Privacy policy
Last updated July 2, 2026
Easy 40 is used by high school students, so this policy is written to be actually readable. The short version: we collect the minimum needed to verify volunteer hours, we never sell data, and you can delete everything by asking.
What we collect from students
Your name, email address, school (if you choose to share it), and the volunteer shifts you sign up for. Once an organization confirms your attendance, the hours land on your account. If a parent or guardian verifies your account, we store their name, email, and the date they verified. That is it. We do not collect your location, contacts, or anything from other apps on your device.
What we collect from organizations
The organization's name, description, category, website, primary contact person's name, email, phone number, and address if the org publishes one. Organizations can add coordinators to their public team roster; if they do, each coordinator's name, title, email, and phone appear on the org's public page. Organizations are responsible for having each coordinator's permission before adding them.
Records
When you export your hours, we create a signed record — a point-in-time snapshot of your verified hours, addressable by a unique code. Each entry on the record names the human at the organization who confirmed the shift, and includes their title, email, and phone number when the organization has provided them. Records are how counsellors verify hours. You can revoke a record you issued at any time from your Records page; the verify link then shows "Revoked" to anyone who opens it. Existing records that you haven't revoked stay valid and readable.
Why we collect it
Your name and hours exist so we can produce a signed record your school can trust. Your email is how you log in and how we tell you when your hours are confirmed. School helps us understand roughly how many students at each school are using Easy 40 — never linked to individuals in public reporting. Coordinator contact details on records are the specific thing that makes hours checkable — a counsellor can call the named human and confirm the shift happened.
Who can see your information
Organizations you sign up with see your name and email so they can confirm your attendance. Your record page is only reachable to someone who has its 12-character code — codes are random and don't appear in search results. When you share a record with a school, they see the record. We never sell your data or share it with advertisers.
Analytics
We use PostHog to understand how the site is used — which pages people visit, where they get stuck. It's aggregate. Nobody outside Easy 40 sees who did what. If you'd rather opt out, browser tracking blockers (or Firefox / Brave's built-in ones) will do it and the site works exactly the same.
Where it lives
Your data is stored with Supabase (Toronto region for records; database in Canada), protected by row-level security. Records are cryptographically signed so any tampering shows up as an invalid signature on the verify page.
Deleting your data
Email us and we will delete your account and its personal data within 7 days. Two things are important to know: (1) records you have already sent to a counsellor include a snapshot of your hours as of the moment you issued them — those snapshots are how records stay checkable, and we cannot rewrite records that are already in someone's inbox. Ask us to revoke them and the verify link will show "Revoked". (2) The coordinator name and contact info organizations added on hours they confirmed for you may remain in those signed records after your account is deleted, because a record is a signed statement about what happened, not a live database view.
If you're a coordinator listed on an organization's page
The organization owner added you. To be removed, ask the organization owner to remove you from their team on the Easy 40 dashboard. If they can't or won't, email us and we'll remove you.
Changes
If this policy changes in a way that affects you, we will say so plainly on this page with the date of the change.
Questions, concerns, or deletion requests: edwin.nkpoman00@gmail.com