Privacy Policy

1. Who can use this app

The App is intended for Texas A&M University and Blinn College students participating in CSA. Sign-in is limited to Google accounts with an @tamu.edu or @buc.blinn.edu email address. We do not offer access to the general public.

2. Information we collect

We collect the following categories of information:

• Google account information (via Sign in with Google): your school email address, name, and profile picture. We request only the openid, email, and profile scopes needed to authenticate you and display your identity in the App.
• Membership information you provide: full name (first and last), class, and optional phone number during registration.
• Activity data: event attendance, points earned, Jiating (family group) assignment, and role/status within CSA (member or CSA Officer).
• Technical data: basic usage analytics (such as page views) collected by our hosting provider to help us understand how the App is used. This data is aggregated and not used to identify you for advertising.

3. How we use Google user data

Google user data obtained through Sign in with Google is used only to:

• Verify your identity and confirm you are signing in with a @tamu.edu or @buc.blinn.edu account
• Create and link your App account to your CSA membership record
• Display your name and profile image within the App (profile, leaderboard, check-in lists)

We do not use Google user data for advertising, sell it to third parties, or use it for purposes unrelated to operating the App. Our use of Google user data complies with Google's Limited Use requirements.

4. How we store and protect data

Member and attendance data is stored in a Supabase (PostgreSQL) database with row-level security policies. Authentication sessions are managed through Supabase Auth. Access to membership and points data is restricted to CSA Officers, your parent, and the Secretary who need it to run events, manage membership, and maintain points records.

5. Who can see your information

• You can view your own profile and points.
• Active CSA members can view leaderboard rankings and event listings appropriate to their membership.
• CSA Officers, your parent, and the Secretary can view member names, emails, attendance, and points as needed to operate CSA programs.

We do not share your personal information with advertising platforms, data brokers, or other third parties for their independent use.

6. Data retention and deletion

We retain membership and points data for as long as you are an active CSA participant and as needed for semester records. If you would like your account or personal data removed, contact a CSA Officer, your parent, or the Secretary. We will process deletion requests within a reasonable timeframe, subject to any records we are required to keep for organizational purposes.

7. Third-party services

The App uses Supabase for authentication and data storage, Google for sign-in, and Vercel for hosting. These providers process data on our behalf under their respective privacy policies and only as needed to operate the App. Google OAuth for member sign-in uses only the basic identity scopes; we do not access your personal Gmail, Drive, Calendar, or other Google services through your sign-in. Separately, eligible CSA org events created in the App may be published to CSA's shared Member Calendar using an organizational service account (not your personal Google account). Family-private events such as Mixers and individual Jiating events are not published to that calendar.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected on this page with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.

9. Contact

For privacy questions or data requests, contact CSA through csatamu.org or reach out to a CSA Officer, your parent, or the Secretary directly.