Privacy Policy

Global SDGs Alliance participant app · Last updated 7 August 2026

Who we are

This app is run by Taiwan Institute of Innoactive Education (社團法人台灣永續創新行動教育協會), an incorporated association registered in Taiwan, unified business number 26879192, at 8F., No. 42, Xuchang St., Zhongzheng Dist., Taipei City, Taiwan. We run events under the name Global SDGs Alliance.

For anything in this policy, contact Jimmy Wei at privacy@sdgs-alliance.com.

Who this app is for

The app is used only by people taking part in the event: students, the teachers travelling with them, and our organising staff. Accounts are created by us and activated with an invitation code — there is no public sign-up. Many of the students are under 18. We collect nothing beyond what running the trip requires, we show no advertising, and we never make a student’s data available to anyone outside the organising team except as described below.

If you are a parent or guardian and want to know what we hold about your child, ask us at privacy@sdgs-alliance.com.

What we collect

• Account: your email address, a password (stored only as a salted hash by our authentication provider), the invitation code used to activate the account, and your role at the event.
• Profile: name, gender, date of birth, phone number and profile photo.
• Health and access: food allergies, dietary restrictions, health notes and accessibility needs. These fields are optional.
• Travel and safety: flight details, and your emergency contact’s name, phone number and relationship to you.
• Name-badge code. We give each participant a permanent six-character code and print it as a QR code on the name badge worn at the event. It is what a teacher’s phone reads when it scans the badge. The code identifies you for the whole trip, we generate it, and you cannot change it. It is an identifier, not a key — scanning it signs nobody in and reveals nothing on its own; what the person scanning can then see is decided by their own account.
• Group. Which team you are in, so that the app can show your team’s score and your teachers can see who is still missing at a roll call.
• Points records. Points are awarded to teams, not to individuals. Each entry stores the team, the number of points, the reason, the name of the teacher who recorded it, and the time. The reason is free text written by a teacher, and every participant can read every team’s entries — that is deliberate, so that a disputed score can be checked openly. A teacher’s note may mention a participant by name. Entries are never edited or erased: a mistake is corrected by adding a reversing entry, so the original stays visible.
• Roll-call records. When teachers count everyone in — boarding a coach, meeting at the airport, returning to the hotel — the app records, for each roll call, that you were counted, at what time, and by which teacher. Each roll call has a name typed by the teacher who opened it (for example “8/24 airport”). Together those two things can show roughly where a participant was at a given time. We are telling you this plainly because it is the most sensitive thing the app records about a student, even though it involves no GPS or any other location signal — the app never asks for or receives your device’s location. Roll-call records are visible only to teachers and organising staff, never to other participants.
• Other event activity: your room assignment, whether you have read an announcement, any “I am back safely” report you send during a team activity, and lost-item reports or claims you post.
• Device: if you allow notifications, a push notification token and whether your device is iOS or Android.
• Error diagnostics: when a screen in the app stops working, the app writes a record to our database so that we can find and fix it. That record contains the error message, the technical stack trace, which screen failed, whether you were on iOS, Android or the web, how many times it happened, and your user ID. It does not contain anything you typed, and it does not contain your device model or browser fingerprint.

We do not collect your location. We do not use advertising, analytics or tracking services of any kind, we do not sell or trade your data, and we do not use it for automated decision-making. Everything we hold is listed above: this app has no public profile wall, no questionnaires, and no coursework uploads, so it collects nothing of that sort.

How we use it

We use this data to run the event: to set up your account, publish the agenda, assign rooms and transport, count everyone in at roll calls so that nobody is left behind, keep the team points, send you event notifications, cater for your dietary and accessibility needs, reach your emergency contact if something happens, report participant numbers to the partners who funded the event, and keep a record of who took part. We process it to perform our agreement with you as a participant, and to keep participants safe. Your health and accessibility information we use on the basis of your consent.

Telling you about future events. When you activate your account you can tick an optional box to hear about future Global SDGs Alliance events. This is separate from running this event, so we do it only if you tick it, and we record that you did along with the date. Leaving it unticked changes nothing else. You can change your mind at any time by emailing privacy@sdgs-alliance.com and we will stop; every message we send will also tell you how to stop.

Most fields are optional, but some things will not work without them: without dietary or accessibility information we cannot cater for you or arrange adjustments, and without flight details we cannot arrange airport pickup.

Health, dietary and accessibility information

Food allergies, dietary restrictions, health notes and accessibility needs are sensitive personal data under Article 6 of Taiwan’s Personal Data Protection Act and Article 9 of the GDPR. You gave your consent to our collecting and using this information when you registered for the event. The fields in the app let you keep it up to date; you can change or clear them at any time under Profile › Health & diet (個人 › 健康與飲食), and you can withdraw your consent by contacting us.

This information is available only to members of the organising team, including the teachers travelling with the group, and only for these purposes: briefing caterers, arranging accessible rooms, venues and transport, and responding if you need medical help. A teacher who scans your name badge can open your allergy, dietary and emergency-contact details on the spot — that is what the badge is for in an emergency. In a medical emergency we may pass the relevant details to medical or emergency personnel — the law permits this to protect your life or health, and we will do it whether or not we can reach you at the time. We do not use this information for any other purpose, and it is never shown to other participants.

If you clear this information or withdraw your consent before or during the event, we may no longer be able to accommodate the need it described.

Who can see it

Other participants. There is no participant list or profile wall in this app, so other participants cannot look you up. What they can see is: every team’s points entries, including the reason a teacher wrote and that teacher’s name — and a teacher’s note may mention a participant by name; and, if you post or hand in a lost item, the name shown against that item. They cannot see your contact details, your date of birth, your health or dietary information, your flight details, your emergency contact, which team you are in, or any roll-call record.

Roommates. If you are sharing a room, the people in it can additionally see your name, your profile photo and your room number. They can see your phone number only if you turn on the separate “share my phone with roommates” setting on the Accommodation screen (住宿), which starts switched off.

Teachers and organising staff. Accounts we have marked as staff, organiser or administrator — which includes the teachers travelling with the group — can see participant records, including the health, dietary, travel and emergency-contact information described above, and all roll-call records. They can reach that information from the roster or by scanning a name badge. We keep the number of such accounts small, but we do not want to overstate it: at present these roles are not separated from one another by what they can read.

Who we share it with

We use Supabase, Inc. (database and sign-in), Cloudflare, Inc. (file storage and web hosting), Resend (delivery of account emails such as address confirmation and password resets), and Expo, Apple and Google (push notifications and app distribution). They process data on our instructions under contract and are required to protect it to a standard at least equal to ours. Their servers are outside Taiwan, including in the United States and the European Union, so your data is transferred internationally. We may also disclose data where the law requires it or where necessary to protect someone’s safety.

How long we keep it

Your account is designed to carry across events, so that you do not have to register again for the next one. That means different things happen to different parts of your data:

• Your account — sign-in details, name, date of birth, gender, contact details and profile photo — is kept for as long as you have an account with us. If you do not sign in for five years we treat the account as finished and delete it. You can delete it yourself at any time.
• Information we collect for a particular event — food allergies, dietary restrictions, health notes, accessibility needs, flight details, your emergency contact, your name-badge code, your room assignment and your roll-call records — is deleted one year after that event ends. The year is there so that anything arising from the event — an accident, an insurance claim, a dispute — can be dealt with while the records that explain it still exist. We ask again for each event rather than carrying it forward, because these things change and out-of-date information is worse than none: a kitchen with no allergy record will ask you, but a kitchen with the wrong one will not.
• Points records are kept as a long-term record of the programme. They are about teams, and the only person named in an entry is the teacher who recorded it, so they do not normally identify a participant — but a teacher’s free-text reason may mention someone by name, and we do not edit those entries after the fact. If an entry names you and you want it removed, email us.
• Push notification token — while you have notifications enabled on that device. It is removed when you sign out.
• Error diagnostics — we delete these after the event and its follow-up are finished, and we hold at most the 5,000 most recent records at any time. They are not part of the long-term record. We do this by hand rather than on a timer, so we are not going to promise you a specific day.

We may keep records for longer where the law requires it, or where they are needed to establish or defend a legal claim.

Your choices, and deleting your account

• You can change or clear most of your information yourself in the app at any time.
• You can withdraw your agreement to the optional fields by clearing them, and turn off notifications in your device settings.
• You can ask us to see, correct or delete your data, or to stop using it, by emailing privacy@sdgs-alliance.com.
• To delete your account, open Profile › Settings › Delete account in the app (個人 › 設定 › 刪除帳號). Your account is switched off immediately and deleted permanently seven days later; during those seven days you can sign in and cancel, and your data still exists. You can also email privacy@sdgs-alliance.com from the address you signed up with instead — we may ask you to confirm your identity first, and will complete the deletion within 30 days.
• What deletion removes, and what it leaves. Deleting your account removes your profile, your health, dietary, travel and emergency-contact information, your name-badge code and your roll-call records. Two things are not removed. Points entries stay, because they belong to a team rather than to you; and where you recorded or reported something for the event — a points entry you gave as a teacher, a lost item you posted — the entry stays and your name stays on it, so that the record still says who did what. Tell us if you want those removed as well. Records we are legally required to keep, or that no longer identify you, may also remain.

We answer requests to see or copy your data within 15 days, and requests to correct, stop or delete within 30 days, as Taiwan’s Personal Data Protection Act requires; either period may be extended once for complex requests. The first request is free; we may charge the necessary cost for repeated or excessive requests. If the GDPR applies to you, you also have the right to restrict or object to processing, to receive your data in a portable format, and to complain to your data protection authority.

Security

Traffic is encrypted with TLS, passwords are stored only as salted hashes, and access to records is controlled in the database rather than only in the app. Files you upload are served by web address, so anyone who has that address can open the file without signing in. No system can be made completely secure; if a breach occurs that is likely to affect you, we will notify you and the relevant authority as the law requires.

Changes

If we change this policy we will update the date at the top of this page, and tell you in the app or by email if the change materially affects you.