Security and privacy
How we protect the people in your programs
This page describes the product as it works today — not a certificate we have not earned, and not a promise about a future audit.
As shipped These claims match the running software. They are not a legal privacy policy and not an independent certification. The website-only policy stays at Privacy.
Encryption
Identity — names, emails, phone numbers, dates of birth — is encrypted with AES-256-GCM before it is stored. Each value gets its own random initialization vector, so two people with the same name do not produce the same ciphertext. Traffic between you and LogikPal is HTTPS. We require TLS 1.3 on the hosting stack.
One organization cannot see another
Each nonprofit’s rows are isolated in the database itself. Application code is not the only lock. A query from one organization cannot return another organization’s people, attendance, or reports.
Roles are fixed
There are five roles. Organizations cannot invent, rename, or mix them. A Volunteer only acts in the programs they belong to.
Volunteer Program Manager Administrator Evaluation Consultant Participant
An append-only record of person data
Every read, write, and deletion of person data is recorded. The log shows that an identity was looked at, by whom and when — not the name that was looked at. Those entries cannot be edited or deleted by the running system.
Small groups stay hidden
If a figure would cover fewer than five people, we do not show it. The underlying count is not available in the interface or the API. Five is the lowest an Administrator can set that threshold.
Insufficient data Fewer than five people. The count is not shown.
You can take your data. Deletion is real.
An Administrator can export a complete, openable archive. Deleting a person or closing an organization removes the rows. What remains is an audit entry without names, emails, phones, or dates of birth.
Consent, including for minors
A young person is not added without the required consent. Under 13 needs a guardian who holds consent authority. Guardian consent does not quietly continue after the age of majority — the person is asked again.
Independent review
We have not completed an independent security certification. Publishing a badge we do not have would be the wrong kind of trust. We will seek independent review; until then this page is the honest record.