Privacy policy
Last updated October 6, 2026
Easy 40 is used by high school students, so this policy is written to be actually readable. The short version: we collect the minimum needed to help you find, save, and track volunteer opportunities, we never sell data, and you can delete your account by asking.
What we collect from students
Your name, email address, school (if you choose to share it), opportunities you save or reserve, and hours you choose to log in your private tracker. If you previously used a confirmed record or parent acknowledgement feature, we also retain the information needed to keep that existing record accurate. We do not collect your device location, contacts, or anything from other apps on your device.
What we collect from organizations
The organization's name, description, category, website, primary contact person's name, email, phone number, and address if the org publishes one. Organizations can add coordinators to their public team roster; if they do, each coordinator's name, title, email, and phone appear on the org's public page. Organizations are responsible for having each coordinator's permission before adding them.
Legacy confirmed records
Easy 40 previously let students export signed records of hours confirmed through the platform. Existing records remain readable so students and schools do not lose history. Each is a point-in-time snapshot with a unique code. You can revoke a record you issued; its verify link will then show "Revoked". Easy 40's current service is focused on opportunity discovery and does not promise that new listings will create confirmed records.
Why we collect it
Your email lets you sign in, save opportunities, receive requested alerts, and manage reservations. Your hour entries power your private progress total; they are not proof of attendance. School information helps us understand roughly how many students at each school use Easy 40 and is never linked to individuals in public reporting. Information attached to legacy records is retained so those records remain accurate.
Who can see your information
When you reserve through Easy 40, that organization can see your name and email. When a listing sends you to an organization's website or email, you share information directly with that organization under its process. Your private hour tracker is not public. A legacy record page is only reachable to someone who has its random 12-character code and does not appear in search results. We never sell your data or share it with advertisers.
Analytics
We use PostHog to understand how the site is used — which pages people visit, where they get stuck. It's aggregate. Nobody outside Easy 40 sees who did what. If you'd rather opt out, browser tracking blockers (or Firefox / Brave's built-in ones) will do it and the site works exactly the same.
Where it lives
Your data is stored with Supabase (Toronto region for records; database in Canada), protected by row-level security. Records are cryptographically signed so any tampering shows up as an invalid signature on the verify page.
Deleting your data
Email us and we will delete your account and its personal data within 7 days. Two things are important to know: (1) records you have already sent to a counsellor include a snapshot of your hours as of the moment you issued them — those snapshots are how records stay checkable, and we cannot rewrite records that are already in someone's inbox. Ask us to revoke them and the verify link will show "Revoked". (2) The coordinator name and contact info organizations added on hours they confirmed for you may remain in those signed records after your account is deleted, because a record is a signed statement about what happened, not a live database view.
If you're a coordinator listed on an organization's page
The organization owner added you. To be removed, ask the organization owner to remove you from their team on the Easy 40 dashboard. If they can't or won't, email us and we'll remove you.
Changes
If this policy changes in a way that affects you, we will say so plainly on this page with the date of the change.
Questions, concerns, or deletion requests: edwin.nkpoman00@gmail.com