1. Scope and who is responsible

This policy covers the GTA FREE STEM iPhone, iPad, Mac, and Apple Watch apps and the public website at https://gta-free-stem.vercel.app. Rupayon Haldar is the publisher of GTA FREE STEM Opportunities. The Apple app and website have different data flows, which are described separately below.

2. What the Apple app stores on your device

Browsing does not require a login. The publisher does not receive the following on-device information. Under Apple's App Privacy definition, information processed only on the device is not collected by the developer.

Optional local Profile name: Stored in Apple UserDefaults on that device. It is not an online account, is not sent to the publisher, and cannot be recovered from another device.; Retention: Until you delete the Profile in Settings or uninstall the app.
Saved opportunities: Stored locally with SwiftData. A saved record contains a copy of the public listing and the date it was saved; it is not sent to the publisher. When a paired Apple Watch companion is installed, the iPhone can share up to 48 saved opportunities and their saved dates with that paired Watch through Apple WatchConnectivity. That transfer stays between the user's paired devices and is not delivered to the publisher.; Retention: Until you remove the save, delete the local Profile and saves, or uninstall the app.
Search and hunt state: The latest query, filters, seen-listing identifiers, alert timing, and—if nearby search is used—the selected coordinates can be kept locally so the last hunt and new-find alerts work.; Retention: The latest hunt remains until it is replaced or deleted. Seen records are pruned after about 120 days and known identifiers are capped at 2,500.
Language and theme preferences: Stored in Apple UserDefaults and never sent to the publisher.; Retention: Until changed, cleared with operating-system controls, or the app is uninstalled.
Public opportunity cache: A validated copy of the public opportunity feed is stored locally for faster and offline browsing. The Watch companion retains the transferred saved opportunities described above, not the whole public feed. These caches are on-device and are not a publisher-operated profile.; Retention: Replaced by newer feed data or removed when the app is uninstalled.

3. Location, maps, notifications, and background refresh

Location is optional. The app requests when-in-use permission only after you choose nearby search. It asks Apple for a one-shot, kilometre-level location, uses it locally to calculate distance, and may keep those coordinates in the latest local hunt. It does not send your coordinates to the GTA FREE STEM feed or publisher.
Maps are optional to use. Apple MapKit may process map requests under Apple's privacy practices. The publisher does not receive MapKit account or location data.
Alerts are optional. If you enable alerts, Apple grants notification permission and the app may use an operating-system background refresh to create a local alert for new public listings. There is no remote push token, push provider, or notification analytics.

4. Network services and technical request data

To refresh public listings, the app makes cookie-free HTTPS requests to a GitHub-hosted JSON file and, if needed, the jsDelivr CDN mirror of that public GitHub file. Those providers receive and may retain the request IP address, request time, and available network, operating-system, app, or device headers. They may infer a coarse location from the IP address and use request records for content delivery, routing, security, troubleshooting, performance, service analytics, and improvement. In Apple's App Privacy terms, this release conservatively discloses Coarse Location and Other Diagnostic Data for App Functionality and Analytics, linked to the user through request information, and not used for tracking.

GTA FREE STEM does not attach the local Profile name, searches, saves, device location, advertising identifier, or a GTA FREE STEM user ID to those requests, and the publisher cannot view provider-level raw request logs. The providers determine their own log retention and privacy-request procedures. The relevant notices are the GitHub Privacy Statement, jsDelivr Privacy Policy, the jsDelivr Sub-Processors notice, and the Apple Privacy Policy. Where a provider acts on the publisher's behalf, it must protect information under its applicable terms and law. The publisher does not instruct a provider to sell request data or use it for advertising or cross-app tracking.

5. Public website data

The current public website is a static site without a production account database or analytics SDK. It does not set advertising or cross-site tracking technologies. Its current local features work as follows:

Browser preferences: Theme, language, and local saved-state features use browser local storage.; Your control: Clear this site's data in browser settings.
Optional website location: If you choose Near me, the browser supplies an approximate location for the current session so results can be sorted by distance. It is not sent to GTA FREE STEM.; Your control: Deny or revoke location permission in the browser.
Local-only forms: While the public production backend is not configured, correction, Community Host, and opportunity-suggestion forms—including any contact email entered—are saved only in that browser. They are not delivered to the publisher.; Your control: Clear this site's browser data. Do not use those forms for urgent or private requests.

Vercel receives ordinary hosting-request data such as IP address, request time, requested page, and available browser or device headers and may use it to deliver, secure, analyze, and improve its hosting service under the Vercel Privacy Notice. The map loads tiles from OpenFreeMap, which receives the technical request data and requested map-tile coordinates needed to return the visible map area. See the OpenFreeMap Privacy Policy. These providers control their own log retention and privacy-request procedures. This policy and all consent and account-deletion flows must be revised before any production website account, cloud save, feedback, or submission backend is enabled.

6. Provider websites and other external links

Listings link to independent program providers for official details and registration. Directions may open Apple Maps or Google Maps. Once you follow an external link, that service—not GTA FREE STEM—controls its own collection, cookies, accounts, registration data, and privacy practices. Review the provider's policy before giving it personal information, especially information about a child.

Support opens GitHub's public issue tracker. If you choose to submit a ticket, its text, attachments, timestamps, and the GitHub profile that submits it are public and are received by the publisher. The publisher uses that information only to answer the request, correct the directory, troubleshoot the Service, address safety or abuse, and maintain a support record. GitHub stores and processes the ticket under its own policy. The publisher may close or delete a ticket when appropriate, but cannot promise that search indexes, notifications, forks, screenshots, or other copies will disappear. Do not submit sensitive information. To request removal of a ticket, open a new general support ticket that identifies the ticket URL without repeating its private contents.

When a direct support email is displayed on the Support page and you choose to use it, the publisher and the email services involved receive your email address, message, delivery metadata, and any attachment you send. The publisher uses that information only to answer the request, troubleshoot, address safety or abuse, correct the directory, and keep a reasonable support record. It is retained only as long as needed for those purposes or a legal obligation, then deleted where reasonably possible. You may ask for access, correction, or deletion by replying to the same support address. Never email passwords or unnecessary information about a child.

7. Purposes, sharing, and tracking

On-device information is used only to provide the feature you selected: preferences, saves, nearby search, hunt history, offline browsing, or local alerts.
The publisher uses no feed-request logs. Feed and hosting providers may use technical request data for delivery, security, troubleshooting, performance, service analytics, and improvement under their own notices.
Information voluntarily sent through a support ticket or direct support email is used only to provide support, maintain the directory, and address safety, security, or abuse.
GTA FREE STEM does not sell personal information, share it for behavioural advertising, build advertising profiles, or track people across apps and websites.
No advertising network, third-party analytics SDK, crash-reporting SDK, payment SDK, or data broker is included in Apple app release 1.0 (12).

8. Your choices, consent withdrawal, and deletion

Use city and region filters instead of location. Revoke location permission in Apple or browser settings at any time.
Clear nearby coordinates from the app's filters. Deleting the local Profile in Settings removes the Profile name, saved opportunities, latest hunt, seen-listing history, and local alert history.
Turn notifications off in Apple system settings. This prevents future app alerts.
Delete individual saved opportunities from Saved, clear website site data in your browser, or uninstall the app to remove its remaining local data.
The public opportunity cache contains no Profile data and may remain after Profile deletion until it is replaced or the app is uninstalled.

Because the publisher does not operate a user database for this Apple release, it normally has no personal app record to access, correct, export, or delete. For a privacy question or a request involving a support ticket or email, use the Support page. Use the direct email when a request contains private information; do not post it in a public GitHub ticket. A ticket author can edit their own issue content through GitHub; the publisher can also be asked to close or delete a ticket, subject to GitHub's controls and retention practices. Requests concerning GitHub or jsDelivr service logs must be directed to that provider because the publisher cannot access or delete those logs.

9. Children and families

GTA FREE STEM is designed for students, families, caregivers, educators, and community groups. The Apple app does not ask for a birth date, school, email address, phone number, or online child account. A parent or guardian should manage device permissions and external registrations for a child who cannot provide meaningful consent. Do not include a child's private information in a public support ticket. If the publisher learns that personal information from a child was received through a publisher-controlled support channel without valid consent, it will be deleted where reasonably possible.

10. Security and international processing

The app uses HTTPS, disables cookies and URL caching for feed requests, validates remote feed size and freshness, and relies on Apple platform protections for local storage. No system is perfectly secure. GitHub, jsDelivr, Vercel, Apple, OpenFreeMap, and external program providers may process technical data outside Canada under their own notices and lawful transfer safeguards.

11. Changes and contact

This policy will be updated before a release adds off-device profiles, account services, submissions, analytics, advertising, remote notifications, or another material data use. The effective date above will change when the policy changes. Privacy and support requests can be started through the Support page. Use its direct email contact for a private request. Its GitHub issue route is public, so never include passwords, precise location, a home address, a child's details, or other sensitive data in a ticket.