Privacy Policy

Effective August 30, 2026

Sivil is a team communication app for youth sports, built by Sivil Inc. ("Sivil", "we"). It exists so that kids, coaches, and families can talk in a place parents can actually see into. That purpose shapes everything on this page: we collect what the service needs to work and to keep kids safe, we tell you exactly what that is, and we do not sell it, rent it, or use it to advertise to anyone.

What We Collect

Account information

Name, username, and profile photo
Email address and phone number
Date of birth (used to apply the right protections by age)
Password (stored only as a cryptographic hash, never as typed)
Family relationships you set up — which guardian is linked to which child, and the oversight level chosen

Identity verification

Adults verify their identity before interacting with minors on Sivil. A third-party identity-verification service (Veriff) processes the ID document and selfie you provide during verification; Sivil stores the outcome of that check, not your document.

Content you create

Messages, photos, videos, events, sign-up sheets, livestreams, and feedback you submit are stored on our servers.

Sivil is deliberately not end-to-end encrypted. Your communications are encrypted in transit (TLS), but they are processed and stored on our servers in a form our systems can read — because that is what makes guardian oversight and automated safety scanning possible. An app that could not see messages could not flag a dangerous one. We think parents choosing a kids' communication app deserve to know this trade-off explicitly rather than find a marketing claim that hides it.

Contact matching (optional)

If you choose to find friends from your contacts, the app computes one-way cryptographic hashes (SHA-256) of the phone numbers in your address book on your device and sends only those hashes to our servers to check for matches. Names and actual phone numbers from your contacts never leave your phone.

Usage and diagnostics

Which screens and features are used, and for how long — collected via Google Firebase Analytics and associated with your account, so we can see which features earn their place
Crash reports and performance data (Firebase Crashlytics), also associated with your account
If you submit an in-app problem report, the report includes your description and the app's recent diagnostic logs

What we do not collect

Location. The app does not request location permission and does not collect location data.
Advertising identifiers. There are no ads in Sivil and we never request the advertising identifier (IDFA).
Your contacts as such — see above; only irreversible hashes are transmitted, and only if you opt in.

How We Use It

To run the service: accounts, conversations, teams, calendars, sign-ups, notifications
For safety: messages and images are checked by automated content-safety systems, including third-party AI moderation services; content that trips a check may be reviewed and may generate an alert to a guardian, according to the oversight level in place
To notify guardians per the oversight level they chose — and the child can always see which level applies to them. Nothing about oversight is hidden from the person being overseen.
To answer support and feedback reports
To understand feature usage and fix crashes

We do not use your data for advertising, do not sell or rent it, and do not share it with data brokers. We do not track you across other companies' apps or websites.

Who Can See What

People in your conversations and teams see what you share with them, per each room's membership.
Guardians of a minor see what their chosen oversight level shows — from message review down to activity summaries — and the minor can see that level too.
Public team pages show only what the team chooses to publish (roster, photos, schedule). Visitors never see who uploaded a photo or any member's contact details.
Law enforcement, when legally required, or when necessary to protect a child from serious harm.

Service Providers

A handful of companies process data on our behalf, under contract, only to run Sivil:

Apple and Google — push notification delivery
Google Firebase — analytics and crash reporting
Twilio — SMS for verification codes and parental consent
Resend — transactional email (invites, consent links, password resets; never marketing)
Veriff — adult identity verification
DigitalOcean and Backblaze — server hosting and media storage
OpenAI — automated content-safety analysis of messages and images
Atlassian — tracking of problem reports you submit

Children's Privacy

Children under 13 can use Sivil only after their parent or guardian gives verifiable consent (delivered by SMS or email during sign-up), as required by COPPA. Parents and guardians of any minor on Sivil can:

Review their child's activity through guardian oversight
Change the oversight level at any time
Ask us to show them the personal information we hold about their child, refuse further collection, or have the child's account and data deleted — email us at the address below

We collect from children only what the service needs to operate, and we never use children's data for advertising or marketing of any kind.

Retention and Deletion

You can delete your account in the app: Settings → Delete Account. This permanently removes your personal information. Messages you sent into shared conversations stop being attributed to you and display as "Deleted User".
Where an account was involved in a safety incident, we may retain the minimum related records for up to 365 days after deletion, to protect other users and to cooperate with lawful requests.
Server backups exist for disaster recovery and cycle out on a fixed schedule; deleted data ages out of them rather than being edited in place.

Security

All traffic between the app and our servers is encrypted with TLS
Access to production data is restricted and monitored
We run recurring security audits and act on their findings

No system is perfectly secure, and we will notify affected users and authorities as required by law if a breach affects personal data.

Your Rights

You can:

See and correct your account information in the app
Delete your account and personal data in the app (see above)
Email us to request a copy of the personal information we hold about you or your child
Decline optional collection — contact matching only runs if you opt in, and you can remove your phone number in Settings

Changes to This Policy

When this policy changes in a way that matters, we will note the new effective date here and tell you in the app before the change applies.

Contact Us

Sivil Inc., Vero Beach, Florida
Email: accounts@sivil.us
Phone: 772-453-7158