Privacy Policy

1. Introduction

The HOSA Hub (“the Hub,” “we,” “us”) is a chapter workspace and competitive-event practice tool for HOSA (Future Health Professionals) chapters. This policy explains what information we collect when you use the Hub, how we use it, and the choices you have.

2. Information We Collect

When you create an account and use the Hub, we collect:

• Account info: display name, email address, and password (handled by our authentication provider, we never see or store your password in plain text).
• Profile info you choose to add, like a profile picture.
• Chapter data: which chapter(s) you're a member of and your role (advisor, officer, or member).
• Activity on the Hub: practice attempts, flashcard decks and study sessions, questions you submit, assignments, and messages you send through the contact form.
• Basic technical info (browser type, device) needed to keep the Hub working correctly.

3. How We Use Your Information

We use this information to:

• Operate core features: your dashboard, practice history, flashcard decks, and the leaderboard.
• Run your chapter workspace: announcements, calendar, assignments, and roster management for advisors and officers.
• Review member-submitted practice questions before they're published.
• Respond to messages sent through the contact form.
• Maintain the security and reliability of the Hub.

We do not use your data for advertising, and we do not sell it.

4. Sharing Your Information

We don't sell or trade your personal information. Within a chapter, your advisor(s) and officers can see roster, attendance, and progress data for that chapter as part of running it, that's the core purpose of the workspace. We also share data with the infrastructure providers that host the Hub (database, authentication, and file storage), solely to operate the service, and only to the extent needed to do so.

5. Children's Privacy (FERPA/COPPA)

Many Hub users are minors. Creating an account requires confirming you are 13 or older, and we record that confirmation. We do not knowingly collect personal information from children under 13; if we learn that we have, we delete it. Parents and guardians may contact us to review or delete a student’s information. We collect only what's needed to run the product, and chapter-level data (roster, attendance, grades on assignments) is visible only to that chapter's advisors and officers, similar to how a school would handle student records under FERPA. If you're a parent or guardian with questions about a student's data, contact us below.

6. Cookies and Analytics

We use only strictly necessary cookies, the ones that keep you signed in and keep your session secure. These are set by our authentication provider and the Hub will not work without them, so they are not optional and we do not ask for consent to set them.

For traffic measurement we use Vercel Web Analytics, which is cookieless: it records aggregate page views without setting cookies, without fingerprinting, and without building a profile of you across sites. We do not use advertising, retargeting, or social media tracking pixels, and we do not sell or share personal information for behavioural advertising.

Because we set no advertising or analytics cookies, there is nothing here to opt out of. See our Cookie Policy for the full list.

7. Service Providers

We share data with a small number of providers solely to operate the Hub:

• Supabase — account authentication, database hosting, and file storage.
• Vercel — application hosting and cookieless traffic analytics.
• Anthropic — AI processing for drafting practice questions and portfolio feedback. Guideline text and the specific content you submit for feedback are sent to generate a response; we do not send your account details, and this content is not used to train their models.
• Resend — transactional email, such as contact-form notifications.

We do not sell your personal information or share it with advertisers.

8. Data Retention

We keep your account information for as long as your account is active. If you delete your account, your profile and personal activity (practice attempts, flashcards, chapter memberships, submissions) are deleted. Practice questions you contributed to the shared bank remain available to other students but are no longer linked to your name. Backups may retain deleted data for a short period before being overwritten.

9. Your Rights and Choices

You can, at any time:

• Access and correct your profile from Account settings.
• Delete your account and data from Account settings. This is immediate and cannot be undone.
• Request a copy of your data, or ask us to delete it on your behalf, by using the contact form below.

Depending on where you live (for example, under the GDPR or the CCPA) you may have additional rights, including to object to or restrict processing. We honour these requests for all users regardless of location, and we will not discriminate against you for exercising them.

10. Security of Your Information

We use reasonable administrative and technical safeguards, including delegating password storage and authentication to a dedicated auth provider rather than handling credentials ourselves, to protect your information. No system is perfectly secure, so we can't guarantee absolute security.

11. Changes to This Privacy Policy

If we make material changes to this policy, we'll update the “Last updated” date above and, where appropriate, let chapter advisors know.

12. Contact Us

Questions about this policy? Email hosahub@gmail.com or use the contact form.