Privacy Policy

Effective date: July 11, 2026

Alloy Mentors ("Alloy Mentors," "we," "us," or "our") operates the Alloy Mentors mobile application for iOS (the "App"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have. We have written it in plain language so it is easy to understand.

If you have any questions, contact us at support@alloymentors.com.

1. Who We Are and How the App Works

Alloy Mentors is a platform that independent organizations — such as volunteer tutoring programs, tutoring businesses, and sports teams — use to run their own programs. Each organization creates its own private workspace and manages its own members and students inside the App.

This creates an important distinction in how your data is handled:

The organization is the "controller" of its participants' data. When an organization signs up members or enters records about its students, that organization decides what information to collect and why. The organization is responsible for how that data is used within its program and for obtaining any consents required by law (including parental consent for children — see Section 6).
Alloy Mentors is the "processor." We store and process each organization's data on that organization's behalf, so the App can function. We do not use one organization's participant data for our own purposes, and organizations cannot see each other's data.

When you use the App, you interact both with us (as the provider of the software) and with the organization whose workspace you joined. If you have questions about how a specific organization uses your information, contact that organization directly.

2. Information We Collect

2.1 Information members provide at signup

When an adult joins an organization as a member (for example, a tutor, mentor, coach, or coordinator), we collect the information they enter during intake, which may include:

Name
Email address
Phone number
Birthday
School or institution
Grade or occupation
Subjects they can help with
Languages spoken
Availability (days and times)
Teaching or tutoring experience (optional)
Transportation method
T-shirt size
Emergency contact name and phone number

2.2 Guardian information for members under 18

If a member indicates they are under 18, we also collect a parent or guardian's name, email address, and (optionally) phone number, along with a record of which agreements were accepted. This lets the organization route required consent documents to the guardian for authorization before the minor participates.

2.3 Information about students

Organizations use the App to keep records about the students they serve. Students are often minors, and their records are entered by an organization's staff — not by the child. Depending on what the organization chooses to record, a student profile may include:

Name
Birthday
Grade level
School
Gender (optional)
Home or preferred language, and whether an interpreter is needed
Guardian name, phone, email, and relationship
Allergies, medical notes, and dietary needs
Photo (optional)
Subjects the student needs help with, and English proficiency level
Transportation method and emergency contact
Consent records (for example, photo/media release and emergency medical treatment authorization)
General notes about accommodations or anything a mentor should know

2.4 Information generated through use of the App

As people use the App, we also process:

In-app chat messages (direct messages, group chats, and organization-wide messages)
Session attendance and check-in records
Volunteer hour logs
Student progress notes, goals, and skills
RSVP responses to sessions
Push notification tokens (used only to deliver notifications you have enabled)

2.5 Information from optional sign-in providers

If you choose to sign in with Apple, Google, or LinkedIn instead of an email code, we receive only a verified identity token and basic profile details (your name and email) from that provider. We do not receive your password or other account data from those services.

2.6 What we do NOT collect

We want to be clear about what the App does not do:

We do not use advertising SDKs or show ads.
We do not use third-party analytics or tracking SDKs.
We do not track you across other apps or websites.
We do not sell your personal information.

3. How We Use Information

We use the information described above solely to operate and provide the service, including to:

Create and manage member and student profiles within an organization's workspace
Verify your email address (via a six-digit code) and authenticate your sign-in
Match students with available mentors and record session attendance
Track volunteer hours and student progress
Enable in-app messaging between members of the same organization
Send transactional emails and push notifications (see Section 4)
Keep participants safe (for example, surfacing allergy and emergency-contact information to the people running a session)
Maintain the security and integrity of the App

We do not use this information for advertising, profiling for marketing, or any purpose unrelated to running the service.

4. Email and Notifications

We send only transactional communications — messages necessary to operate the service. These include:

Email verification codes when you sign in
Guardian progress digests and notifications that organizations choose to send to families through the App
Push notifications for new messages and session reminders (only if you have enabled notifications)

We do not send marketing or promotional email. Emails are sent from an alloymentors.com address on behalf of the organization.

5. How We Share Information

We share information only as needed to run the service:

Within your organization. Your information is visible to the appropriate people in the organization whose workspace you joined, according to their roles. Organizations are isolated from one another.

With service providers ("sub-processors"). We rely on a small number of trusted third parties to provide core functionality. Each processes data only to perform its function for us:

Provider	Purpose	Notes
Supabase	Database hosting and authentication	Data is hosted in the United States. Data is encrypted in transit and at rest.
Resend	Sending transactional email	Receives the recipient address and message content needed to deliver the email.
Expo	Delivering push notifications	Receives the device push token and notification content.
Apple, Google, LinkedIn	Optional sign-in providers	Used only if you choose social sign-in. We receive only an identity token and your name/email.

For legal reasons. We may disclose information if required to do so by law, or to protect the rights, safety, or property of participants, the public, or Alloy Mentors.

We do not sell or rent personal information, and we do not share it for advertising.

6. Children's Privacy

Because organizations use the App to serve students who are often minors, we take children's data seriously and handle it carefully.

Children do not create their own accounts. Records about students, including children under 13, are entered by an organization's staff — not by the child. The App does not knowingly allow a child under 13 to independently create an account without organizational and guardian involvement.
Consent is obtained by the organization. The organization that enters a child's information is responsible for obtaining verifiable parental consent before collecting or sharing that child's personal information, consistent with the Children's Online Privacy Protection Act (COPPA) and any other applicable law. Alloy Mentors provides tools to record consents (such as photo/media and medical treatment authorizations), but the organization is responsible for actually obtaining those consents.
Minors who join as members. If a person under 18 joins as a member, we require a parent or guardian's contact information and route required agreements to the guardian for authorization before the minor is matched with a student.
We limit use. We use children's information only to operate the service for the organization and never for advertising, marketing, or profiling.

If you believe a child's information has been provided to us without appropriate consent, contact us at support@alloymentors.com and we will work with the relevant organization to address it, including deleting the information where appropriate.

7. Data Retention

We keep information for as long as it is needed to provide the service:

Member and student records are retained while the associated account and organization remain active.
You may request deletion of your information at any time, and you can permanently delete your own account from within the App (see Section 8).
When an account is deleted, the account and the records that belong to it are permanently removed. When an organization closes its workspace, its participant records are removed in accordance with that arrangement.
We may retain limited information for a short period where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

8. Your Choices and Rights

You have meaningful control over your information:

Access. You can view your profile information in the App. You may also request a copy of the personal information we hold about you.
Correction. You can update your profile in the App, or ask us or your organization to correct inaccurate information.
Deletion. You can permanently delete your account at any time in the App at Profile → Delete account. This erases your account. You may also email us to request deletion.
Notifications. You can turn push notifications on or off in your device settings.

To exercise any of these rights, use the in-app tools or contact support@alloymentors.com. Because organizations control their participants' data, some requests (for example, changes to a student record you did not create) may need to be directed to, or handled together with, the relevant organization.

9. Your Regional Rights (California and GDPR)

Depending on where you live, you may have additional rights. We honor these rights and, importantly, our practices already reflect their spirit — we do not sell personal information, we do not use it for advertising, and we collect only what is needed to run the service.

California residents (CCPA/CPRA). You have the right to know what personal information we collect, to access and delete it, and to correct inaccurate information. We do not sell or share personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.
European Economic Area / UK residents (GDPR). You have the right to access, correct, delete, restrict, or object to the processing of your personal information, and to data portability. Where we act as a processor, we handle your data on the relevant organization's instructions. Note that data is hosted in the United States (see Section 5).

To make a request, contact support@alloymentors.com. We will respond within the timeframe required by applicable law.

10. Security

We take reasonable measures to protect your information, including:

Row-level security that isolates each organization's data so organizations cannot access one another's records.
Encryption in transit and at rest through our database provider.
Access controls that limit information to the appropriate people within an organization.

No system can be guaranteed to be perfectly secure, but we work to protect your information and to promptly address any issues that arise.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top and, where appropriate, provide notice within the App. Your continued use of the App after an update means you accept the revised policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your information, contact us at:

Alloy Mentors Email: support@alloymentors.com Web: alloymentors.com