Privacy policy

Who operates the service

GCIOBA Canada Inc., Ontario, Canada. Contact endo@gciobacanada.ca for privacy questions, corrections or deletion requests.

Demo accounts and sample records

The connected demo accounts use a separate Cloudflare review database containing sample people and content. Saved members, event responses, admin changes and activity are stored in that review database and can be shared across the two apps and with other reviewers and beta testers. Do not enter real personal information into the review workspace. Contact support to request deletion of review records. The optional offline preview in the member app stores its choices locally and has a reset option in Profile. Device backups may retain local app data according to your Apple settings.

Information used by the live service

Sign-in uses your email address and account identifier through Cloudflare Zero Trust. The live directory contains association-provided member names, class years, cities, professions, biographies and membership status. Approved members can view the directory when administrators enable it.

The service stores saved-member choices and event responses associated with the signed-in account. Administrators can manage member records, content, follow-ups and app settings. Administrator actions are recorded with the account, affected record, action and time for accountability.

When you contact support, we receive the details you choose to provide. Cloudflare processes technical request and security information, including IP addresses and sign-in events, to deliver and protect the service.

Why we use it

We use this information to authenticate approved users, operate the alumni network, support member connections and events, manage the association’s content, respond to support requests and protect access. We do not use it for advertising, sell it, or track you across other companies’ apps and websites.

Service providers and access

Cloudflare provides hosting, database storage and access control. Authorized association administrators can manage live records; approved members can view published directory and community information. The apps do not include advertising or third-party analytics SDKs. Apple operates TestFlight and may process beta feedback and diagnostics under its own terms and your device settings.

Service-provider processing may take place outside Canada. Network connections use HTTPS. Sign-in sessions are stored in the iOS Keychain. Administrative APIs check authorization independently of the app.

Retention and your choices

Live records are retained while needed to operate the association’s network, provide support and maintain security and accountability. Contact us to request access, correction or deletion. We may verify your identity and may retain records where needed for legal or security reasons. Signing out removes the app’s active sign-in session; it does not delete server records. Removing a saved member or cancelling an RSVP updates that live preference.

Device permissions and payments

These apps do not request access to your contacts, camera, microphone or precise device location. Directory cities are association-provided profile information, not GPS readings. The apps do not collect payment-card information or process donations.

Children and changes

The service is intended for alumni and association administrators and is not directed to children. Contact us if a child’s information was included in error. Updates to this policy will appear here with a revised effective date.