JEE App Privacy Policy

About this policy

Junior Enterprises Europe (“JEE”, “we”, or “us”) determines why and how personal data is processed in the JEE App and acts as the data controller for the app. This policy applies when you use the app and its account, networking, and conference features.

We process personal data under the General Data Protection Regulation (GDPR) and other applicable data protection laws. The legal basis depends on the feature and is described below.

Data we process

Account and profile

• Your first and last name, email address, and Firebase account identifier.
• Your password, handled by Firebase Authentication. JEE does not store it in your app profile.
• Your country and Junior Enterprise affiliation.
• Optional profile details you provide, such as a biography, LinkedIn profile, and profile photo.
• Your account role, conference access, profile visibility, privacy, and notification preferences.

Name, email, password, country, and Junior Enterprise affiliation are needed to create an account and provide conference access. A biography, LinkedIn profile, profile photo, and push notifications are optional.

Event and app activity

• Event or session registrations, attendance, check-ins, and participation status.
• Poll responses, votes, likes, connection choices, and badge achievements.
• Hotel and room assignments, roommate details, and related accommodation information where used for an event.
• Photos you submit to profile or photo-challenge features, and related challenge and like records.
• Feedback, feature requests, or bug reports, including screenshots you choose to attach.

Information supplied by event staff

Event organizers or authorized JEE staff may add or update event registration, attendance, check-in, participant, or accommodation information to administer a conference. This may include a participant’s name, email, country, Junior Enterprise, and notes related to a manual check-in.

Device and service information

• A push notification token, if you grant notification permission and register for notifications.
• Device platform and operating system, app version, and technical information needed to provide app updates.
• Requests to Firebase Authentication and other services may include IP address, user-agent, timestamps, and service identifiers for authentication, delivery, security, and abuse prevention.
• Expo Updates requests include operating-system and project information and a randomized update token.

Why we use data and our legal bases

• Provide the app and manage accounts: authenticate you, maintain your profile, grant conference access, and provide features you request. We rely on performance of our agreement with you and, where necessary, our legitimate interests in operating the service.
• Run conference features: manage registrations, attendance, check-ins, networking, polls, badges, photo challenges, and accommodation. We rely on performance of our agreement with you and our legitimate interests in administering events.
• Send service communications: deliver announcements and event updates, including push notifications when enabled. We rely on service functionality and, where required, your device permission or consent. You can withdraw notification permission in app or device settings.
• Respond to feedback and support requests: review and resolve feedback, feature requests, and bug reports. We rely on our legitimate interests in supporting, maintaining, and improving the app.
• Protect the service and meet legal duties: prevent misuse, secure accounts, respond to lawful requests, and keep necessary compliance records. We rely on legitimate interests and legal obligations, as applicable.

Who can see data and who we share it with

Other app users and event staff

Other participants may see profile information such as your name, country, Junior Enterprise, biography, and profile photo, subject to the app’s profile and visibility settings. Your LinkedIn link is shown according to your settings. Photo-challenge submissions and likes may be visible to participants in the relevant conference.

Authorized organizers and administrators can access information needed to run the conference. This may include account details, event participation, accommodation assignments, and feedback. Push tokens and authentication credentials are not displayed to other participants.

Service providers

• Google Firebase and Google Cloud: authentication, database, file storage, and account-deletion functions.
• Expo: push-notification delivery and app-update services.
• Google Maps: geocoding event or venue locations and providing map images.

These providers process information to provide services to JEE under their applicable service and privacy terms. Push-notification content and tokens are sent to Expo and the relevant platform provider to deliver a notification. We do not sell personal data or use it to serve third-party advertisements.

External links

If you open a LinkedIn, map, hotel, or other external link, that service receives information according to its own privacy policy. This policy does not cover activity after you leave the app.

Analytics, advertising, and location

The current app does not include a dedicated advertising, analytics, crash-reporting, or performance-monitoring SDK. Event records such as attendance, votes, connections, and likes are processed to provide those app features and administer events; they are not general screen-view or advertising tracking.

The app does not collect your device location. Map requests use event or venue locations supplied by organizers, not your GPS position. The native app does not use web-browser cookies.

International processing

Our service providers may process data in countries outside the country where you live, including outside the European Economic Area (EEA). Where applicable, transfers are made under the providers’ data-processing terms and appropriate transfer safeguards. Firebase Authentication, Firestore, Cloud Storage, and other Google services may have different processing locations and retention practices.

Security

We use authentication, access controls, and database rules to protect app data. Data sent between the app and Firebase, Expo, or Google Maps services is transmitted over encrypted HTTPS connections. Firebase services provide encryption at rest for stored data. No internet transmission or storage system can be guaranteed completely secure.

How long we keep data

• We keep account and profile information and related event records while your account is active and for as long as needed to administer the relevant conference or meet legal obligations.
• When you delete your account, the app’s deletion function removes the account and associated profile, event, check-in, feedback, voting, photo-challenge, accommodation, privacy-setting, and export data that it can identify. It also removes your user ID from connection lists on other participants’ profiles and deletes the Firebase Authentication account. Other participants’ unrelated account and profile data is not deleted.
• We retain a minimal, non-identifying record that an account deletion was completed. It does not include the deleted account’s UID or email address.
• Data-export files expire and are scheduled for deletion 30 days after creation.
• Service providers may retain technical or backup copies for limited operational, security, or recovery periods. Google states that Firebase Authentication keeps logged IP addresses for a few weeks and removes authentication data from live and backup systems within 180 days after the customer requests deletion of the associated account.

Your choices and privacy rights

• Access and portability: request or download an export of your app data from your profile’s Privacy & Data settings.
• Correction: update profile information in the app or contact us if it cannot be changed there.
• Deletion: in the app, open Profile → Privacy & Data → Delete Account. If you cannot use the app, email it@juniorenterprises.eu from the address linked to your account and request deletion.
• You may also have the right to restrict or object to certain processing, withdraw consent where we rely on it (without affecting processing carried out before withdrawal), and lodge a complaint with a supervisory authority. These rights depend on applicable law and circumstances.

You can change push-notification permissions in your device settings. Profile visibility and privacy preferences can be changed in the app. To exercise a privacy right or ask a question, contact us using the details below.

Children

The app is intended for people aged 16 and over. If you believe a person below that age has provided personal data through the app, contact us so we can review the situation.

Changes to this policy

We may update this policy when our data practices or legal requirements change. The current version and update date appear at the top of this page. We will provide additional notice through the app or another appropriate channel when required.

Contact us