Privacy Policy

Version: v1.0 · Effective: 2026-05-10 · Last updated: 2026-05-10

This Privacy Policy describes how NB SAI ("NB SAI", "we", "us") handles personal information when you use the NB SAI iOS application and related services. NB SAI is operated by NYRAI LLC in support of a Sai Baba community organization.

What we collect

• Account data: full name, email address, phone number, password (stored only as a salted hash by our auth provider).
• Role assignment: Member, Teacher, or Officer. Teacher and Officer accounts require approval by an existing Officer.
• Activity records: posts you author, volunteer sign-ups, event RSVPs, devotion-slot sign-ups.
• SSE class records (involves minors aged 6–18): attendance (Present / Late / Absent / Unmarked) and class notes written by Teachers. Notes are visible only to co-Teachers of the same group; they are never shown to Members, Officers, or to the students/families themselves through the app. A parent/guardian/leader consent is captured at sign-up before any minor data is recorded.
• Donations: amount, payment method (PayPal / Apple Pay / Venmo / Zelle / Bank Transfer / Card), and whether the donation is recurring. We do not store full card numbers; payment processors handle those.
• Consents: each time you accept a versioned legal document (this Privacy Policy, the Terms of Service, the Liability Disclaimer, the Minor-Data Consent), we record the kind, version, timestamp, and IP address for audit purposes.
• Standard server-side metadata: timestamps, Supabase-side request logs, and crash diagnostics.

What we do NOT collect

• We do not access your location.
• We do not access your contacts, photos, microphone, or camera unless you explicitly upload an image — and the prototype build does not yet expose camera/photo upload.
• We do not run third-party advertising trackers.
• We do not sell, rent, or share your personal information with advertisers, data brokers, or any third party for marketing purposes.

How we use it

• To operate the app's core features (sign-in, posts, sign-ups, attendance, donations).
• To send transactional emails (sign-up confirmation, password reset OTP, donation receipts).
• To audit consents in compliance with applicable law.
• To respond to your support requests.

Children's data

NB SAI is designed for adult members, teachers, and officers — not for direct use by children under 13. Records about minors (attendance, class notes) are entered by adult Teachers and viewable only by co-Teachers of the same group. A parent/guardian consent must be captured at sign-up before any minor data is recorded; see the Minor-Data & Photo Consent document.

Third-party processors

• Supabase — database, auth, storage. See Supabase's Privacy Policy.
• Apple Push Notification Service — once push notifications launch.
• Payment processors — PayPal, Apple Pay (via Apple), Venmo, Zelle (via your bank), and ACH partners. Each processor has its own privacy policy, which governs handling of payment data.

Your rights

• Access: tap "Download my data" in your Profile to receive a JSON export of your account data.
• Deletion: tap "Delete my account" in your Profile. Your account, posts, sign-ups, and donation history are deleted within 30 days. Aggregated attendance counts may be retained without personally identifying information.
• Consent withdrawal: you may withdraw consent for non-essential processing by deleting your account. Some consents (e.g., to the Terms of Service) are required to continue using the app.
• California (CCPA) and EU (GDPR) residents: you have additional rights to access, correct, and port your data. Contact hello@nyrai.ai to exercise these rights.

Retention

• Account + activity data: retained while your account is active, deleted within 30 days after account deletion.
• Donation records: retained for 7 years per IRS recordkeeping rules for 501(c)(3) organizations.
• Consent audit records: retained for 7 years for legal-defense purposes.

Security

All traffic between the app and our backend is encrypted in transit (TLS 1.2+). Passwords are stored as salted hashes (handled by Supabase Auth). Database access is governed by Row Level Security policies. We do not have access to your plaintext password.

Changes

If we make material changes to this Privacy Policy, we will bump the version number, update the "Last updated" date, and require you to re-accept before continuing to use the app.

Contact

Privacy questions: hello@nyrai.ai