Privacy Policy

Last updated: September 15, 2025

Loyola School, Jamshedpur ("we", "us", or "our") operates Loyola Alumni, the official alumni networking platform. This Privacy Policy explains how we collect, use, protect, and share your personal information. By using our services, you consent to the practices described in this policy.

1. Information We Collect

We collect the following categories of information:

Account Information:

• Authentication data from Sign in with Apple or Google (name, email, unique identifier)

• Account creation date and last login information

Profile Information:

• Full name (first, middle, last)

• Graduation year/batch from Loyola

• Current city and location

• Professional information (profession, organization)

• About/bio section

• Profile photo

Contact Information:

• WhatsApp number (with privacy settings)

• Email address (with privacy settings)

• Social media profiles (LinkedIn, Instagram, Facebook - optional)

User-Generated Content:

• Posts, comments, and messages you create

• Photos and media you upload

• Interactions with other users (likes, connections)

Technical Information:

• Device information (type, model, operating system, app version)

• IP address and approximate location

• Unique device identifiers

• Browser type and language preferences

Analytics Data:

• App usage patterns and feature interactions

• Session duration and frequency

• Crash reports and performance data via Crashlytics

• Navigation paths and screen views via Google Analytics

2. How We Use Your Information

We use your information for the following purposes:

Service Provision: To create and manage your account, enable alumni networking features, and provide core platform functionality

Communication: To send important updates, security alerts, and respond to your inquiries

Personalization: To customize your experience and show relevant alumni connections

Safety & Security: To detect and prevent fraud, abuse, and violations of our Terms of Service

Analytics: To understand usage patterns and improve our services

Legal Compliance: To comply with legal obligations and protect our rights

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your data based on:

Contract: Processing necessary to provide our services under our Terms of Service

Consent: For optional features like social media integration and marketing communications

Legitimate Interests: For analytics, security, and service improvements

Legal Obligations: When required by law or court order

4. Third-Party Services

We work with trusted third-party service providers:

Supabase: Database hosting and authentication services

Expo: Mobile app development and push notification services

Google Analytics: Usage analytics and performance monitoring

Firebase Crashlytics: Crash reporting and app stability monitoring

Apple & Google OAuth: Secure authentication services

Cloudflare: Content delivery network and media storage

These providers access only the data necessary to perform their services and are bound by strict confidentiality agreements.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and authentication state

• Remember your preferences and settings

• Analyze traffic and usage patterns

• Improve service performance and user experience

You can control cookies through your browser settings, though some features may not function properly without them.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We share data only in these circumstances:

With Your Consent: When you explicitly authorize sharing

Other Alumni: Profile information you choose to make public

Service Providers: Third parties who help operate our services under strict confidentiality

Legal Requirements: When required by law, court order, or government request

Emergency Situations: To prevent imminent physical harm or financial loss

Business Transfers: In connection with a merger, acquisition, or sale of assets

7. Data Security

We implement comprehensive security measures including:

• Encryption of data in transit (TLS/SSL) and at rest

• Regular security audits and vulnerability assessments

• Access controls and authentication requirements

• Regular backups and disaster recovery procedures

While we strive to protect your data, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

8. Data Retention

We retain your data for different periods based on its type:

Account Data: Retained while your account is active

User Content: Retained until you delete it or your account

Analytics Data: Aggregated and anonymized after 24 months

Legal Records: Retained as required by law (typically 3-7 years)

Backup Data: Deleted within 90 days of account deletion

9. Your Rights and Choices

You have the following rights regarding your personal data:

Access: Request a copy of your personal data

Correction: Update or correct inaccurate information

Deletion: Request deletion of your account and data

Portability: Receive your data in a portable format

Restriction: Limit how we process your data

Objection: Object to certain processing activities

Withdraw Consent: For processing based on consent

To exercise these rights, visit your account settings or our data deletion page, or contact hello@alumnispark.com.

10. Children's Privacy

Loyola Alumni is not intended for users under 18 years old. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will immediately delete such information. If you believe we have collected information from a child under 13, please contact us immediately at hello@alumnispark.com.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including India where our primary servers are located. We ensure appropriate safeguards are in place through:

• Standard Contractual Clauses approved by the European Commission

• Compliance with applicable data protection laws

• Technical and organizational security measures

12. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect, use, and share

• Right to delete personal information (with certain exceptions)

• Right to opt-out of the "sale" of personal information (we do not sell your data)

• Right to non-discrimination for exercising privacy rights

To exercise these rights, contact us at hello@alumnispark.com.

13. Data Breach Notification

In the event of a data breach that may compromise your personal information, we will:

• Notify affected users within 72 hours of discovery

• Provide details about what information was affected

• Offer guidance on protective measures you can take

• Report to relevant regulatory authorities as required

14. Marketing Communications

We may send you:

• Service-related emails (account updates, security alerts) - these cannot be opted out

• Alumni event invitations and newsletters - you can opt-out anytime

• Push notifications - manage through your device settings

To opt-out of marketing emails, click the unsubscribe link in any email or update your preferences in account settings.

15. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top

• Notify you via email or in-app notification

• Request renewed consent where required by law

Continued use of our services after changes indicates acceptance of the updated policy.

16. Contact Information

For privacy-related inquiries, please contact:

Data Protection Officer

Loyola School, Jamshedpur

Email: hello@alumnispark.com

General: hello@alumnispark.com

Data Deletion: Delete My Data

Address: Loyola School, Jamshedpur, Jharkhand, India

For users in the European Union, you may also contact your local data protection authority with complaints.