Privacy Policy

Greek Lifts ("Greek Lifts," "we," "us," or "our") operates the Greek Lifts mobile application and the website at greeklifts.app (together, the "Service"). This Privacy Policy explains what personal information we collect from chapter members, exec board users, and chapter administrators (collectively, "you"), how we use and share that information, and the choices you have about it.

By creating an account or using the Service you confirm that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

1. Information we collect

We collect information that you provide to us, information that is generated as you use the Service, and a limited amount of information from third-party providers that help us operate.

Information you give us

• Account information. When you create an account we collect your first and last name, email address, phone number, and the chapter and university you are affiliated with.
• Membership information. Once a chapter admits you, we store your role within the chapter (member, pledge, exec) and any chapter-specific attributes set by your exec board, such as designated-driver eligibility.
• Schedule and shift activity. The shifts you are assigned to, shifts you claim or release, shifts you list for a bounty, swap requests you send or accept, and ride requests you submit.
• Payment information. When you use paid shift transfers we collect billing details through our payment processor, Stripe. If you are receiving payouts, Stripe collects identity verification information directly from you and shares limited verification status with us. We do not store full card numbers or full bank account numbers on our servers.
• Communications. The contents of messages or support requests you send us, including the email address you use to contact us.

Information collected automatically

• Device and usage data. Device type, operating system version, app version, language, time zone, crash logs, and high-level usage analytics (for example, which screens were viewed).
• Location information. If you submit a ride request, we collect the pickup location you choose so drivers can find you. We do not track your location in the background.
• Push notification tokens. Required to deliver shift reminders and queue notifications to your device.

2. How we use your information

We use the information we collect to:

• Operate the Service, including scheduling, swaps, ride queueing, and payouts.
• Process payments for paid shift transfers and chapter subscriptions through Stripe.
• Send transactional messages such as shift reminders, swap confirmations, and payout notifications.
• Allow chapter exec to manage rosters, set the schedule, and apply or clear fines tied to attendance.
• Investigate and prevent fraud, abuse, or violations of our Terms of Service.
• Improve the Service through product analytics and customer support.
• Comply with legal obligations and respond to lawful requests.

3. Third-party service providers

We rely on a small number of trusted vendors to deliver the Service. Each processes data only on our behalf and under contract.

• Clerk — handles user authentication, password resets, multi-factor authentication, and session management.
• Supabase — hosts our application database and stores chapter, shift, and account data described above.
• Stripe — processes payments for paid shift transfers and the chapter subscription, and operates the Stripe Connect platform that handles payouts to members. Stripe's collection and use of payment data is governed by the Stripe Privacy Policy.
• Apple and Google — operate the App Store and Google Play and deliver push notifications to your device.

We do not sell your personal information, and we do not share it with advertising networks.

4. Information you share with other members

The Service is designed to coordinate activity within a chapter. Other members of your chapter can see your name, your shift assignments, and shifts you have listed for a bounty. Exec users can additionally see fines, payment status for chapter subscriptions, and roster details. Information is not shared with users outside your chapter.

5. Data retention

We retain personal information for as long as your account is active and for a reasonable period afterward in order to comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account profile data is retained until you delete your account.
• Shift, swap, and payment records are retained for at least seven years after the transaction date in order to comply with U.S. financial recordkeeping requirements.
• Crash logs and analytics events are retained for up to 18 months.

When the retention period ends we delete or de-identify the underlying records.

6. Your rights and choices

You can review and update most of your account information from within the app under Settings → Account. You also have the right to:

• Request a copy of the personal information we hold about you.
• Correct personal information that is inaccurate or out-of-date.
• Delete your account and the personal information associated with it, subject to the financial recordkeeping retention noted above.
• Opt out of non-transactional push notifications and email from within the app or your device settings.

To exercise any of these rights, email support@greeklifts.app. We respond to verifiable requests within 30 days.

7. Children's privacy

The Service is intended for users who are at least 18 years old. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. Security

We use industry-standard safeguards to protect your information, including TLS-encrypted transport, encrypted database storage at rest, scoped access controls, and multi-factor authentication for staff accounts. No system is perfectly secure; please notify us immediately if you believe your account has been compromised.

9. International users

The Service is operated from the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States by us and our providers.

10. Changes to this policy

If we make material changes to this Privacy Policy we will notify you through the app or by email before the changes take effect. The "Last updated" date at the top of this page always reflects the most recent revision.

11. Contact us

Questions about this Privacy Policy or our data practices? Email support@greeklifts.app and we will respond promptly.