Privacy Policy

What we collect

• Account: your email address, used to send sign-in codes.
• Profile: name, nickname, class year, current city, and photo. Optionally: phone and WhatsApp, LinkedIn / Facebook / Instagram / Snapchat, job title, employer, industry, and topics you can help with. You choose who can see each contact field.
• Location: only the city you type. We turn it into approximate coordinates to show nearby meetups and alumni. The app never reads your device's GPS. On maps, other members only see a rounded, city-level position.
• What you create: posts, photos, comments, reactions, poll votes, meetups and RSVPs, groups, job listings, direct messages, and the reports and blocks you make.
• Verification: who vouched for you, and admin decisions about your account.
• Device: a push-notification token (if you allow notifications) and crash reports that help us fix bugs.

How we use it

Only to run Alumni: signing you in, verifying members, showing your profile to verified members of your school according to your privacy settings, delivering posts, messages and notifications, keeping the community safe (reports, blocks, bans), and fixing problems.

Who can see it

Only verified members of your school can see your profile and posts, and only the fields you've chosen to share. Direct messages are visible only to you and the person you're talking to, except that a message someone reports is shown to that school's admins so they can review it. School admins also see reports, memorial reports, and join requests for their school.

Service providers

We use a small number of providers to run the app. They process data only on our behalf:

• Supabase: database, sign-in, and file storage
• Google Firebase: push notifications and crash reports
• Resend: sign-in and account emails
• Vercel: hosting for the web version
• OpenStreetMap (Nominatim and map tiles): turning the city you type into coordinates, and drawing maps. They receive the city text and your IP address, not your account.

Keeping and deleting your data

We keep your data while your account is open. When you delete your account (My profile → Delete my account), your profile, posts, comments, messages, meetups, RSVPs, job listings, notifications and devices are deleted immediately. Groups you started stay up for their members, without your name. Photos you uploaded are removed from storage within 30 days. If your school's admins imported an alumni roll that lists your name and class year, that roll entry stays with the school but is no longer linked to you. More about deleting your account.

The demo school

If you join OrgHubs University (the demo), you get a 60-minute, view-only preview. The profile you create for it is deleted automatically when the hour is up, or as soon as you tap Leave demo. The people and posts in the demo are fictional.

Your choices and rights

• Edit your profile and each field's visibility at any time.
• Turn push notifications off in your device settings.
• Block people and report content.
• Ask for a copy of your data, or to correct or delete it, by emailing [email protected].

Security

Data is encrypted in transit. Access is enforced by row-level security in the database, so members can only read what they're allowed to. Members sign in with one-time email codes, not passwords.

Children

Alumni is for former students aged 16 and over. It isn't meant for children, and we don't knowingly collect children's data. See our Child Safety Standards.

Changes and contact

If we change this policy in a significant way, we'll tell you in the app. Questions or requests: [email protected].