Introduction
Yi Connect ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Yi Connect Chapter Management System mobile application and web platform (collectively, the "Service").
By using Yi Connect, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Personal Information
When you create an account and use Yi Connect, we collect:
- Account Information: Email address, name, profile photo, phone number
- Member Profile: Educational background, professional skills, interests, availability, leadership roles
- Chapter Information: Yi Chapter affiliation, member ID, role within chapter
- Event Data: Event RSVPs, attendance records (via QR check-in), volunteer hours, event participation
- Financial Records: Budget information, expense submissions, reimbursement requests (for authorized users only)
- Communication Data: Messages, announcements, feedback submissions
Automatically Collected Information
- Device Information: Device ID, operating system, browser type, app version
- Usage Data: Pages visited, features used, time spent on Service
- Location Data: Approximate location for event check-in (if permission granted)
- Push Notification Tokens: Device tokens for sending notifications
How We Use Your Information
We use the collected information for the following purposes:
- Provide and Maintain the Service: Enable chapter management features, event coordination, member engagement tracking
- Event Management: Process RSVPs, send event reminders, track attendance via QR check-in, assign volunteers
- Communication: Send announcements, notifications, newsletters, and updates about chapter activities
- Financial Management: Process budgets, track expenses, manage reimbursements and sponsorships
- Leadership Tools: Facilitate succession planning, nomination tracking, award submissions
- Analytics: Generate engagement reports, performance dashboards, chapter analytics
- Improve the Service: Analyze usage patterns, fix bugs, develop new features
- Security: Detect and prevent fraud, enforce terms of service, protect user accounts
Data Sharing and Disclosure
Within Your Yi Chapter
Your information is shared with other members of your Yi Chapter according to your role and permissions:
- Chapter Members: Can view your name, profile photo, skills, and availability
- Chapter Leaders: Can view engagement metrics, attendance records, volunteer hours
- Finance Teams: Can view budget-related information (if authorized)
- Event Coordinators: Can view RSVP status and check-in records
Service Providers
We share data with third-party service providers who assist us in operating the Service:
- Supabase: Database hosting, authentication, real-time data sync
- Vercel: Application hosting and content delivery
- Google Firebase: Push notification delivery (Android only)
These providers are contractually obligated to protect your data and use it only for the purposes we specify.
National Yi Organization
With your chapter's consent, aggregated (non-personally identifiable) data may be shared with the National Yi organization for:
- Benchmarking chapter performance
- National event coordination
- Leadership succession planning
- Best practices sharing
We Do NOT
- ❌ Sell your personal information to third parties
- ❌ Share your data with advertisers
- ❌ Use your data for purposes unrelated to chapter management
- ❌ Share your data with other chapters without your consent
Data Security
We implement industry-standard security measures to protect your information:
- Encryption in Transit: All data transmitted between your device and our servers uses HTTPS/TLS encryption
- Encryption at Rest: Database is encrypted at rest using AES-256 encryption
- Row-Level Security (RLS): Database policies ensure users can only access data they're authorized to view
- Authentication: Secure email/password authentication with optional magic link login
- Role-Based Access Control: Permissions are enforced based on your chapter role
Note: While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Data Retention
We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this policy:
- Active Accounts: Data retained while your account is active
- Inactive Accounts: Data may be retained for up to 1 year after last login for account recovery
- Historical Records: Event attendance, volunteer hours, and financial records may be retained longer for chapter record-keeping
- Deleted Accounts: Upon account deletion, personal data is removed within 30 days (except records required by law)
Your Rights
You have the following rights regarding your personal information:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information via your profile settings
- Deletion: Request deletion of your account and personal data (subject to record-keeping obligations)
- Opt-Out: Unsubscribe from notifications via app settings or email links
- Data Portability: Request an export of your data in machine-readable format
- Object: Object to processing of your data for specific purposes
To exercise these rights, contact your Chapter Administrator or email us at privacy@yiconnect.com
Push Notifications
If you grant permission, Yi Connect sends push notifications to keep you informed about:
- Event reminders and updates
- Task assignments and deadlines
- Chapter announcements
- Award nominations and approvals
You can disable push notifications at any time through your device settings or app notification preferences.
Offline Data and Caching
Yi Connect uses offline caching to provide functionality when you don't have internet access. This means:
- Some data is stored locally on your device for offline access
- Actions taken offline (like QR check-in) are queued and synced when you're back online
- Cached data is encrypted and protected by your device security
- You can clear cached data through your device settings
Children's Privacy
Yi Connect is intended for use by adult members of Yi organizations (ages 18 and above). We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
International Users
Yi Connect is hosted on servers located in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy with an updated "Last Updated" date
- Sending an in-app notification or email
Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Data Safety Summary (for Play Store)
Data Collected:
- Email address (required)
- Name and profile photo
- Professional skills and interests
- Event participation data
- Device tokens for notifications
Data Security:
- Encrypted in transit (HTTPS)
- Encrypted at rest (AES-256)
- Row-level security policies
- No data sold to third parties
User Rights: Access, correct, delete, or export your data at any time. Contact privacy@yiconnect.com for assistance.