Privacy Notice

1. Introduction and Scope

This Privacy Notice explains how Oyu Intelligence LLC (“Operator,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal information in connection with the JCI Mobile App (the “App”), available at jci.oyu.ml.

The App is designed for JCI members, community users, event participants, administrators, and guests to access JCI-related information, events, announcements, resources, communication features, membership activities, and app-based services.

This Privacy Notice applies to the App on iOS and Android, related in-app features, and any linked services that refer to this Privacy Notice. It does not apply to third-party websites, services, or platforms that have their own privacy policies.

2. Who Operates the App

The App is operated by Oyu Intelligence LLC. The Operator is responsible for deciding how personal information is processed through the App, except where a third-party provider acts independently under its own terms and privacy policy.

Website: https://www.oyu-intelligence.com/en. Privacy and legal contact: support@oyu.ml.

3. What Information We Collect

Depending on the features used, the App may collect the categories of information listed below. Not every category applies to every user or every version of the App.

• Account and identity information, such as name, email address, phone number, username, password or authentication information, and login status.
• Membership and profile information, such as JCI chapter, organization, position or title, membership status, profile details, and profile photo.
• Event and activity information, such as event registration details, attendance and check-in records, preferences, feedback, survey responses, and participation history.
• Communications and support information, such as messages, inquiries, support requests, administrator communications, uploaded images or files, and other user-submitted content.
• Device and technical information, such as device type, IP address, app version, operating system, language settings, usage logs, diagnostics, and crash reports.
• Notification and communication preferences, such as push notification settings, email/SMS preferences, and topic preferences.
• Payment or transaction-related information, where the App supports event tickets, dues, donations, subscriptions, or other paid services. Payment card or banking data is processed by our payment provider (QPay) rather than stored directly by the Operator.
• Location or map-related information, where the App supports nearby events, navigation, check-ins, or location-based recommendations. Where required, location access is requested through device permissions.

4. How Information Is Collected

We collect information directly from users, automatically through the App, and from authorized third-party services.

• Directly from users when they create an account, complete a profile, register for an event, submit feedback, upload content, contact support, or use interactive features.
• Automatically when users use the App, including through app logs, analytics, device identifiers, crash reporting, similar technologies where applicable, and server-side records.
• From administrators, JCI chapters, event organizers, or authorized partners when they manage events, memberships, attendance, or user access through the App.
• From third-party providers when users sign in, pay, receive notifications, use maps, or interact with services integrated into the App.

5. How We Use Information

We use information to operate, secure, improve, and support the App and related services. Depending on the feature, we may use information to:

• Create, authenticate, and manage user accounts.
• Display user profiles, membership details, chapter information, event records, and app-based resources.
• Process event registrations, attendance, surveys, feedback, and related communications.
• Send push notifications, service messages, announcements, reminders, and updates according to user preferences and legal requirements.
• Provide customer support, respond to inquiries, investigate issues, and resolve technical problems.
• Analyze App performance, improve usability, understand feature usage, detect errors, and maintain security.
• Process payments, donations, tickets, dues, subscriptions, or refunds, where applicable.
• Prevent fraud, unauthorized access, misuse, security incidents, and violations of our Terms and Conditions.
• Comply with legal obligations, enforce agreements, and protect the rights, safety, and legitimate interests of users, the Operator, and authorized partners.

6. Legal Basis for Processing, Where Applicable

Where data protection laws require us to identify a legal basis for processing, we may rely on one or more of the following, depending on the context:

• Consent, such as when a user enables push notifications, allows location access, submits optional profile information, or agrees to receive certain communications.
• Contractual necessity, such as when processing is needed to provide the App, manage accounts, register users for events, or deliver requested services.
• Legitimate interests, such as improving the App, maintaining security, preventing misuse, communicating service updates, and supporting operational administration, where those interests are not overridden by user rights.
• Legal obligation, such as when we must retain or disclose information to comply with applicable law, regulatory requirements, accounting rules, or lawful requests.
• Vital or public interests, only where recognized by applicable law and relevant to safety, emergency, or community protection contexts.

7. How We Share Information

We do not sell personal information in the ordinary meaning of that phrase. We share information only as needed for the App, legal compliance, safety, or user-requested functionality.

• With authorized administrators, chapter representatives, event organizers, or internal team members who need access to operate the App or manage events and services.
• With third-party service providers that host, process, analyze, secure, communicate, or support the App on our behalf.
• With payment processors, app stores, or transaction providers where payments, subscriptions, donations, dues, or tickets are supported.
• With other users where the user intentionally makes information visible, such as profile details, event participation, messages, or uploaded content in community or event features.
• With legal authorities, courts, regulators, or other parties where required by law or necessary to protect rights, safety, property, or the integrity of the App.
• In connection with a merger, restructuring, transfer, or similar organizational change, subject to appropriate safeguards and notice where required.

8. Third-Party Service Providers

The App may use third-party providers for cloud hosting and databases, authentication, analytics, crash reporting, push notifications, email or SMS communications, payment processing, maps and location features, and distribution through the Apple App Store and Google Play. These providers may process information according to their own contracts and privacy policies.

Provider categories include cloud hosting and database services, authentication services, analytics and crash-reporting tools, push notification services (such as Firebase Cloud Messaging and the Apple Push Notification service), email/SMS delivery, the payment provider QPay, maps and location services, the Apple App Store, and Google Play.

9. Payments and Transactions, Where Applicable

Where the App supports paid services, event tickets, membership dues, donations, or subscriptions, payment information is processed by our payment provider, QPay (or by Apple or Google where their in-app billing applies). We may receive limited transaction details such as payment status, transaction ID, amount, currency, and invoice or receipt details.

Unless specifically stated otherwise, we do not store full payment card numbers or sensitive banking credentials. Users should review the applicable payment provider’s terms and privacy policy before completing a transaction.

10. Push Notifications and Communications

The App may send push notifications, in-app messages, emails, SMS messages, or other communications about account activity, events, announcements, reminders, updates, security notices, and service-related matters.

Users can manage push notification permissions through device settings and can manage certain communication preferences inside the App. Some essential service or security communications may still be sent where legally permitted or required.

11. Analytics, Cookies, Tracking, and Diagnostics

We may use analytics, similar technologies where applicable, device identifiers, server logs, and crash-reporting tools to understand how the App is used, diagnose issues, measure performance, improve features, and maintain security.

Where required by law, we will request consent for certain analytics or tracking technologies. The App is configured to match the Operator’s actual analytics and consent practices.

12. User-Generated Content and Uploaded Files

Users may submit messages, comments, inquiries, images, documents, feedback, survey responses, or other content through the App. Users should avoid uploading sensitive information unless it is necessary for the relevant feature.

User-generated content may be visible to administrators, event organizers, support teams, or other users depending on the feature. The Operator may review, remove, restrict, or retain user content where needed to operate the App, enforce rules, protect safety, respond to support requests, or comply with law.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Notice, unless a longer retention period is required or permitted by law.

Retention periods may depend on the type of information, account status, event participation history, legal requirements, security needs, dispute resolution, accounting obligations, and backup practices.

14. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These may include access controls, secure authentication, encryption in transit where applicable, monitoring, provider security practices, and internal access restrictions.

No mobile app, internet transmission, or storage system can be guaranteed to be completely secure. Users should keep their login credentials confidential, use strong passwords, and notify us promptly of any suspected unauthorized access.

15. International Data Transfers, Where Applicable

The App and its third-party providers may process or store information in countries other than the user’s country of residence. These countries may have different data protection laws.

Where required, we use appropriate safeguards for international transfers, such as contractual protections, provider commitments, or other lawful transfer mechanisms recognized by applicable law.

16. User Rights and Choices

Depending on applicable law and location, users may have rights to access, correct, update, delete, restrict, object to, or receive a copy of their personal information, and to withdraw consent where processing is based on consent.

To exercise privacy rights, users may contact us at support@oyu.ml. We may need to verify the user’s identity before responding. Certain information may be retained where required for legal, security, fraud prevention, dispute resolution, backup, or legitimate operational reasons.

• Account information may be updated through the App where that functionality is available.
• Push notifications may be managed through device settings and app preferences.
• Location access may be managed through device settings.
• Marketing or optional communications may be controlled through available unsubscribe or preference settings, where applicable.

17. Children and Minors

The App is intended for JCI members and community users aged 18 and over and is not directed to children below that age, unless permitted by applicable law and supported by appropriate parental, guardian, chapter, or organizational authorization where required.

If we learn that we have collected personal information from a child or minor in a manner not permitted by law, we will take reasonable steps to delete or restrict that information. Parents or guardians may contact us at support@oyu.ml with concerns.

18. Account Deletion and Data Deletion Requests

Users may request account deletion or deletion of personal information by using any in-app account deletion feature, if available, or by contacting support@oyu.ml. The request should include enough information for us to verify the account and process the request.

After account deletion, some information may remain in backups, logs, transaction records, event records, legal records, or anonymized/aggregated analytics where retention is permitted or required, consistent with Apple App Store and Google Play requirements.

19. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in the App, legal requirements, operational practices, or third-party services. The updated version will be identified by a new “Last updated” date.

Where required by law or where changes are material, we may provide additional notice through the App, by email, or by other reasonable means. Continued use of the App after an updated Privacy Notice becomes effective means the updated notice applies from that date.

20. Contact Information

For privacy questions, requests, or concerns, users may contact:

Oyu Intelligence LLC

Email: support@oyu.ml

Website: https://www.oyu-intelligence.com/en

21. Optional Calendar Connections

Where available in your App version, calendar connections are optional. With your permission, JCI creates and manages a separate JCI Mongolia Google calendar and copies eligible JCI events, including titles, descriptions, times, locations, meeting links, and selected reminders. We do not read your other Google calendars or import private appointments.

We use your verified Google email and account identifier to identify the connection. Refresh credentials are encrypted on our server; connection identifiers, sync status, and reminder preferences are stored in Supabase to operate this feature. Google receives the event information you choose to sync. We do not sell Google user data or use it for advertising or AI model training. Our use and transfer of Google API information follows the Google API Services User Data Policy, including its Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy.

Disconnecting Google in Calendar settings removes our stored refresh credential and stops future sync. You can keep the copied calendar or choose to remove the JCI calendar. Connection metadata may remain under the retention terms above. You can also revoke Google's permission through your Google Account's third-party connections settings.

Apple Calendar/iCloud, Outlook, and other compatible calendar apps can subscribe to a private, read-only JCI event link. Our database stores a one-way hash of its access token rather than the token itself. Where available, the app saves the private link in secure storage on your device for reuse. Anyone holding the link can read the feed, including meeting links; share it only with your chosen calendar service. Replacing or disabling the link stops future access through the old link. Previously fetched events can remain in the calendar service's cache until refreshed or until you remove the subscription.

The calendar service controls subscription refresh and calendar alerts, which may be delayed. JCI app reminders work separately. Subscription feeds do not read your personal calendar or change your JCI registrations. Contact support@oyu.ml for calendar privacy or deletion requests.

22. Хуанлийн холболт — Монгол тайлбар

Таны ашиглаж буй аппын хувилбарт боломжтой бол хуанли холбох нь сайн дурын сонголт. Таны зөвшөөрлөөр JCI нь Google Calendar-д тусдаа JCI Mongolia хуанли үүсгэн удирдаж, сонгосон JCI арга хэмжээний нэр, тайлбар, цаг, байршил, цахим уулзалтын холбоос, сануулгыг хуулна. Таны бусад Google хуанли болон хувийн уулзалтыг уншихгүй, апп руу оруулахгүй.

Холболтыг танихын тулд баталгаажсан Google и-мэйл хаяг болон бүртгэлийн таних дугаарыг ашиглана. Дахин хандах эрхийн токеныг серверт шифрлэн хадгална. Холболтын дугаар, шинэчлэлтийн төлөв, сануулгын тохиргоог Supabase-д хадгалж энэ үйлчилгээнд ашиглана. Таны сонгосон арга хэмжээний мэдээллийг Google-д дамжуулна. Google-ийн хэрэглэгчийн мэдээллийг худалдахгүй, зар сурталчилгаа болон AI загвар сургахад ашиглахгүй. Google API Services User Data Policy болон түүний Limited Use шаардлагыг мөрдөнө.

Хуанлийн тохиргооноос Google-ийн холболтыг салгахад серверт хадгалсан дахин хандах токен устаж, цаашдын шинэчлэлт зогсоно. Хуулсан хуанлийг хадгалах эсвэл JCI хуанлийг устгахыг сонгож болно. Холболтын бусад бүртгэл дээрх хадгалалтын нөхцөлийн дагуу үлдэж болно. Мөн Google бүртгэлийн гуравдагч талын холболтын тохиргооноос зөвшөөрлөө цуцалж болно.

Apple Calendar/iCloud, Outlook болон нийцтэй хуанлийн аппад зөвхөн унших эрхтэй хувийн JCI холбоосоор бүртгүүлж болно. Хандалтын токеныг өөрийг нь бус, буцаан тайлах боломжгүй хэш утгыг серверт хадгална. Боломжтой үед апп хувийн холбоосыг дахин ашиглахын тулд төхөөрөмжийн хамгаалалттай хадгалалтад хадгална. Холбоосыг эзэмшсэн хүн уулзалтын холбоос зэрэг мэдээллийг унших боломжтой тул зөвхөн сонгосон хуанлийн үйлчилгээндээ ашиглаарай. Холбоосыг солих эсвэл идэвхгүй болгоход хуучин холбоосоор цаашид мэдээлэл авах боломжгүй болно. Өмнө татсан мэдээлэл хуанлийн үйлчилгээ дахин шинэчлэх эсвэл та бүртгэлийг хасах хүртэл үлдэж болно.

Хуанлийн үйлчилгээ шинэчлэх давтамж болон хуанлийн сануулгыг удирддаг тул саатал гарч болно. JCI аппын сануулга тусдаа ажиллана. Хуанлийн холбоос таны хувийн уулзалтыг уншихгүй, JCI арга хэмжээний бүртгэлийг өөрчлөхгүй. Нууцлал болон мэдээлэл устгах хүсэлтээ support@oyu.ml хаягаар илгээнэ үү.