Privacy, in plain language.

1. Scope and operator

This policy applies to The Constitution App for iOS and theconstitutionapp.com. The app and website are operated by Joey Towbin. Questions can be sent to joey@towb.in.

2. Information we process

Account identifier

When you choose to use account-backed features, the app creates an anonymous Supabase account and assigns it a unique user identifier. The account flow does not request your email address. If you sign in with Apple and choose to share your name, we store the first name to label your profile; sharing it is optional.

Saved app activity

We may store data connected to that identifier, including bookmarks, notes, reading progress, quiz activity, learning streaks, subscription status, and AI usage needed to apply feature limits.

AI content

Questions, prompts, relevant document context, and generated answers are sent through our Supabase service to OpenRouter and the model provider selected for the request. Ask AI conversations may be saved to your account so you can revisit them. Do not include confidential or highly sensitive personal information in AI prompts.

Purchases

Apple processes App Store payments. RevenueCat processes an app user identifier, product and entitlement information, and purchase status so the app can unlock paid features. We do not receive your full payment-card details.

Website newsletter

If you join the website newsletter, we use double opt-in: after you submit the form we send a single confirmation email, and nothing else is sent until you click the link inside it. Once confirmed, you receive a weekly digest and occasional product updates. Every email includes a one-click unsubscribe link, and a preferences page lets you change what you receive.

We store your email address, signup metadata, and engagement events (deliveries, opens, and link clicks, tracked in aggregate to keep the content useful). We use no advertising trackers and never sell your data. Newsletter data is kept until you unsubscribe or ask us to delete it at joey@towb.in. Newsletter signup is optional and separate from the anonymous app account.

Website analytics

The website uses Vercel Web Analytics to count page views in aggregate. It sets no cookies and does not identify or follow individual visitors.

The website also uses PostHog for aggregate product analytics. It records page views, which links and buttons are clicked (such as App Store buttons), and general device and browser information. When a page breaks, PostHog also receives the error message and the page it happened on so we can fix it. Sessions may be recorded, and anything typed into a form field is masked in those recordings. PostHog is never used to advertise or to follow you across other sites.

Product analytics

The app includes analytics that is on by default and processes named product events (such as paywall views and quiz completions) through PostHog to understand what works and what breaks. Events use the anonymous account identifier, never your name or email. You can turn analytics off any time in Settings and the app stops sending new events. It does not record your screen, capture every tap, or follow you across other apps.

Technical records

Our service providers may process routine network and security information—such as IP address, request time, device or browser details, and error information—to deliver, protect, and troubleshoot their services.

3. How we use information

• Provide, secure, and troubleshoot the app and website.
• Sync saved activity and restore it on your account.
• Generate AI responses and enforce usage limits.
• Verify subscription entitlements and restore purchases.
• Send requested newsletter messages.
• Comply with legal obligations and prevent abuse.

4. When information is shared

We share information only as needed with service providers that perform work for the app:

• Supabase for authentication, database, storage, and server functions.
• OpenRouter and selected AI model providers to process AI requests.
• RevenueCat to manage subscription entitlements.
• PostHog for the app analytics described above (on by default, opt-out in Settings) and the website's aggregate analytics.
• ElevenLabs to host and deliver generated audio content.
• Apple to distribute the app, process purchases, and deliver platform services.
• Vercel to host and deliver the public website and count aggregate page views.

Those providers process information under their own terms and privacy policies. We may also disclose information when required by law, to protect users or the service, or as part of a business transfer with appropriate safeguards. We do not sell personal information or share it for cross-context behavioral advertising.

5. Retention and account deletion

Account-backed data is generally retained while the account exists. In the app, open Settings → Account → Delete Account to permanently delete the Supabase authentication account and associated synced profile, bookmarks, reading progress, AI history and usage, quiz activity, and related account records.

Account deletion cannot be undone. It does not cancel an App Store subscription or erase records Apple must maintain; subscriptions are managed through your Apple ID. Service providers may retain limited security logs, backups, transaction records, or other information when required by law or legitimate operational needs.

To unsubscribe from the website newsletter or request help with a privacy right, email joey@towb.in.

6. Data stored on your device

The app stores preferences and may cache documents, media, and other content on your device to improve performance and availability. You can remove local app data by deleting the app. Some preferences shared with the app’s widget may remain until the app and its data are removed from the device.

7. Children

The Constitution App is a general-audience educational service and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. A parent or guardian who believes a child submitted personal information should contact us so we can review and delete it where appropriate.

8. Security and international processing

We use reasonable technical and organizational safeguards, including encrypted network connections and access controls. No electronic service can guarantee absolute security. Our providers may process information in the United States and other locations where they operate.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing. You can delete the app account in Settings. For other requests, email joey@towb.in. We may need to verify a request before completing it.

10. Policy changes

We may update this policy as the product or legal requirements change. We will post the revised policy here with a new effective date and provide additional notice when a change is material.

11. Contact

Joey Towbin
Operator, The Constitution App
joey@towb.in