YFC Connect Privacy Policy

Privacy Policy for YFC Connect

**Last updated:** September 21, 2024

## Introduction

Youth Federation Cherumukku ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our YFC Connect mobile application.

## Information We Collect

### Personal Information

- **Mobile Number**: Used for authentication and account identification

- **Name**: Displayed in the app and used for personalization

- **Address**: Member address information

- **Job Information**: Member occupation details

- **Date of Birth**: Member birth date for age verification

- **Blood Group**: Medical information for emergency purposes

- **Membership Details**: Club joining date and membership type

- **Profile Images**: Optional profile photos for members

- **Authentication Data**: Secure tokens for app access

### Usage Information

- **App Usage**: Features accessed and interaction patterns

- **Device Information**: Device type, operating system, and app version

- **Network Information**: Internet connection status for app functionality

- **Analytics Data**: App performance and user behavior metrics

## How We Use Your Information

### Primary Uses

- **Authentication**: Verify your identity and provide secure access

- **App Functionality**: Enable features like membership ID cards, blood bank access, and member directory

- **Communication**: Send important updates, notifications, and emergency alerts

- **Support**: Provide customer service and technical assistance

- **Analytics**: Improve app performance and user experience

### Data Processing

- **Local Storage**: Secure storage of authentication tokens using Flutter Secure Storage

- **Cloud Storage**: User data stored securely on Supabase servers

- **Analytics**: App usage data processed by Firebase Analytics

- **Notifications**: Push notification data processed by OneSignal and Firebase Messaging

## Data Security

### Security Measures

- **Encryption**: All data transmitted using HTTPS/SSL encryption

- **Secure Storage**: Authentication tokens stored using Flutter Secure Storage

- **Access Control**: Limited access to user data by authorized personnel only

- **Regular Updates**: Security patches and updates applied regularly

- **Data Backup Rules**: Sensitive data excluded from device backups

### Data Retention

- **Active Users**: Data retained while account is active

- **Inactive Users**: Data may be archived after extended inactivity (2+ years)

- **Deletion**: Users can request data deletion through support channels

- **Legal Requirements**: Some data may be retained for legal compliance

## Third-Party Services

### Supabase

- **Purpose**: Backend services and database management

- **Data**: User authentication and app data storage

- **Location**: Cloud servers (may be outside your country)

- **Privacy Policy**: [Supabase Privacy Policy](https://supabase.com/privacy)

### Firebase Analytics

- **Purpose**: App analytics and performance monitoring

- **Data**: App usage, device information, user interactions

- **Location**: Google servers (may be outside your country)

- **Privacy Policy**: [Firebase Privacy Policy](https://firebase.google.com/support/privacy)

### Firebase Messaging

- **Purpose**: Push notifications

- **Data**: Device tokens, notification preferences

- **Location**: Google servers (may be outside your country)

- **Privacy Policy**: [Firebase Privacy Policy](https://firebase.google.com/support/privacy)

### OneSignal

- **Purpose**: Push notifications and user segmentation

- **Data**: Device IDs, user tags, notification preferences

- **Location**: OneSignal servers (may be outside your country)

- **Privacy Policy**: [OneSignal Privacy Policy](https://onesignal.com/privacy_policy)

### Other Services

- **Image Picker**: Camera and photo library access for profile images

- **Country Picker**: Country code selection for phone numbers

- **URL Launcher**: External link handling for additional services

## Your Rights

### Access and Control

- **View Data**: Access your personal information stored in the app

- **Update Information**: Modify your profile details and preferences

- **Delete Account**: Request complete account and data deletion

- **Data Portability**: Export your data in a standard format

- **Correction**: Request correction of inaccurate data

### Communication Preferences

- **Notifications**: Control push notification settings in device settings

- **Marketing**: Opt-out of promotional communications

- **Support**: Choose preferred communication methods

## Children's Privacy

Our app is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

## International Data Transfers

Your information may be transferred to and processed in countries other than your own, including:

- **Supabase**: Cloud servers (various locations)

- **Firebase/Google**: Servers in the United States and other countries

- **OneSignal**: Servers in the United States and other countries

We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

## Permissions We Request

### Required Permissions

- **Internet Access**: To connect to our backend services

- **Camera**: To capture profile photos (optional)

- **Storage**: To save profile images locally

- **Phone State**: For device identification

- **Notifications**: To send important updates

### Optional Permissions

- **Phone Calls**: To contact support numbers

- **Location**: For emergency services (if implemented)

## Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

- Posting the new Privacy Policy in the app

- Sending you a notification

- Updating the "Last updated" date

- Posting on our website

## Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

**Youth Federation Cherumukku**

- **Email**: youthfederationcherumukku@gmail.com

- **Phone**: +918714519145

- **Address**: Cherumukku, Kerala, India

## Legal Basis for Processing

We process your personal information based on:

- **Consent**: When you agree to our data practices

- **Contract**: To provide app services and features

- **Legitimate Interest**: To improve app functionality and security

- **Legal Obligation**: When required by applicable laws

- **Vital Interest**: For emergency situations and safety

## Data Protection Officer

For data protection inquiries, contact our Data Protection Officer:

- **Email**: sahadcmk101@gmail.com

- **Phone**: +917034020204

## Compliance

This Privacy Policy complies with:

- **General Data Protection Regulation (GDPR)** - For EU users

- **California Consumer Privacy Act (CCPA)** - For California users

- **Personal Data Protection Act** - For Indian users

- **Google Play Store Requirements**

---

**Note**: This Privacy Policy is effective as of the date listed above. By using our app, you consent to the collection and use of information as described in this policy.