Program records, handled with care.

Information we use

• Student roster information, including name, grade, program enrollment, and the mobile number used for one-time-code sign-in.
• Attendance, check-in time, points, opportunity participation, and corrections recorded by authorized staff.
• Staff identity, Google sign-in, program role, and an audit trail for staff actions.
• Limited security and diagnostic information needed to prevent abuse, operate sign-in, and investigate errors.

How the information is used

We use this information to authenticate enrolled students and invited staff, record attendance, calculate points, show program opportunities, prevent duplicate actions, protect accounts, and support the program.

Camera

Camera access is used only to read an entrance QR code. The app does not retain or upload a camera image and does not request your photo library or location.

No advertising or cross-app tracking

Maimonides Club does not sell personal information and does not use the app for third-party advertising or cross-app tracking.

Service providers

Infrastructure providers process limited information on our behalf: Supabase supports authentication, Cloudflare Turnstile helps prevent automated abuse, Vercel hosts the service, Google provides staff sign-in, and the configured messaging provider delivers student sign-in codes. We require providers to use information only to deliver their contracted services and to maintain protections consistent with this policy, their service terms, and their privacy commitments.

Retention and account changes

You can start account deletion directly from the Account screen in the iPhone app. Deletion removes your sign-in account, active access, contact credentials, PIN, and identifying profile details. It normally completes immediately; if an authentication provider is temporarily unavailable, access is removed immediately and deletion normally finishes within 24 hours.

Attendance and point history may be retained as pseudonymous program records, including corrections, so the program can preserve an accurate institutional ledger. These retained records no longer contain the deleted account's name, phone number, email address, PIN, or sign-in identifier. Staff access and identifying profile details are removed when a staff account is deleted.

Technical logs are retained only for the period needed for security, reliability, and provider operations. Active roster and account information is kept while a participant or staff member is enrolled or authorized. Historical program records are kept for the organization’s documented record-keeping period or as required by law, then deleted or anonymized when they are no longer needed.

Your choices and questions

You can sign out or start account deletion from the app at any time. To ask for access to or correction of program records, contact your program director, call Palm Beach Synagogue at (561) 838-9002, or email office@palmbeachsynagogue.org. Some pseudonymous attendance and point history may remain as an official program record.