Privacy Policy

Last updated: August 2026

This Privacy Policy describes how NexoLink collects, uses, and protects your information when you use our iOS app, admin dashboard, and website (together, the “Service”).

NexoLink is built and operated by an independent student developer. We built the Service to make volunteer hours tracking simple and transparent — and that same principle applies to how we handle your data: we collect only what the Service needs to function, and we do not sell your personal information.

1. Definitions

  • “Account” means the unique account created for you to access the Service.
  • “Organization” means a school, club, library, nonprofit, or other group using NexoLink to track members’ hours.
  • “Personal Data” means any information that relates to an identified or identifiable individual.
  • “Hour Log” means an entry you submit recording volunteer hours, including its description, date, status, and any project tag.
  • “Usage Data” means data collected automatically through your use of the Service, such as device type and diagnostic information.
  • “Service Provider” means a third party we use to help operate the Service, such as our cloud infrastructure provider.

2. Information We Collect

Account Information

When you create a NexoLink Account, we collect your name and email address, and store a securely hashed credential to authenticate you (we never store your password in plain text). If you sign in with a third-party provider such as Google, we receive the basic profile information that provider shares with us (typically your name and email).

Organization Data

If you create or administer an Organization, we collect the Organization’s name and generate a join code for it. If you join an Organization, we store your membership in that Organization and your role within it (Member or Admin).

Hour Log Data

When you log volunteer hours, we collect the number of hours, a description, the date, an optional project or activity tag, and the log’s status. Because NexoLink auto-approves submitted hours, this data is stored and made visible to your Organization’s Admins as soon as it’s submitted.

Usage and Device Data

We may automatically collect limited technical information when you use the Service, such as your device type, operating system version, and basic app diagnostics, to help us keep the Service working reliably. We do not use this data for advertising, and we do not use third-party advertising or tracking SDKs in the app.

3. How We Use Your Information

We use the information we collect to:

  • Create and maintain your Account and authenticate you when you sign in.
  • Let you join Organizations and log volunteer hours.
  • Display your hours and progress to you, and your aggregate progress to your Organization’s Admins.
  • Operate the admin dashboard, including features like member search, join codes, and progress summaries.
  • Respond to you when you contact us for support.
  • Maintain the security and reliability of the Service, and diagnose technical problems.
  • Improve the Service based on how it’s actually used.

We do not use your Personal Data for targeted advertising, and we do not sell your Personal Data to third parties.

4. Who Can See Your Information

  • You can always see your own Account information and Hour Logs.
  • Admins of an Organization you’ve joined can see your name, email, and your logged hours and progress within that Organization. Admins cannot see your data from Organizations you have not joined.
  • NexoLink (the developer) can access data as needed to operate, maintain, and troubleshoot the Service, and to respond to support requests.
  • We do not share your Personal Data with advertisers, data brokers, or unrelated third parties.

5. Data Storage and Security

NexoLink is built on Firebase (a Google Cloud platform), which provides authentication and database services (Cloud Firestore). Your data is stored on Google Cloud infrastructure and protected by access-control rules that restrict reads and writes to your own Account and the Organizations you belong to — an Admin cannot query data from an Organization they don’t administer, and a Member cannot query another Member’s individual data outside their Organization’s aggregate view.

No method of transmission over the internet or electronic storage is 100% secure, and while we use commercially reasonable safeguards to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your Personal Data and Hour Logs for as long as your Account is active, or as needed to provide the Service to you and your Organization. If you delete your Account or an Organization is closed, we will delete or anonymize the associated data within a reasonable period, except where we are required to retain it to comply with a legal obligation, resolve a dispute, or enforce our agreements.

7. Your Rights and Choices

You can:

  • Access or update your Account information at any time within the app.
  • Request a copy of the Personal Data we hold about you.
  • Request deletion of your Account and associated data.
  • Leave an Organization at any time, which stops that Organization’s Admins from seeing your future activity (past Hour Logs already shared with the Organization may be retained by that Organization for its own records, consistent with Section 6).

To exercise any of these rights, contact us using the details in Section 11. We will respond to verified requests within a reasonable time.

If you are a parent or guardian and believe your child (under 13) has created an Account or submitted Personal Data without your consent, please contact us and we will take steps to remove that information.

8. Children’s Privacy

NexoLink is frequently used by students through their school, club, or Organization, and we take this seriously. We do not knowingly collect Personal Data from children under 13 without the involvement of a parent, guardian, or a supervising Organization (such as a school facilitating an approved program). If we learn that we have collected Personal Data from a child under 13 without appropriate consent, we will take steps to delete that information.

Organizations that enroll minors in NexoLink are responsible for ensuring they have appropriate consent to do so under applicable law (such as COPPA in the United States) before those minors use the Service.

9. Service Providers

We rely on the following categories of Service Providers to operate NexoLink:

  • Firebase / Google Cloud — authentication, database (Cloud Firestore), and hosting infrastructure.

We do not use third-party analytics platforms, advertising networks, or data-broker services within the app or admin dashboard.

10. International Users

NexoLink’s infrastructure is hosted in facilities operated by Google Cloud, which may process data in the United States or other locations where Google Cloud operates. By using the Service, you consent to this processing.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, provide additional notice (such as an in-app message). We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or want to exercise any of the rights described above, please contact us: