Privacy Policy

1. What we collect

• Account details: your name, email address, phone number, role, chapter or region, and password. We store passwords only as a one-way hash (bcrypt), so no one at Kind Koala can see your password.
• Profile details you choose to add: a profile photo, your LinkedIn profile and your Instagram handle.
• Your agreements: when you accepted these terms, confirmed your age, agreed to the profile photo terms, opted in to texts and verified your email.
• Chapter activity: tasks you complete, volunteer hours, events you create or request, and files, photos and notes you upload.
• Technical information: when you last signed in, and your IP address for preventing abuse (for example, blocking repeated failed sign-ins). We don't use analytics or advertising trackers.

2. How we use it

• To verify that you're part of Kind Koala and let the right person approve your account.
• To run chapters: tasks, events, volunteer hours and impact reports.
• To send you automated emails and, if you opt in, texts about your account and chapter.
• To produce volunteer-hour records, and to report Kind Koala's overall impact (in totals, without contact details).
• To keep the Portal and its members safe.

3. Who can see what

• All approved members: your name, profile photo, role and chapter, and the tasks your chapter completes.
• Members of your chapter: everything above, plus your email, phone, LinkedIn and Instagram, and your chapter's events, photos and documents.
• Your chapter president, your regional manager and Kind Koala leadership: everything about your account, including your volunteer hours, activity and sign-up request.
• Service providers that run the Portal for us (listed in section 6) handle data only to provide their service to Kind Koala.

4. Automated emails and texts

The Portal sends automated emails from a no-reply address: verification codes, account approvals, new requests to review, task assignments, event updates, reminders, deadline notices and security alerts. These are necessary to run your account, so they stay on while you have one. Nobody reads replies.

We will never ask for your password or a verification code by email, text, phone or direct message.

Texts are optional. Choose them at sign-up or in Settings, and reply STOP to any message to opt out, or HELP for help. Message frequency varies, and message and data rates may apply.

5. Cookie Notice

The Portal uses only cookies that are strictly necessary for it to work. There are no advertising, analytics or tracking cookies.

Because these cookies are essential, the Portal doesn't ask for cookie consent. If you block them in your browser, you won't be able to sign in.

6. Where it's stored

Your information is stored and processed in the United States by these providers, on Kind Koala's behalf:

• Vercel: hosts the Portal and stores uploaded files and photos.
• Supabase: hosts the database.
• Resend: delivers automated emails.
• Twilio: delivers text messages, if you opt in.

Uploaded files are stored at long, unguessable web addresses. Only share those links with people inside Kind Koala.

7. We don't sell your information

Kind Koala doesn't sell, rent or trade your personal information, and doesn't share it with anyone for their own marketing.

8. Photos and uploads

Event photos and files you upload are visible to your chapter and to Kind Koala leadership, and Kind Koala may use event photos in its own communications. Your profile photo is shown only inside the Portal unless you agree otherwise. Only upload photos of people who agreed to be photographed, and never post the full names of minors. Never upload anyone's medical or health information.

9. Young members

You must be at least 13 to create an account. We don't knowingly collect information from children under 13, and if we learn that we have, we delete it. If you're under 18, please review this policy with a parent or guardian. A parent or guardian can contact us at any time to review or delete their child's information.

10. How long we keep it

We keep your account while you're a member. If you delete your account or leave Kind Koala, we delete your profile, photo and contact details. Volunteer-hour records and event impact totals stay with your chapter, without your contact details, so service records and our history stay accurate. Records of unapproved sign-up requests are deleted when the request is cancelled.

11. Your rights and choices

Depending on where you live, you may have the right to access, correct, download, restrict or delete your personal information. In the Portal you can:

• edit your profile, photo and contact details in Settings;
• turn texts on or off in Settings;
• download a copy of your data in Settings;
• delete your account in Settings.

For anything else, email privacy@kindkoala.org. We'll respond within 30 days and won't treat you differently for asking.

12. If you live outside the US

Kind Koala has chapters around the world. If you use the Portal from outside the United States, your information is transferred to and processed in the United States. We rely on these legal grounds: running your membership and the Portal (contract), operating Kind Koala's programs safely (legitimate interests), and your consent for optional things such as texts and a profile photo. You can withdraw consent at any time.

You may also have the right to object to processing, and to complain to your local data protection authority, for example in the EU or UK, or Kenya's Office of the Data Protection Commissioner or Nigeria's Data Protection Commission.

13. Security

We protect the Portal with encrypted connections (HTTPS), hashed passwords, email verification, rate limits on sign-in and sign-up, access rules that limit who sees what, and human approval of every account. No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires.

14. Changes and contact

If we change this policy materially, we'll tell you in the Portal or by email before the change takes effect. Questions: privacy@kindkoala.org. Kind Koala, Doylestown, Pennsylvania, USA.