Privacy Policy

1. Information We Collect

Account & identity

• Your name, email address, and profile photo.
• A unique account identifier, and the identifier from any sign-in provider you choose (Google, Apple, or Facebook).
• A phone number, only if you choose to link a phone sign-in method.

Content you create

• Tasks you post or volunteer for, including any location you choose for a task.
• Groups you create or join, and your participation in them.
• Messages you send, including direct messages between members.
• Photos you upload, and feedback you submit.

Contacts (only when you invite someone)

• If you choose to invite someone from your device contacts, you pick a single person and we use only that contact’s name, phone number, or email to pre-fill an invite message. Your contacts stay on your device — we never upload, store, or transmit them to Lightwork.

Device location (only when you tap “Use my location”)

• On the web and in our iOS and Android apps, you can tap “Use my location” to see organizations and help requests near you. Your device asks your permission first — When-In-Use only, never in the background — and nothing happens unless you allow it.
• For sorting organizations by distance, your location is used entirely on your device — we never send it to our servers, and we never share it with anyone.
• For your Help Out feed, we send a rounded-off, approximate version of your location to our database so it can look up what’s nearby — never your exact coordinates. That lookup isn’t stored as part of your account or history, and we don’t share it with anyone.
• We remember your last location on your own device so you don’t have to grant permission every time you open the app.
• You can change your mind any time: turn off location access for Lightwork in your device or browser settings, or use the manual town picker we show instead.

Information organizations provide about volunteers (no account required)

• If you volunteer with an organization that uses Lightwork to track service hours — for example, a church or nonprofit filing a grant report — that organization may add a record about you (your name, and often contact information) even if you don’t have a Lightwork account yourself.
• That information is the organization’s data about you, supplied on its own instruction. Lightwork holds and processes it on the organization’s behalf; the organization is responsible for you having been given any notice it owes you, and for responding if you want to access, correct, or delete it — see “If an organization added you as a volunteer” under Your Rights (Section 5).

Device & technical data

• Push notification tokens (so we can deliver notifications you opt into).
• Device and app information — device identifier, operating system, app version, and IP address.
• Crash reports, diagnostics, and performance data when something goes wrong.

Usage & analytics

• Aggregate, non-identifying interaction events (for example, which screens are opened) used to understand and improve the App. We do not include the content of your messages or another member’s identity in these events.
• On the web, cookies and similar analytics — see “Cookies & analytics” below.

2. How We Use Your Information

• Operating, maintaining, and improving the App.
• Connecting members and facilitating task collaboration and groups.
• Sending push and email notifications you’ve opted into.
• Analyzing aggregate usage to improve performance and reliability.
• Detecting, preventing, and responding to fraud, abuse, or safety issues.
• Answering your support questions and looking into reports — see “Staff access to your account” under Security.
• Complying with our legal obligations.

3. Cookies & Analytics (Web)

On the web we use Vercel Web Analytics & Speed Insights to understand aggregate traffic and page performance. They are first-party, set no advertising cookies, and never build a profile of you or follow you to other sites. We do not use Google Analytics on this site. Our mobile apps do not use these web cookies.

Because Lightwork is offered in the United States and is not marketed to people in the EU or UK, these analytics run by default rather than behind a consent banner. You can turn them off at any time using Turn off analytics in the footer of any page on this site. Withdrawal takes effect immediately, with no page reload — collection stops and the analytics scripts are unloaded. If we later offer Lightwork in a place that requires asking first, we will ask first.

On this marketing site we also remember which version of the home page you were shown, so we can tell which wording people find clearer. That is a single letter in an lw_hero_variant cookie — a group label, not an identifier, kept for 30 days. If you turn analytics off we stop setting it and delete it. Your choice itself is stored in an lw_analytics_consent cookie, so we can honour it.

In the mobile apps, the same choice lives on the Preferences screen, under Privacy → Analytics.

4. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

• Consent (for example, marketing, and web analytics wherever local law requires us to ask first).
• Legitimate interests in understanding aggregate site usage, where local law does not require consent — always subject to your right to opt out.
• Contract (to provide the services you request).
• Legal obligation (to comply with applicable law).
• Legitimate interests (to improve the App and keep the community safe).

5. Your Rights

Under the GDPR (EU/EEA users)

• Access your personal data.
• Correct inaccurate information.
• Delete your personal data (the “right to be forgotten”).
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.

Under the CCPA/CPRA (California residents)

• Know what personal data we collect and how it’s used.
• Access and receive a copy of your data.
• Request deletion of your data.
• Opt out of the sale or sharing of personal data — we do not sell or share your data.
• Correct inaccurate personal information.
• Limit the use of sensitive personal information.

You can exercise these rights in the App, or by emailing us at matt@mksolutionsky.com. See our Data Deletion Policy for how to delete your account.

If an organization added you as a volunteer

If an organization added a record about you as a volunteer and you don’t have a Lightwork account, we act as a processor for that organization, not as the party responsible for the record. To access, correct, or delete it, contact the organization directly. If you contact us instead, we’ll forward your request to the organization responsible for it rather than act on it ourselves.

6. How We Share Your Information

We do not sell your personal information. We share data only as described here:

• With other members: limited information (such as your name and profile photo) is visible when you post or volunteer for tasks, or participate in groups.
• With service providers (sub-processors) who help us run the App, listed below.
• With legal authorities, if required by law or to protect the rights, property, or safety of our members or the public.

Our mobile apps include Meta’s Facebook Login SDK so you can sign in with Facebook. That SDK is capable of collecting a device identifier for advertising; we disable that collection, so no advertising identifier is accessed and no tracking prompt appears.

7. Service Providers (Sub-processors)

We rely on the following providers to operate the App. Each acts on our behalf under data protection terms, and is not permitted to use your data for its own purposes:

• Google / Firebase — authentication, database, file storage, push delivery, and (on mobile) analytics and crash reporting. If you use “Use my location,” a rounded-off, approximate version of it is also sent here to look up nearby help requests.
• Apple — Sign in with Apple and Apple Push Notification service (iOS).
• Meta — Facebook Login (only if you choose it).
• Sentry — crash and error diagnostics.
• PostHog — product analytics in our mobile apps and on our website (usage and feature-adoption events; no message content, and no identifier beyond your account identifier — browsing the website while signed out creates no profile at all).
• Google Maps & Places — task location selection and map display.
• Mailgun — sending invitation emails.
• Vercel — web hosting and web analytics.

8. International Transfers

Lightwork is operated from the United States, and your data may be transferred to and stored in the U.S. Where required, we use appropriate safeguards, such as Standard Contractual Clauses, to protect your data.

9. Data Retention

We retain your personal data only as long as necessary for the purposes described above, or as required by law. You may request deletion of your account and associated data at any time — see our Data Deletion Policy.

Volunteer records an organization adds for you follow a different rule once they’re attached to a filed report: federal grant-reporting requirements (2 CFR § 200.334) require the organization to retain those records for three years from the date its related report is filed. We retain a filed record for that period even if you ask us to delete it. Any part of your record that hasn’t been attached to a filed report is deleted on request like any other data.

10. Security

We implement technical and organizational measures to safeguard your data, including encryption in transit, access controls, and secure storage. No system is completely secure, but we work to protect your information and to respond promptly to any incident.

Staff access to your account

To answer a support question or look into a safety report, an authorized member of our team may open your account and see it the way you see it — including your groups, your tasks, and your messages. That access is read-only: we can look, but we can’t post, send a message, or change anything as you. Every time it happens we record who looked, whose account it was, why, and when.

11. Children’s Privacy

Lightwork is not intended for children under 13. We do not knowingly collect personal information from anyone under 13, and the App applies an age gate at sign-up. Members aged 13–17 should use Lightwork only with the involvement and consent of a parent or legal guardian. If you believe a child under 13 has provided us personal information, contact us and we will delete it. See also our Child Safety Standards.

We don’t collect or store an age for anyone in a volunteer record an organization adds — organizations are responsible for their own volunteers, including any minors. If that record is later claimed as a Lightwork account, the same 13+ sign-up requirement above applies.

12. Your Privacy Controls

• Access, update, or delete your account information in the App.
• Change your notification preferences at any time.
• On this website, turn analytics off (or back on) at any time from the “Turn off analytics” control in the footer.
• In the mobile apps, change the same setting from Preferences → Privacy → Analytics.
• Request a copy of your data (data export).

13. Changes to This Privacy Policy

We may update this policy periodically. If we make material changes, we’ll notify you by email or in-app notification and update the “Last updated” date above.

14. Contact Us

For questions, data requests, or complaints, email us at matt@mksolutionsky.com.

MK Solutions, LLC · Richmond, KY