1Who We Are

Vitality is a youth-led 501(c)(3) nonprofit that runs yearlong research and service programs for high school Members. MyVitality is our member portal. This notice explains what MyVitality keeps about the people who use it and how we protect it.

2What We Collect

• Members: name, research email address, school and graduation year, Committee and title, Curriculum work and sign-offs, readings, service hours, meeting attendance and check-ins, papers, competition results, internships, requests and filings, trip participation, dues and payments, an optional photo for the Vitality Card, and anything they add to their CV.
• Parents and guardians: name, email, relationship to the Member, consent and permission signatures, and the emergency and medical information they choose to provide for trips.
• Applicants: everything in the application, recommendation letters, interview notes, reader scores, and the decision.
• Recommenders: name, email, relationship to the applicant, and the letter.
• Workshop families: the parent's name, email and optional phone, and the child's first and last name, grade, any notes the parent gives, and photo consent.
• Coaches and chaperones: name, email, and the dates of background checks and trainings.
• Technical data: sign-in times, the activity log of approvals and changes, and error reports. We do not use advertising or tracking cookies; the only cookie keeps you signed in.

3How We Use It

Only to run Vitality: admissions, membership, the Curriculum, governance, trips, safety, records such as the CV and Body of Service, letters and verifications a Member asks for, and messages about these things. Members and parents choose which optional emails they receive in Settings.

4Who Can See It

• Each person sees their own record. Parents see their child's record.
• Coaches and Committee Chairs see the records of their own program only. Members of a program see each other's names, Committees and roles.
• Medical and emergency information, financial aid, Honor Code matters, incident reports and staff advising notes are limited to the program's Coaches and the National Team.
• Recommendation letters are seen only by the program's readers. An applicant who waived the right to read a letter never sees it.
• Nothing is public unless a person chooses it: a CV can be shared by link, a Vitality Card can be verified by its QR code, and a paper appears on the Vitality Research page only after every author agrees.

5Children Under 13

Children under 13 never have MyVitality accounts. For workshops, a parent/guardian registers the child, and we collect only what is needed to run the workshop safely. A parent may review or delete their child's workshop information at any time; contact your program's Coach or the National Team.

6Service Providers

We use a small number of providers to run MyVitality: a hosting company for the application and database, an email service to send sign-in links and notices, file storage for uploads, and, if a family pays dues online, Stripe for payment. Card numbers go directly to Stripe and never touch MyVitality. These providers process data only on our behalf.

7What We Never Do

• We never sell or rent personal information.
• We never show advertising.
• We never send a Member's record to a school, employer or program unless the Member asks for a letter or verification.

8How Long We Keep It

Member records are kept as the permanent record of service, like a transcript, so that letters and verifications can be issued later. Unsuccessful applications, workshop registrations and error reports are deleted on a schedule set by the National Team. A person may ask for their account to be closed and their information deleted, except what we must keep by law or to keep financial records accurate.

9Your Choices

• Download everything MyVitality holds about you from Settings.
• Correct your profile, change your sign-in address, and choose your email notifications in Settings.
• Turn CV sharing and card verification on or off at any time.
• Ask for corrections or deletion: contact your program's Coach or the National Team.

10Security

Sign-in uses single-use emailed links, so there are no passwords to steal. Access is checked on the server for every page and file. Uploads are checked by their contents, and every approval, decision and change of address is recorded in the activity log.

11Changes

If this notice changes in a way that matters, we will tell Members and parents by email before it takes effect.

12Contact

For any question about privacy, contact your program's Coach or the National Team.