Privacy Policy

Last updated: 2026. This is a starting template that the operating organization should review and tailor before public use.

Information we collect

Account and profile details you provide (such as name, email, date of birth, school, and grade), the volunteer activity and service-hour records you or your organization create, event registrations and check-ins, and basic technical data needed to operate the Service.

How we use information

To provide the Service: authenticate you, show and manage events, record and confirm service hours, compute award progress, send in-app and (if enabled) email notifications, and produce reports and certificates for you and your organization.

How information is shared

Within your organization, administrators can access your membership, profile, and service records. We use infrastructure providers to run the Service — including Supabase (database, authentication, and file storage) and, where email is enabled, Resend (transactional email). We do not sell your personal information.

Data retention & security

Records are retained for auditing and award purposes. Access is controlled by role-based permissions and database row-level security so that organizations only see their own data. No system is perfectly secure, but we take reasonable measures to protect your information.

Your choices

To access, correct, or request deletion of your information, contact your organization’s program administrator, who can update your profile, deactivate your account, or remove records as appropriate.

Children

The Service may be used by minors as part of a supervised program. Organizations are responsible for obtaining any parental or guardian consent required by law before enrolling minors.

Changes

We may update this policy; material changes will be reflected by the “last updated” date.

Contact

Privacy questions should be directed to your organization’s program administrator.