Privacy Policy

What we collect

When you use Merit, we collect the following information:

• Name, email address, and date of birth
• School name, grade, and graduation year
• Volunteer session records (date, organization, hours, activity)
• Supervisor contact information (name, phone, email)
• Service goal program and hour targets
• Payment information (processed securely by Stripe — we never store card numbers)

Why we collect it

We collect this information to:

• Verify your volunteer hours with your supervisors
• Generate PDF records for scholarship and school requirements
• Track your progress toward your service goal
• Send you account and verification notifications
• Process subscription payments (Pro and Premium plans)

Where your data is stored

Your data is stored in Canada using Supabase (ca-central-1 region). We use industry-standard encryption in transit and at rest. We do not transfer your data outside of Canada except where necessary to deliver transactional emails or SMS (e.g. Resend, Twilio).

We never sell your data

Merit does not sell, rent, or share your personal information with third parties for marketing purposes. Ever. Your data is used only to operate the Merit service.

Your rights

You have full control over your data:

• Export: Download all your data in JSON format at any time from Settings → Account.
• Delete: Schedule your account for permanent deletion from Settings → Account. Deletion completes within 30 days.
• Correct: Update your profile information at any time from Settings → Profile.

Minors

If you are between 13 and 17, we require parental or guardian consent before creating your account. We collect a parent or guardian email address and send a consent notification. We do not knowingly collect data from children under 13.

Contact

For privacy questions or data requests, contact us at privacy@merit.app.