Privacy policy
On this page
EventKit is run by Sohil Bansal. It connects volunteers with organizations that post volunteering shifts. This policy explains what we collect, why, and what you can do about it. If anything here is unclear, write to sohilban27@gmail.com.
What we collect
When you sign in with Google or with Apple we receive your name and your email address. Your provider may also offer us a profile picture; we do not keep it, and the app never shows one. We never see your password. If you use Apple's option to hide your email, what reaches us is Apple's forwarding address. That is the address we keep, and organizations may not be able to write to it.
We ask for your date of birth once, to check that you are old enough to use EventKit. No organization can see it.
We keep a record of your volunteering: the shifts you sign up for, the hours you work, the organizations you volunteer with, and anything one of them records about you meeting its requirements. Where a shift has a code to clock in with, we also keep a count of failed attempts, so nobody can guess their way into one.
If you allow it, we use your location to show you opportunities near you and to sort them by distance. Your device rounds it to about 100 meters before sending it, and we do not store it. Where it is sent is below.
If you turn notifications on, we store an identifier for your device so we can send them.
If you report something, we store what you reported, the reason you chose and anything you typed. If you hide an organization, we store that.
If you ask to run an organization, we store what you send us: its name, an email address to reply to, and any link or note you add. We use it to decide your request.
If you run an organization on EventKit, what you publish about it is visible to everyone using the app.
Our host and the services below keep ordinary technical logs, which include your device's IP address.
We do not collect payment details, your contacts, or anything for advertising. EventKit carries no advertising and no advertising trackers.
What organizations can see
When you sign up for a shift, the organization running it can see your name, your email address, and your record with them. They need this to run the shift and to keep their own volunteering records. They cannot see your date of birth, your location, or anything about the other organizations you volunteer with.
Other volunteers cannot see your name, your email address, or anything else about you. One thing is worth naming. We approve every organization before it is created, and its owner and admins add the rest of their team by typing the email address a person signs in with, which tells them whether an account uses that address and the name on it. So somebody who helps run an organization and already knows your address can learn that you are here.
Who else receives it
- Supabase, which hosts EventKit. Your information is stored in the United States.
- Google Firebase, which delivers notifications and reports crashes. A crash report carries your device model, its system version and an identifier for this installation of the app. It carries no name and no email address.
- Google or Apple, when you sign in through them.
- Whoever serves the map when an address is set: what you type into the search box, and the part of the map you are looking at. If you allow location there, the map opens on where your device says it is, so that point goes too. These services are not always in the United States.
- Your device's own address lookup, which turns an address into coordinates, and your maps app, when you tap a venue for directions.
- Whoever hosts an organization's logo or photo, when your app loads one.
We do not sell your information and we do not share it for advertising.
How long we keep it
We keep your account information for as long as your account exists.
Your volunteering record is different. The hours you work are part of an organization's records as well as your own, and they cannot be rebuilt. So when you delete your account we remove your name, your email address and your picture, delete your date of birth, your notifications, the devices we stored and any request you made to run an organization, and the record of the shifts and hours stays with nothing on it that identifies you. Organizations see a deleted account.
If nothing points at you, meaning you have never signed up for a shift and no organization has recorded that you meet one of its requirements, the account is removed outright instead. Either way, something written elsewhere may still carry your name: a note somebody typed into a report, an announcement you posted, a notification already sitting in somebody else's inbox.
If you own an organization, deleting your account deactivates it, and its upcoming shifts that still have volunteers on them are cancelled with everyone holding a place informed. The app names those organizations before you confirm.
Deleting your account cannot be undone.
Your choices
- Location. Grant it or refuse it in your device settings. EventKit works either way.
- Notifications. Turn them off in the app and the device we stored is deleted. Turning them off in your device settings stops them arriving but leaves that record, so use the app's switch if you want it gone.
- Your name. Change it in Profile.
- Your account. Delete it in Profile. The section above says what stays. If you cannot sign in, write to sohilban27@gmail.com instead.
- Ask us. Write to sohilban27@gmail.com to ask what we hold about you, to correct it, or to have it removed. EventKit is run by one person.
Age
EventKit is for people aged 13 and over.
Signing in with Google or Apple creates the account before anything can be asked, so we ask for a date of birth on the screen straight after. An answer under 13 stops the account there: it cannot browse, sign up, or be seen by anybody. We delete it at that moment, along with the name, email address and picture that signing in created. If the app cannot reach us right then, it tries again until the account is gone.
If you are a parent or guardian and you want your child's account removed, write to sohilban27@gmail.com. If we learn that an account belongs to someone under 13, we remove it.
If you are between 13 and 17, please read what organizations can see, above. Signing up for a shift gives that organization your name and your email address, and they may use them to contact you about the shift.
Security
We use the security features our hosting provider offers, including encrypted connections and rules that keep your information away from people who should not see it. No service can promise perfect security, and we do not.
Changes
We will update this policy when EventKit changes. The date at the top says when it last changed.