Privacy Policy

Information we collect

When you use the site we may collect:

• Account information — your name, email address, and a password (stored securely by our authentication provider; we never see plaintext passwords).
• Volunteer activity— the hours you log (activity, date, location, optional notes), the opportunities you sign up for or mark as “considering,” and the organizer email you provide when requesting verification.
• Form submissions — chapter applications, Joy Visit requests, and contact-form messages, including any information you choose to include.
• Technical information — standard server logs from our hosting provider (IP address, browser, pages visited) used to keep the site running and secure.

We do not collect medical records, patient names, or any protected health information.

How we use information

• To create and manage your volunteer account.
• To track and verify volunteer hours so chapters and schools can recognize service.
• To coordinate opportunities and Joy Visits with hospitals, organizers, and special guests.
• To send you transactional emails (sign-up confirmation, application status, contact replies). We do not send marketing emails.
• To improve the program based on aggregate, non-identifying usage patterns.

Who we share information with

We share information only with the service providers that make the site work, and only to the extent they need it to provide that service:

• Supabase — stores account, hours, and form data in a secure Postgres database.
• Vercel — hosts the website and processes requests.
• Resend — sends transactional emails on our behalf.
• Hospitals and approved partner organizations — when you sign up for a specific opportunity or Joy Visit, relevant details (your name, email, and activity) may be shared with the host so they can include you.

We do not sell personal information, and we do not share it with advertisers.

Children's privacy

Help 4 Health is designed for student volunteers and serves children in hospitals. Volunteers under the age of 18 should have a parent or guardian's permission to create an account.

We do not knowingly collect personal information from children under 13 without verifiable parental consent (as required by the U.S. Children's Online Privacy Protection Act, or COPPA). If you are a parent or guardian and believe your child under 13 has provided us information, please email hello@help4health.net and we will delete it promptly.

For Joy Visits and any program involving identifiable information about a hospitalized child, we require approval from the hospital or partner organization and parent or guardian permission before any visit, message, or photo is shared.

Your choices and rights

• Access or update — sign in to view and edit your account information.
• Delete — email hello@help4health.net to request deletion of your account and associated data.
• Export — request a copy of the data we hold about you.
• Withdraw consent — stop using the site at any time.

Cookies and similar technology

We use a small number of strictly necessary cookies to keep you signed in. We do not use third-party advertising or analytics cookies.

Security

We rely on our hosting and database providers' industry- standard security practices (encrypted connections, encrypted data at rest, role-based access). No system is 100% secure; please use a unique password and report any suspicious activity to hello@help4health.net.

Changes to this policy

If our practices change in a meaningful way, we will update this page and the “last updated” date above. If the change is material, we will notify active accounts by email.

Contact

Questions, concerns, or requests about this policy can be sent to hello@help4health.net or through our contact form.