LeoLink ("we", "our", or "us") is operated by the University of Moratuwa Leo Club. This Privacy Policy explains how we collect, use, and protect your information when you use the LeoLink mobile application.
By using LeoLink, you agree to the collection and use of information described in this policy.
1. Information We Collect
We collect the following information when you register or use LeoLink:
- Account information: Full name, email address, Leo Club membership details (club, district, role)
- Profile information: Profile picture (uploaded voluntarily)
- Contact details: Phone number (optional)
- Usage data: Events you view or interact with, announcements you read
- Device information: Device type and operating system version (for crash reporting)
2. How We Use Your Information
We use your information to:
- Create and manage your LeoLink account
- Display your profile within your Leo Club and district
- Send you event announcements and club notifications
- Allow club and district administrators to manage membership
- Improve app performance and fix technical issues
We do not use your data for advertising or sell it to third parties.
3. How We Share Your Information
Your information is shared only in the following limited ways:
- Within your Leo Club: Your name, role, and profile picture are visible to members of your club, district, or multiple district as appropriate to your membership level.
- Cloudinary: Profile pictures and club/district logos are stored using Cloudinary's image hosting service.
- Render: Our backend API is hosted on Render.com.
- MongoDB Atlas: Your account data is stored in a secure MongoDB Atlas database.
We do not share your personal information with any other third parties.
4. Data Storage and Security
Your data is stored on secure servers. We use industry-standard security measures including:
- Encrypted passwords (bcrypt hashing — passwords are never stored in plain text)
- JWT-based authentication with expiry
- HTTPS encryption for all data in transit
- Rate limiting to prevent unauthorized access attempts
While we take reasonable steps to protect your data, no method of transmission or storage is 100% secure.
5. Data Retention
We retain your account data for as long as your account is active or as needed to provide the service. If you request account deletion, we will remove your personal information within 30 days, except where retention is required by law.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Withdraw consent for optional data (e.g., profile picture) at any time
To exercise any of these rights, contact us at the email address below.
7. Children's Privacy
LeoLink is intended for Leo Club members who are typically 14 years of age or older. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the effective date at the top of this page. Continued use of LeoLink after any changes constitutes your acceptance of the updated policy.
9. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
- Email: uomleoclub@gmail.com
- Website: www.uomleos.org
- Organization: University of Moratuwa Leo Club, Sri Lanka