CanvassCommand Privacy Policy
Last updated: October 24, 2026
CanvassCommand is a field-organizing tool used by political campaigns and advocacy organizations to run canvassing shifts. This policy explains what the CanvassCommand mobile app collects from canvassers, why, who can see it, and the choices you have. It also explains how we handle information about voters that campaigns bring into CanvassCommand or collect at the door (see Information about voters). The rules for using CanvassCommand are in our Terms of Use.
You get a CanvassCommand account from the campaign or organization you canvass for (your "organizer"). The app is for authorized campaign staff and volunteers only. It is not meant for the general public or for children under 13.
Location in short: the app records your location from the moment you clock in until you clock out, including when the app is closed or not in use, so your organizer can see where field work happened and verify door knocks. While tracking is on, your phone shows it: a persistent notification on Android, and the location indicator on iPhone. No location is collected while you are clocked out.
Information we collect
| What | When and how |
|---|---|
| Name and username | Entered by your organizer when they create your account. You sign in with the username. |
| Password | Set by your organizer and used to sign you in. We do not collect your email address. The system derives an internal sign-in identifier from your username, and nothing is ever sent to it. |
| Precise location | While you are clocked in, the app records location points regularly as you move: latitude, longitude, accuracy and time. This continues in the background when the app is closed or not in use, until you clock out. |
| Shift times | Clock-in, clock-out and break start and end times, and the hours that result. |
| Field activity | The counts you submit (for example, signatures per hour), any notes you add, and the rejections you log, including the reason you type. |
| Push notification token | A device token that lets us send notifications to your phone, collected only if you allow notifications. |
| Messages to you | Messages your organizer sends you and the reminders the app sends you, with the time each was sent and when you opened it. |
| App activity | While you are signed in, which buttons you tap and screens you open, your answers to permission requests (location, microphone, notifications, battery), when the app moves to the foreground or background, and errors the app shows. Never what you type, your password, your notes or anything a voter says. Kept for 90 days, then deleted. |
| Recorded voter conversations | Only if your campaign turns recording on. While you are clocked in and not on break, the app records your conversations with voters through the microphone, either when you tap Start contact or, if your campaign chooses, automatically whenever it hears a conversation. Each recording is uploaded in short pieces, turned into a written transcript, and kept with the time and the last known location of your phone. The microphone is never used while you are clocked out or on break. |
The app does not access your contacts, photos, camera or files, uses the microphone only as described above, and it does not use advertising identifiers or third-party analytics or advertising tools.
How we use it
- Running your shift: tracking your hours and breaks, and recording the counts and notes you submit.
- Location: showing your organizer where canvassing took place (including a live map of field activity), and checking recorded door knocks against where you were at the time. Location is used for these campaign-organizing purposes only.
- Voter conversations: confirming whether a voter registered or is already registered, and noting how the voter feels about the campaign and which issues they raised. You must ask the voter for permission to record at the start of the conversation. An automated review, which uses Anthropic's Claude, reads each transcript to check that the voter agreed, whether the conversation shows they are registered, and where the voter stands; depending on your campaign's setting, a campaign manager may confirm the result. If a transcript does not show the voter agreeing to be recorded, the recording, its transcript and anything noted about the voter's views are deleted, and only the time and place of the conversation is kept.
- Notifications: reminding you to submit your hourly count when an hour passes without one, telling you if you were clocked out automatically after two hours without a submission, and delivering messages from your organizer.
- Support: using the app activity log to find out what happened when something goes wrong on a shift, for example a clock-in that did not register.
- Account management: signing you in and letting your organizer activate, deactivate or reset your account.
We do not sell or rent your personal information, and we do not use it for advertising.
Who can see it
- Your campaign: authorized organizers and staff of the campaign or organization that gave you your account can see the information above for their own canvassers.
- Service providers: we use a small number of providers to run the app, who process data only on our behalf: Supabase (database and hosting), Deepgram (turning recordings into text), Anthropic (reviewing transcripts) Expo, Apple and Google (delivering push notifications) and Resend (sending email to campaign staff, such as daily reports and account invitations). Push notifications carry no message content: they only say that a new message or reminder is waiting, plus an identifier for it. The app then downloads the text directly from our database over an encrypted connection, so Expo, Apple and Google never see what your organizer wrote. They do handle your push notification token and see when a notification is sent to your phone.
- Legal reasons: we may disclose information if required by law, or to protect the rights and safety of people using the service.
We do not share your information with anyone else.
Information about voters
Campaigns use CanvassCommand to contact voters, so it holds information about people who are not CanvassCommand users.
- What: voter file records a campaign loads or syncs from a licensed voter file, such as a state party's VoteBuilder (VAN), which can include names, addresses, phone numbers, dates of birth, voting history and survey responses; and what canvassers record at the door, such as contact results, survey answers, notes and, if the campaign turns recording on, conversation recordings and transcripts.
- Who controls it: voter file data belongs to the organization that licensed it to the campaign (for example, a state Democratic party or the DNC) and is held by the campaign under that license. We process it only on the campaign's behalf, to provide CanvassCommand. We claim no ownership of it.
- How it is used: only for that campaign's voter contact and organizing, within the campaign's license. Never for advertising, never for any commercial purpose, and never to train AI models, by us or by our service providers.
- Who can see it: only the campaign that holds it, through the people it gives access to, and the service providers listed above. Each campaign's data is kept separate from every other campaign's, including campaigns in the same race. We never sell voter data or share it with another campaign, candidate or organization.
- How long we keep it: only while the campaign has access to it. When a campaign closes, when its voter file access ends, or when the campaign or its licensor asks, we delete that campaign's voter file data. Campaigns that export voter data agree to delete the export within 30 days.
- If you are a voter: to ask about information a campaign holds about you, contact that campaign. You can also write to us at the address below and we will pass your request to the campaign and help it respond.
Your choices
- Location: you can deny or change location permission at any time in your phone's settings. If you do, the app cannot record your shift location, and your campaign may require it for field shifts. Clocking out stops location collection right away.
- Microphone: you can deny microphone permission in your phone's settings. If you do, the app cannot record voter conversations; your campaign may require it.
- Notifications: you can turn notifications off in your phone's settings. You will then miss count reminders and organizer messages.
- Access, correction and deletion: ask your organizer, or contact us at the address below, to see, correct or delete the information held about you. To delete your account and its data, follow the steps on Delete your CanvassCommand account.
How long we keep it
We keep shift, location and activity records for as long as your campaign needs them for organizing, payroll and reporting, or as long as the law requires. When a campaign asks us to, or when you ask and your campaign has no legal obligation to keep the record, we delete it. When you delete your account, we delete your data within 30 days, except the hours you worked (kept without location for up to 3 years for payroll and wage-record laws) and the campaign's voter contact records, from which we remove your name; Delete your CanvassCommand account has the details. Voter file data is deleted when the campaign's access to it ends, as described in Information about voters.
Security
Information is sent over encrypted connections (HTTPS) and stored with our database provider. Access is limited to the campaign staff and service providers described above, and each campaign can reach only its own data. No system is perfectly secure, but we work to protect your information and fix problems quickly. If we confirm an incident affecting a campaign's data, we notify that campaign within one business day so it can meet its own obligations, including to its voter file licensor.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change significantly affects what we collect or how we use it, we will also let you know in the app.
Contact
Questions or requests about your information: info@canvasscommand.com