Privacy Policy

Youth Worker Hub takes your privacy seriously. This policy explains what personal data we collect, how it is used, and what rights you have over it. We collect only what is necessary to provide the service.

When you create an account, we collect:

• Your email address (used to log in and contact you)
• Your display name (shown in community features)
• Optional profile information such as a short bio

When you use the app, we collect:

• Session history (which activities you have run and when)
• Favourite activities you have saved
• Session plans you have created
• Community posts, Q&A contributions, and messages
• Feedback and submissions you send
• XP, badges, and gamification progress

Your data is used to:

• Provide and personalise the service to you
• Save your progress, plans, and favourites
• Enable community features that require identity (e.g. posting)
• Send important account-related communications (no marketing spam)
• Improve the platform based on aggregate usage patterns

We do not sell your data to third parties. We do not use your data for advertising.

All data is stored securely in Supabase, a managed cloud database hosted on AWS infrastructure in the EU. Row-level security policies ensure that your data is only accessible to you and, where required, platform administrators.

We do not store any payment card details. All payment processing is handled entirely by Stripe, a PCI-DSS compliant payment provider. When you subscribe, you interact directly with Stripe's secure checkout. We receive only a confirmation of your subscription status.

You can review Stripe's privacy policy at stripe.com/privacy.

We use a minimal session cookie to keep you logged in. We do not use third-party tracking cookies or analytics platforms that profile your behaviour across the web.

Your data is retained for as long as your account is active. If you request account deletion, your personal data will be removed from our systems within 30 days. Some aggregate or anonymised data may be retained for platform improvement purposes.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and data
• Export your data in a portable format

To exercise any of these rights, please use the Feedback section in the app or contact us directly. We will respond within 30 days.

The only third-party services we use are:

• Supabase — database and authentication
• Stripe — payment processing (Pro subscribers only)

No other third-party services have access to your personal data.

This policy may be updated from time to time. We will notify users of significant changes. Continued use of the app after updates are posted means you accept the revised policy.

If you have questions about this privacy policy or want to exercise your data rights, please use the Feedback section within the app.