short version

SoapBox Republic is for adults 18 and older only.
You sign up with an email address and password, or with Google, Apple, or Facebook. We may ask you to confirm your email address before you can vote, post, or create a poll.
Poll votes reveal political views. We treat them as sensitive personal information, and we ask your permission before your first vote. The optional "About you" questions need a second, separate permission.
No one else ever sees how you voted, not other members, not poll creators, not buyers. We show results only as group totals, only after a poll has 100 votes, and only for groups of at least 25.
Community polls: when they are available, verified members can write a poll. A person at SoapBox Republic reviews every one before it goes public. Approved polls are labeled "Community poll · reviewed by SoapBox Republic." Your name is not shown on a poll you create, but we know you wrote it.
Points and badges: when available, you can earn private civic participation points when your Community poll is approved and real members answer it. Your points are never shown publicly, and your badges are private unless you choose to show them. SoapBox Republic never ranks people or political views. Points are given for activity only, never for giving us information about yourself, and never for how anyone answers.
We never sell or share your personal information, your individual answers or votes, or your profile. There are no ads and no advertising trackers.
We may sell or license aggregated, de-identified poll results and reports: group totals that meet our minimums (100 overall, 25 per group), never at ZIP-code level, and never anything that identifies you. Buyers must sign a contract promising not to try to identify anyone (Section 9).
On Android, we use Google Play's integrity check to spot fake or tampered apps. At launch it only records a pass or fail result. It never blocks you.
We keep your data while your account exists. When you delete your account, we delete your account data (Section 13). Community polls you created stay up without your name, because other members voted on them.
You can see, correct, or delete your data, and withdraw consent, at support@soapboxrepublic.com. We give these rights to every user, wherever you live.

2. Who we are

SoapBox Republic is a United States civic-participation app and website. It is operated by Brilliant Technica LLC, a California limited liability company, doing business as SoapBox Republic, 150 4th Street #534A, Oakland, CA 94607. In this policy, "SoapBox Republic," "we," "us," and "our" mean that operator.

SoapBox Republic is not affiliated with any government, political party, candidate, campaign, or election office.

3. What this policy covers

the SoapBox Republic app for iPhone (launching November 1, 2026) and for Android, once it is released on Google Play;
our website at https://soapboxrepublic.com, our app servers at api.soapboxrepublic.com, and public poll share pages;
emails you send us, and emails we send you (for example, email confirmation and password reset).

It does not cover other companies' websites or apps, even when we link to them or let you sign in with them (for example, Google, Apple, Facebook, or an official election website). They have their own policies.

4. Information we collect

We collect only what each feature needs. "Required" means you can't use the app without it. "Optional" means you can use the app without it.

What	Examples	Where it comes from	Required or optional	Why we collect it
Account information	Email address; password (stored only as a one-way hash); account number; the date you joined; the date you confirmed your email	You, when you sign up	Required	Create and secure your account; sign you in; contact you about your account
Sign-in with Google, Apple, or Facebook	Which provider you used; the provider's ID number for you; the email address the provider gives us (with Apple, this can be a private "Hide My Email" relay address) and whether the provider says it is verified; when you linked it. For Apple only, a token we need so we can disconnect Sign in with Apple when you delete your account. The provider may also offer your name. We use it only if you tap "Use," and we don't store it on our servers.	The provider, when you choose to sign in with it	Optional (you can use email and password instead)	Sign you in; link the sign-in to one account; confirm your email
Age check	Your birth month and year, used once to confirm you are 18 or older. We don't store them.	You, at sign-up	Required	Keep the service 18+ only
Email confirmation and password reset	One-time links or codes. We store only a scrambled (hashed) copy of each one, and each expires after 30 minutes	Created by us when you ask	May be required before you vote, post, or create polls	Prove you control your email; one verified person, one vote
Poll votes	Which choice you picked in each poll, and when	You, when you vote	Optional (you never have to vote)	Count results; enforce one vote per account; show you "You voted"
ZIP code given with a vote	An optional 5-digit ZIP code. From it we work out your two-letter state.	You, when you vote	Optional	Place your vote in a state for state-level breakdowns. The 5-digit ZIP never leaves our servers and is never published.
Withdrawal records	If you withdraw your poll answers: which poll and which account, with no record of your choice	Created when you withdraw	Automatic	Stop someone from withdrawing and re-voting to change results
Election-style poll answers	Which candidate or ballot-measure position you picked in a SoapBox Republic-written election poll	You, when you vote	Optional	Same as poll votes. They do not feed your profile.
Profile quiz: values answers, and your profile	Your answers to the values questions, and the starting civic profile we calculate from them (for example, which issues you care about and where you sit on a few neutral scales)	You; calculated by us	Optional	Show you your own profile. It is private to you.
Profile quiz: "About you" answers	Political ideology; party; age range; sex; household income range; race/ethnicity; education; ZIP code. Each question is optional and has "Prefer not to say."	You, only after you give separate permission	Optional	Show you your own profile; include you, without your name, in group breakdowns that meet the minimums in Section 8. When you vote, we save a copy of your answer groups with that vote, so later edits don't rewrite a closed poll.
Community polls you create or suggest (when available)	Your question, choices, topic, area (local, state, or U.S.), optional "why this matters" note, how long it runs, and the automatic wording-check results; its status (in review, needs changes, not approved, live, closed, removed); the link to your account; and reviewers' decisions, reason codes, and notes to you	You; our reviewers	Optional	Review polls before they go public; run the poll; show you "My polls"; moderation and safety
Poll reports and "Hide polls from this member"	Which poll you reported, the reason, an optional note (up to 500 characters), and the report's status. If you hide a member's polls, we save that block.	You	Optional	Moderation and safety; hide polls you don't want to see
Posts, post reports, and blocks	Text you post on topics; reports you file about posts; authors you block	You	Optional	Run the discussion feature; moderation and safety
Civic participation points and badges (when available)	A private record of each point award or reversal: amount, reason (for example, "poll approved"), which poll it came from, and when. The badges you have earned, and whether you chose to show them (off unless you turn it on).	Created by us when a milestone happens	Automatic if you create polls	Show you your points and badges; prevent point-farming
Fairness checks	Whether accounts that answered a creator's polls count as "real voters" (verified, at least 24 hours old, not the creator, not withdrawn, no failed integrity check), and internal flags when groups of accounts keep answering each other's polls	Calculated by us from votes and accounts. We never use which choice anyone picked.	Automatic	Stop fake accounts and vote rings from earning points
Device integrity results (Android only)	For votes, sign-ups, and posts (and other actions if we add the check to them): the action, the account, pass/fail/unverified/missing, a pass or fail for each of six checks (right app, right request, recent, app recognized by Google Play, device integrity, licensed install), Google's device verdict labels, any error code, and the time. We also save the overall outcome with that vote or post. We never store the token itself, your IP address, a device ID, or your email.	Google Play on your device, then checked by our server	Automatic on Android	Spot fake or tampered apps and devices. At launch the result is only recorded. It never blocks anyone.
Consent records	Which permission you gave or withdrew (poll voting; About you), which version of the wording, and when	You, through your choices	Created when you choose	Prove we asked, and respect your choice
Support messages	Your email address and anything you write to us	You, when you email us	Optional	Answer you; handle privacy and deletion requests
Security and server logs	IP address, time, request path, and browser or app type, kept by our hosting providers. Our servers also use your IP address briefly in memory to limit how fast requests can be sent. We don't save it in our database.	Automatically, when your device connects	Automatic	Keep the service running and secure; stop abuse
Tips (website only)	If you choose to tip on our support page, Stripe collects your payment details and email. We receive the email and amount, not your full card number.	You, through Stripe	Optional	Process the tip; keep required records

What we do not collect: your name (unless you write it in a post, a poll, or an email); your street address; precise GPS location (the app does not ask for location permission); contacts or friends lists; photos; birthdays or profile photos from sign-in providers; microphone recordings; advertising IDs; or data from data brokers. The app contains no advertising or analytics software. If you use Facebook Login, we keep Facebook's automatic app-event logging and advertiser-ID collection turned off.

5. Sensitive personal information

We treat the following as sensitive personal information, whether or not a particular law requires it:

political opinions: poll votes, election-style poll answers, values-quiz answers and the profile built from them, political ideology, and party;
Community polls you create, because the question you choose to ask can hint at your views;
race or ethnicity (an optional About-you question);
your account login (email and password, or sign-in provider).

We also handle ZIP code carefully. It is not precise location, but in a small ZIP code it can narrow down who you are. That is why we use it only to work out your state and never publish results by ZIP code.

Our rules for sensitive personal information:

Permission first. We record your permission before your first vote. The About-you questions need a second, separate permission, and every one of them is optional with "Prefer not to say." Saying no never stops you from using the rest of the app.
Limited uses. We use it only to (a) count poll results, (b) produce group totals that meet our minimums, (c) show you your own profile, and (d) keep the service secure and prevent fake votes. We never use it for advertising, to decide what you can see or do, or to contact you about politics. Points and badges never depend on it.
Never shown individually. No other member, poll creator, partner, or buyer sees your individual answers. Our staff tools show vote counts only. They have no screen for reading any member's votes or About-you answers.
You can delete it. You can withdraw all your poll answers, delete your About-you answers, or delete all your quiz answers, in Settings at any time (Section 8).
Never sold or shared. Only de-identified group totals built from many people's answers may be sold or licensed (Section 9).

6. How we use your information

Run the service: accounts and sign-in, polls and results, the profile quiz and your profile, Community polls, posts, points and badges, and Settings.
Confirm accounts: confirm your email before you vote, post, or create polls, and link Google, Apple, or Facebook sign-in to one account. We never merge accounts just because the emails match. You must sign in once with your original method to link them.
Keep polls fair: one vote per account, a verified account, account-age and quota limits, rate limits, the Android integrity check, and checks for vote rings and point-farming.
Review Community polls: run an automatic wording check, then have a person approve, reject, or ask for changes before anything goes public.
Publish results: group totals only, as described in Section 8 and the Poll Terms.
De-identified results and reports: create aggregated, de-identified results and reports that we may publish, sell, or license (Section 9). This is how SoapBox Republic pays for itself without ads.
Safety and moderation: review reported posts and polls, enforce our Terms, and respond to threats.
Support, security, and legal: answer you, protect accounts and systems, and comply with valid legal process.

We do not use your information for advertising, we do not build marketing profiles, and we do not make automated decisions with legal or similarly significant effects on you. The automatic wording check only gives advice: a person makes every approval decision. If we want to use your information for a new purpose that is materially different from those above, we will ask your permission first.

7. Community polls, points, and badges

This section applies when Community polls, points, and badges are available in your app. If they aren't available yet, you can still suggest a poll. A suggestion is reviewed, and if we choose it, SoapBox Republic publishes it under its own name. Suggestions don't earn points.

7.1 If you create a Community poll

Who can create one: members with a confirmed email, an account at least 24 hours old, and at least 3 votes cast.
Review before publishing: nothing you write is public until a reviewer (the owner or a named administrator) approves it. Reviewers see your poll, the wording-check results, and your record as counts only (approved, rejected, reports). They don't silently edit your words. They approve it, reject it with a reason, or ask you for changes. Our target is a decision within about 24 hours.
Your name is not shown. Approved polls are labeled "Community poll · reviewed by SoapBox Republic", with no name or handle. Your account stays linked to the poll so we can run "My polls," moderate it, and award points. Reviewers and administrators can see who created it.
Once approved, your poll's text is public. That includes the question, the choices, and your "why this matters" note. Don't put personal information in a poll. Our wording check blocks phone numbers, email addresses, street addresses, and links, and reviewers catch the rest.
You can vote on your own poll. Your vote counts once in the results, like anyone else's, but never toward your points.
Reports: any member can report a poll or hide polls from its creator. Creators are never told who reported them. A live poll is hidden automatically once 3 different members report it, until a reviewer looks at it.
If you delete your account: polls you created that are live or closed stay up, because other members voted on them, but we remove the link to you (the poll's creator field is cleared). Polls still in review or waiting for your changes are deleted with your account. Rejected polls are deleted 30 days after the rejection, or sooner if you delete your account. If a reviewer asks you for changes and you don't resubmit within 30 days, the poll is deleted.

7.2 Civic participation points and badges (when available)

How you earn them: +5 points when a reviewer approves your poll, +10 when it reaches 25 real voters, and +10 when it reaches 100 real voters (when results unlock). Nothing after that. Daily and weekly caps apply. Points are reversed if a poll is removed for breaking the rules or a vote ring is confirmed.
Never for your information, and never for how anyone answers. Points are given only for activity (your poll being approved and reaching real voters). They are never given for answering the profile quiz, sharing About-you or other personal information, granting a permission, or for which choice anyone picks, the topic, or how divisive a poll is.
Points are private: only you can see your points total and history. SoapBox Republic never ranks people or political views. You can see your own private participation points; anything public shows badges only, and only if you choose. We never show point totals publicly, on poll cards, or in results, and we have no leaderboards or rankings. Points never change how much any vote counts, and they never feed your political profile.
Badges (for example, "First poll approved" or "Clean record") are private by default. They appear publicly only if you turn on Show my badges in Settings → Privacy, and you can turn it off at any time. A badge shows that you create polls. It never shows which polls.
No cash value. Points can't be spent, redeemed, transferred, or exchanged for money, prizes, or perks (see the Terms of Service).
Why this is not a "financial incentive": California law requires a "notice of financial incentive" when a business offers something of value in exchange for personal information. Points are earned only for creating approved polls that others answer, not for giving us personal information, so this program is not a financial incentive. If we ever offer anything of value tied to personal information, we will give you a notice of financial incentive first and ask you to opt in, and you can withdraw at any time.
Your rights: your points history and badges are personal information. They are included when you ask for a copy of your data, you can ask us to correct them, and they are deleted with your account.

7.3 Sign-in, email confirmation, and device checks

Google, Apple, and Facebook: when you choose one, that company confirms who you are and tells us the details in Section 4. We check the provider's token once on our server and don't keep it. The one exception is a token from Apple, which we keep only so we can disconnect your Apple sign-in. You can also remove SoapBox Republic at any time in your Apple ID settings under Sign in with Apple. Those companies also know you used their sign-in with our app, under their own privacy policies. We never receive your friends list, photos, birthday, or location from them.
Email confirmation: we email you a one-time link or code, which expires after 30 minutes. Sign-ins from Google and Apple arrive already verified. A Facebook email counts as verified only when Facebook says so.
Google Play integrity check (Android): before a vote, a sign-up, or a post, the Android app asks Google Play to confirm that the app is the genuine one from Google Play and is running on a genuine device. Google Play processes information about the app and device for this under Google's terms. We receive and store only the outcome described in Section 4. At launch this is log-only: a failed check is recorded and never blocks you, and failed-check counts appear only to our administrators. If we ever start blocking failed checks, we will update this policy first. On iPhone there is no equivalent check at launch. We record only that none was sent.

8. How group results work, and how we prevent re-identification

Like professional pollsters, we report what groups said, not what any one person said.

Your vote is stored with your account so we can enforce one vote per account, show "You voted," and let you withdraw it.
Results are counted from votes, not names. Published results never contain account numbers, emails, or any individual record.
Minimum of 100 votes. Until a poll has 100 votes, we show only "37 of 100" style progress, with no split. A poll that closes with fewer than 100 answers never shows results.
Minimum of 25 per group. A group breakdown is shown only if at least 25 people in that group voted. At launch, the only breakdown is by state.
No "subtraction" tricks. We show how many groups and votes were held back, so no one can subtract the visible groups from the total to work out a small group.
Day-by-day table: a day's split is hidden until that day has 25 answers. Days are counted in Pacific time.
No ZIP-code results. ZIP code is used only to work out your state. We never publish results by ZIP code.
One trait at a time. We publish breakdowns by a single trait only (for example, by state). We don't publish breakdowns that combine several traits. If we ever do, every group in them will need at least 25 people, and we will update this policy first.
Honest labels: every result says "Opinion poll — not a scientific sample," shows the number of votes, and says results are unweighted. Community polls are labeled "Community poll · reviewed by SoapBox Republic".
No individual-level data leaves SoapBox Republic. We do not release raw data, respondent files, or downloadable datasets of individual answers.
Results change when people leave. Results are counted from the votes that exist right now. If someone withdraws their answers or deletes their account, their votes come out of every poll's totals, including closed polls. Results that were already shared or licensed stay as they were released.

Results that meet these rules are de-identified aggregate information: they cannot reasonably be used to identify you or to infer anything about you personally.

9. Selling or licensing de-identified results and reports

SoapBox Republic may sell or license aggregated, de-identified poll results and reports to outside organizations, such as news outlets, researchers, nonprofits, or businesses. Here is exactly what that means:

What we may sell or license: counts and percentages of how groups answered (for example, "54% of voters aged 30–44 in California chose B"), trends over time, and written reports based on them, each with its methods note.
What we never sell, license, or share: personal information; any individual's answers, votes, or quiz responses; profiles; who created a Community poll; points or badges; email addresses or account IDs; respondent-level files or "microdata"; or anything that lets someone contact or target you.
Same minimums as public results: at least 100 votes overall and at least 25 people in every group or cell; no ZIP-code-level releases; no combination of traits unless every cell meets the minimum; the same suppression and "no subtraction" rules as Section 8. A buyer cannot get a finer breakdown than the rules allow by paying for it.
Our public commitment: we keep and use these results only in de-identified form, and we will not attempt to re-identify anyone from them, except to test that our de-identification works.
Technical measures: results are produced from counts only, small groups are suppressed, combinations that could single someone out are blocked, and releases are checked before they leave SoapBox Republic.
Contracts: every buyer or licensee must agree in writing (1) not to try to re-identify any person or household; (2) not to combine the results with other data to do so; (3) not to use them to target, contact, or make decisions about any individual; (4) to pass the same terms to anyone they share the results with; and (5) to tell us if they become aware of a re-identification. We may end the license if these terms are broken.
Your choices: withdrawing your About-you permission, or deleting those answers, removes your demographic answers from every breakdown, including licensed ones. Withdrawing your poll answers or deleting your account removes your votes from results produced afterward. Results already released can't be recalled, but they contain no personal information.
Why this is not a "sale" of personal information: under California law, information that meets these de-identification requirements is not personal information. Selling it is therefore not a "sale" of personal information, and our promise that we never sell personal information stays true.

Licensed results may include Community polls. A report can quote the poll question and choices, but it never names or identifies the member who wrote it (see the Terms of Service license). Buyers may republish licensed results and reports, but only as aggregates, with attribution to SoapBox Republic, the "Opinion poll — not a scientific sample" label, and the methods note.

10. Permissions (consent), and withdrawing them

Before your first vote, we show a consent screen explaining that votes are political opinions, how we use them, that answers are final, and that only group totals are published. We record your permission and which version of the wording you agreed to. If we change that wording in a meaningful way, we ask again.
Before any About-you question, we ask for a second, separate permission. Every About-you question is optional and has "Prefer not to say."
Withdrawing poll permission (Settings → Privacy) stops you voting from then on. It does not erase past votes by itself. To remove them, use Withdraw all my poll answers.
Withdrawing About-you permission deletes your About-you answers and clears them from every vote you cast. Your votes still count once in each poll's overall total.
Withdrawing is as easy as giving permission, and it never costs you anything or lowers your points.

11. Who we disclose information to

We do not sell personal information. We do not share personal information for cross-context behavioral (targeted) advertising. We have not done either in the past 12 months. The only thing we sell or license is de-identified aggregate results and reports (Section 9), which are not personal information.

We disclose personal information only in these cases:

Service providers that run parts of the service for us, under contracts or terms that limit them to that service. Current providers:

Provider	What it does for us	What data it handles
Render (United States)	Hosts our app servers and database	All account and app data, and server logs
Cloudflare	Hosts and protects our website and domain	Website request logs (IP address, browser type, time)
Google	Google Sign-In (if you choose it); the Google Play integrity check (Android); Google Play app distribution	Sign-in details you choose to share; app and device integrity information processed by Google Play
Apple	Sign in with Apple (if you choose it); App Store distribution	Sign-in details you choose to share
Meta (Facebook)	Facebook Login (if you choose it)	Sign-in details you choose to share. App events and advertiser ID are turned off.
Our email providers	Host our support mailbox, and deliver email confirmation and password-reset messages	Your email address and the messages exchanged
Stripe	Processes optional website tips	Payment details and email you give Stripe

We will update this list before any new provider receives personal information.
Legal reasons: if we believe in good faith that the law requires it (for example, a valid subpoena or court order), or to protect someone's safety. We will notify you of a legal request for your data unless the law or a court order prohibits it, or in an emergency involving danger to someone.
Business transfer: if SoapBox Republic is sold or merged, your information may be transferred, but only under this policy's promises. We will notify you before it becomes subject to a different policy.
At your direction: for example, when you share a poll link.

What other people can see: posts are public, and anyone can read them without signing in. Approved Community polls are public, without the creator's name. Badges are private unless you choose to show them. Your votes, About-you answers, profile, points, reports, and blocks are never visible to other members.

12. Cookies and similar technology

Our website does not use advertising or analytics cookies. The app keeps a secure sign-in cookie so you stay signed in. If you use Google, Apple, or Facebook sign-in, that company's sign-in screen may use its own cookies under its own policy. We treat a Global Privacy Control (GPC) signal from your browser as a request to opt out of sale and sharing, although we do neither. If we ever add analytics or crash reporting, we will update this section first.

13. How long we keep information, and deleting your account

Information	How long
Account information, linked sign-ins, quiz answers and profile, consent records, points, badges, and your badge setting	While your account exists. Deleted when you delete your account. A withdrawn permission stays on record, with the date you withdrew it, until then.
Poll votes	While your account exists, unless you withdraw them first. Withdrawn votes are deleted right away.
Withdrawal records (poll and account only, no choice)	Until you delete your account
Posts	Deleted when you delete your account. We do not keep them up as a public record. Copies other people made or reshared can remain outside our control (see below).
Community polls you created that went live	Kept after they close so their results stay available. If you delete your account, they stay up without the link to you, and we take them down within 12 months after the deletion. You can ask us to take down a Community poll you created sooner.
Community polls that were rejected	Deleted 30 days after the rejection, or sooner if you delete your account
Community polls still in review or waiting for your changes	Until they are decided. A poll waiting for your changes is deleted if you don't resubmit within 30 days. Both are deleted if you delete your account.
Poll reviews (decisions, reason codes, and reviewer notes about polls you created)	Private. Kept up to 2 years after the decision, or until you delete your account, whichever comes first. A live poll kept after you delete your account keeps only its public status, not the review notes.
Poll reports you filed	Private. Kept up to 2 years after you file them, or until you delete your account, whichever comes first. This is different from post reports (below): when you delete your account, poll reports you filed are deleted, while post reports you filed are kept with the link to your account removed.
Fairness-check flags (possible vote rings)	Private, internal. Deleted 90 days after the check is resolved, or when the account is deleted
Device integrity results (Android)	Deleted when you delete your account. Integrity challenge codes are stored only as a hash and expire after 2 minutes.
Email confirmation and password-reset codes	Stored only as a hash. They expire after 30 minutes and are deleted with your account.
Deleted data in our active systems	Deleting your account in the app takes effect right away. Any leftover copies in our active systems (outside backups) are purged within 30 days.
Backups	Deleted data can remain in our hosting provider's backups for up to 7 days, then it is overwritten. We never restore deleted accounts from backups.
Server and security logs	Up to about 30 days
Support emails	About 90 days, then erased, unless a real legal hold, valid legal process, or a live investigation requires keeping a specific message
Record that an account was deleted	Your normalized email address and the deletion date, so it can't register again. No set end date today.
Post reports (filed by you, or about your posts)	Reports about your posts keep a private safety snapshot: the post ID, your former account number, and up to 280 characters of the post. Private, and never shown in the app or to the public. Kept while the review is open, then at least 12 months and no more than 24 months after it closes, unless a real legal hold or valid legal process requires keeping a specific report longer. Post reports you filed are kept with the link to your account removed when you delete your account. You can ask us to delete closed reports we no longer need.
Records we must keep by law (for example, tip payment records)	As long as the law requires
Published or licensed group totals	Kept, because they contain no personal information

Deleting your account. The main way is in the app: Settings → Delete account. If you can't use the app, email support@soapboxrepublic.com from the email address on your account. We confirm the request with that address before deleting anything, reply within 1–3 business days, and delete within 3 business days after you confirm. If you signed up with Apple's Hide My Email, or chose not to share your email, write to us from the address you use with that provider, including an Apple relay address. We will open a support case to verify the account is yours before deleting anything.

What account deletion removes right away: your account; your posts; your blocks, and other members' blocks of you; your poll votes and withdrawal records; your quiz answers and profile; your consent records; your Android integrity results; any linked sign-ins and one-time codes; your points, badges, and badge setting; Community polls you submitted that were never published; and the poll reports you filed. Any leftover copies in our active systems are purged within 30 days. If you used Sign in with Apple, you can also remove SoapBox Republic in your Apple ID settings. Your votes come out of every poll's totals.

What stays, privately or without your name: Community polls you created that went live (unlinked from you, and taken down within 12 months, Section 7.1); post reports you filed (with your account link removed) and the private safety snapshots in post reports about your posts, for up to 24 months after each report closes; the deleted-email record; backups until they are overwritten; and records the law requires.

What we can't delete. Posts and approved polls can be read publicly, so copies may exist that we don't control: screenshots, text that people copied, quoted, or reshared elsewhere, and pages saved by search engines or web archives. Deleting your account doesn't remove those copies. If someone quoted your post in their own SoapBox Republic post, you can report it, or email us, and we will review it under our rules.

14. Your privacy rights

California law (the CCPA, as amended by the CPRA) and the laws of several other states give residents rights over their personal information. We give these rights to all SoapBox Republic users, wherever they live.

Right to know and access: what personal information we have about you, where it came from, why we use it, and who we disclose it to, plus a portable copy. That includes your votes, quiz answers and profile, consent records, linked sign-ins, Community polls you created and their review history, reports you filed, and your points history and badges.
Right to delete: your account and its data (Section 13), or specific items: withdraw all your poll answers, delete your About-you answers, delete all your quiz answers, or ask us to remove a post or a poll you created.
Right to correct inaccurate information, including your points history if an award or reversal is wrong. You can change quiz answers yourself.
Right to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of, but you may still ask, and we honor GPC signals. De-identified aggregate results are not personal information. To keep your demographic answers out of them, withdraw your About-you permission or delete those answers.
Right to limit the use of sensitive personal information. We use and disclose sensitive personal information only for the purposes California law permits without offering a right to limit: providing the service you asked for, security and integrity, preventing fraud and fake votes, short-term uses, and the other permitted purposes in Section 5. We never use it to infer things about you beyond those purposes. Because of that, there is no separate "limit" request to make. You can withdraw any permission, and delete your poll answers, your About-you answers, or your quiz answers, at any time in Settings → Privacy.
Right to withdraw consent at any time (Section 10).
Right to appeal. If we deny your request, reply to our decision with "Appeal" in the subject line. We will answer within 45 days and explain the result. If you live in a state that gives you this right, you can also contact your state attorney general.
Right to non-discrimination. We will never deny you service, charge you differently, take away points or badges, or give you a worse experience because you used a privacy right.

How to make a request: in the app, Settings → Delete account; for a copy of your data or any other request, email us and we will send it within 45 days; by email, support@soapboxrepublic.com, with the subject "Privacy request"; or by mail, SoapBox Republic, 150 4th Street #534A, Oakland, CA 94607.

Verifying your identity: we confirm a request comes from you, usually because you send it from the email address on your account or make it while signed in. For a copy of specific information, we may also send a one-time code to your account email. We will not ask for government ID for an ordinary request, and we use what you give us for verification only for that purpose.

Authorized agents: someone else can make a request for you with your signed, written permission. We may ask you to confirm your identity directly with us.

Response times: we confirm we received a request within 10 business days and respond within 45 calendar days. If we need more time, we will tell you why, and we may take up to 45 more days. We act on opt-out or limit requests within 15 business days. Requests are free.

Exceptions: we may keep information if the law requires it, to complete something you asked for, to protect security, or to defend legal claims. If we keep something, we will tell you what and why.

15. Adults only (18+)

SoapBox Republic is only for people 18 and older. Sign-up asks for your birth month and year and blocks anyone under 18. We may add age signals from Apple or Google Play later. We do not knowingly collect personal information from anyone under 18. If we learn that someone under 18 has an account, we will close it and delete their data. If you believe a minor has an account, email support@soapboxrepublic.com.

16. Security

All connections between the app or website and our servers are encrypted in transit (HTTPS/TLS).
Passwords, email-confirmation codes, reset codes, and integrity challenges are stored only as one-way hashes.
Sign-in provider tokens are checked on our server and not kept, except the Apple token we keep only so we can disconnect Sign in with Apple.
Staff tools are limited to the owner and named administrators. They show vote counts only and have no way to read any member's votes or About-you answers.
The Android app does not copy your data into your phone's cloud backup.

No system is perfectly secure. If a breach affects your personal information, we will notify you and any required authorities as the law requires.

17. Where your information is stored

We store and process information in the United States. SoapBox Republic is intended for people in the United States.

18. Changes to this policy

When we change this policy, we will update the "Last updated" date and keep past versions at https://soapboxrepublic.com/privacy/history. If a change is material, we will tell you in the app before it takes effect. If a change would let us use sensitive information you already gave us in a new way, or would tie anything of value to your personal information, we will ask your permission first.

19. Contact

Privacy questions, requests, and support: support@soapboxrepublic.com

Mail: SoapBox Republic, 150 4th Street #534A, Oakland, CA 94607

Related pages: Terms of Service, https://soapboxrepublic.com/terms · Community Guidelines, https://soapboxrepublic.com/guidelines · Delete your account, https://soapboxrepublic.com/delete-account