Privacy policy

What we collect. Your name, email, optional school and graduation year, and any profile photo you add. We also keep what your club creates: meetings, events, attendance, service hours, ranks and XP, announcements, tasks, and files you upload, like hour proof photos and club logos.

People added by a club. Officers can import sign-in sheets and hour records, which can add a member's name and email before that person has an account. If that's you, signing in with the same email connects those records to your account. You can ask us to remove them.

Cookies and browser storage. We use them only to keep you signed in and remember choices, like your club, theme, sidebar and dismissed prompts. There are no ads, and we don't use advertising or third-party analytics trackers.

What we never do. We don't sell, rent, or share your personal data with advertisers or data brokers. Ever.

Photos. Location and camera details are removed from club logos, profile photos and rank icons when they're uploaded. Anyone with the link to one of these images can open it, so don't upload anything private as one. Hour proof photos are kept separate.

Security. Account passwords are hashed with scrypt and never stored in readable form. Vault passwords your club stores are encrypted at rest. Uploaded hour proofs are private to you and your club's officers.

Who else handles data. A hosting provider runs our server. Google handles optional sign-in (only your name, email and profile photo). Resend delivers email like verification links and sign-in codes. If you turn on notifications, your device's push service delivers them. They process data only to provide those functions.

Clubbie's operator. The person running Clubbie can see app-wide totals and club-level counts, like how many members and meetings a club has, and can delete a club that breaks the terms. The owner is told when that happens.

Your controls. You can leave a club anytime from Club settings. To delete your account and personal profile, ask us at clubbielive@proton.me. Club owners can delete their club and its data.

Where data lives. Clubbie runs on a single hosted server. Access to the server is restricted to the Clubbie operator.

Who sees what. Members see their own record and their club's shared content. Officers see club attendance and hours. Password-vault entries are visible only to people the owner explicitly grants, and owners always keep full control. Sensitive officer powers are off by default.

Student data. Clubs are run by students for students. Club officers are responsible for what they record about members; we provide the tools to view and remove it. Parents or students with questions can contact us and we'll route the request to the club's owner.

Backups & deletion. Deleting a club removes its data from the live database, and people keep their accounts and their records in other clubs. Server backups may retain copies for a short window afterwards.