Privacy Policy

Effective Date: February 17, 2026 · Last Updated: October 1, 2026

This Privacy Policy describes the data protection practices of mylnk ("mylnk," "we," "us," or "our"). This Privacy Policy applies to information that we collect and use about you when you access or use the mylnk website, mobile application, or other online services that link to or refer to this Privacy Policy (collectively, the "Services").

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR INFORMATION. BY USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTAND THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT USE THE SERVICES.

1. Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily provide when you register for an account, use the Services, or communicate with us. This includes:

Category	Examples
Account Information	Name, email address, username, profile image, institution/school name(s), if you sign in with a school email address, its domain (for example, yourschool.edu) and whether that address has been confirmed, phone number (optional), pronouns (optional), role (Student or Admin), timezone
Academic & Career Information	Major(s), minor(s), graduation season and year, target industries, target roles, top companies of interest, career goals (internship, full-time, etc.), extracurricular activities
Contacts & Networking Data	Contact names, email addresses, organizations, roles, notes, tags, tasks, social media profiles, pipeline stages
Calendar & Scheduling Data	Events, deadlines, meeting details, reminders
Content You Create	Chat messages, direct messages, AI conversation history, notes, tasks and debriefs, documents you upload
Moderation & Safety Data	Block list (users you have blocked), user reports you submit (reporter, reported user, reason, optional details), and related metadata used for chat moderation and account enforcement
Uploaded Files	Resumes, profile images, shared documents, and images you attach to a note, task or debrief when using mylnk on a computer or tablet (kept until you delete your account)
Audio Recordings & Transcripts	Audio you record, or an audio file you upload, in Note Taker or as a voice note. Recording starts only when you tap record, and in Note Taker you first confirm that the conversation may be captured and transcribed. The audio is sent to a third-party transcription service to turn it into text and is not stored by mylnk. The transcript, and any AI summary made from it, is saved to your notes only if you choose to save it.
Photos & Screenshots	Photos or screenshots you attach for the AI to read, such as a screenshot of a profile or a photo of notes from a conversation. They are sent to a third-party AI service to read them. On a phone, mylnk does not keep a copy of the image, only the information you choose to save from it. On a computer or tablet, if you scan a profile screenshot, the profile picture cropped from it can be saved as that contact's photo, and images you attach to a note, task or debrief are saved with it; both stay until you delete your account.
Payment Information	None at present: mylnk does not charge for the Services and has no in-app purchases. If we offer paid plans in the future, billing details will be collected by a third-party payment processor on our behalf.

1.2 Information Collected from Third-Party Integrations

When you connect third-party services to your mylnk account, we collect information from those services as described below:

• Google Sign-In: When you authenticate using Google Sign-In, we receive your name, email address, and profile image from your Google account.
• Sign in with Apple (iPhone app and website): When you sign in with Apple, Apple shares your name only the first time you sign in, and either your email address or, if you choose Hide My Email, a private relay address that forwards to your email. Apple does not share your password or a profile photo with us. If you delete your mylnk account or remove Sign in with Apple from it, we also ask Apple to end mylnk's access to your Apple ID. You can connect both Google Sign-In and Sign in with Apple to the same mylnk account and use either one to sign in. Connecting a Google account for mail and calendar also adds it as a way to sign in to the same mylnk account, when your account does not already have one.
• Gmail Integration: If you connect your Gmail account, we access email metadata (subject lines, sender/recipient addresses, dates) and the short message preview Gmail provides, so mylnk can recognize the people you network with, keep each contact's timeline up to date, and alert you when an important contact emails you. When you open an email conversation in mylnk, we read that whole conversation from Gmail, including any messages in it with people who are not your contacts, so we can show it to you; it is read when you open it and not saved. As in most mail apps, images in an email you open load automatically from wherever the sender keeps them, which can let the sender see that the email was opened and your approximate location. Except as described in the next bullet, we do not store the content of your emails.
• Email history for your valuable contacts (optional): If you turn this on, mylnk additionally saves the content of emails you have exchanged with the specific people you mark as “valuable” contacts, so that you can read that history inside mylnk and so our AI features have context about those relationships. This is off unless you enable it, and it applies only to contacts you have marked valuable — we do not store the content of emails exchanged with anyone else. For each such contact we keep at most 200 emails: the 50 most recent in full, the next 50 as plain text, and any older ones as a short AI-generated summary of the message. Saved email content is encrypted and stored in the United States. If you un-mark a contact as valuable, the email content saved for that contact is deleted; deleting your account deletes all of it.
• Google Calendar: If you connect your Google Calendar, we read your calendar events so meetings appear on your mylnk calendar and prep reminders fire before a conversation, and we write events you create in mylnk back to your Google Calendar so the two stay in sync.
• Google Contacts (People API): If you grant permission, we import contact information from your Google account to populate your mylnk contacts.
• Google Tasks: If you grant permission, follow-ups you create in mylnk are written to your default Google Tasks list, and changes you make there sync back to mylnk, so your next steps appear wherever you already work.
• Phone address book (optional, iPhone and Android apps): If you turn on phone contacts import and allow mylnk to access your contacts, mylnk reads the name, phone numbers, email addresses, company and job title of the people in your device's address book. Someone with no match in mylnk is added to your contacts; for someone you already have, mylnk only fills in a missing phone number or adds a new email address. mylnk never changes your device's address book. While import is on, it checks for changes at most once a day when you open the app, or whenever you sync manually. Imported contacts are not marked as valuable automatically. You can remove every contact mylnk created from your address book at any time under Settings → Phone contacts → Remove imported contacts; a phone number or email address that was filled in on a contact you already had stays on that contact. You can also withdraw contacts access in your device settings.
• LinkedIn account (optional): If you connect your LinkedIn account, LinkedIn shares your name, profile photo and email address with us through Sign In with LinkedIn.
• LinkedIn data export (optional): If you want to bring your LinkedIn connections into mylnk, you can request your data archive from LinkedIn and choose the file(s) they send you. mylnk reads only the connections list in it: each connection's name, company, job title and profile link, and their email address where the file includes one, and adds them to your contacts. The file is read on your device and is not uploaded to or kept by mylnk, and nobody is marked as a valuable contact automatically. You can delete imported contacts at any time.
• mylnk browser extension (optional): If you install our browser extension, it can read the page you are looking at on LinkedIn, Gmail on the web, and WhatsApp Web, and save what you choose to your mylnk account: a person's name, headline, employer, role, location and profile link, and the text of the conversation shown on screen. It saves nothing until you act — when you open the mylnk panel on a profile, save a person, capture a conversation, or send a LinkedIn connection request (which saves that person as a contact so later messages attach to the right person). To put those actions in the right place it does follow the page you are on, but it never sends anything from a page you have not asked it to capture, and nothing it reads is saved until you have agreed to it in the extension. It runs only on those three sites and on mylnk's own web app. Capture can be switched off for each site separately, and removing the extension stops it entirely. Message content it captures is covered by the same opt-in described above, so if you have not turned on saved email history, it does not store email content either.
• On-screen message capture on Android (optional): Our Android app can offer an accessibility service that reads the text visible on your screen in LinkedIn, Gmail, WhatsApp and Google Messages, so a conversation you had outside mylnk can be added to that contact's timeline. This is the furthest-reaching permission mylnk asks for anywhere, so it is entirely in your hands: Android will not grant it unless you switch it on yourself in your device's Accessibility settings, and you can switch it off in the same place at any time. Even once enabled it reads the screen only at the moment you tap Capture on the mylnk overlay — it does not monitor, log or record your messages in the background — and it can only ever read those four apps. mylnk works fully without it.

mylnk's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Workspace API data to develop, improve, or train generalized AI and/or ML models.

1.3 Information Collected Automatically

When you use the Services, we automatically collect certain technical information, including:

• IP address, browser type and version, operating system
• Device identifiers and device type
• Features used and the date/time of your activity
• General location information derived from your IP address, including the country your IP address is in, which we check when you create an account
• A push notification token for your device, if you allow notifications, so we can send you alerts such as new chat messages, reminders, and emails from your valuable contacts. Your account keeps one token at a time, for the device most recently registered to receive notifications. It is removed from your account when you sign out, and you can turn notifications off at any time in your device settings. Sections 4 and 8 explain who handles the token and when else we remove it.
• Error logs, crash reports and performance data

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Operate the Services: To create and manage your account, deliver CRM features, enable contact management, calendar synchronization, messaging, note taking, and other core functionality.
• Eligibility and Your School: Anyone 18 or older in the United States may create an account by signing in with Google or Apple. Your school is a detail you add to your own profile, to help with things like majors and matching. It is not linked to any school account, and no school can see or manage your mylnk account. If you sign in with a school email address, we record its domain and the confirmation from your email provider that the address belongs to you, so your account can show a verified school address. We do not use it for advertising, and we do not sell it.
• AI-Powered Features: To generate personalized AI chat responses, conversation summaries and debriefs, contact summaries, email/message drafts, the information read from photos and screenshots you attach, and other AI-assisted features using the information you provide and your usage patterns.
• Analytics & Reporting: To generate engagement analytics, networking activity reports, goal tracking, and other insights for your dashboard.
• Communications: To send you service-related notices, account updates, security alerts, and support messages, and the notifications described in Section 1.3 unless you turn them off.
• Improvement & Development: To understand usage patterns, diagnose technical issues, and improve the Services, including developing new features.
• Security & Fraud Prevention: To detect, investigate, and prevent security incidents, fraudulent activity, and violations of our terms, including reviewing reports that users submit about other users.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Performance of a Contract: Processing necessary to provide you with the Services pursuant to our Terms of Service.
• Consent: Where you have given us explicit consent to process your information for a specific purpose (for example, connecting third-party integrations).
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Services, ensuring security, and communicating with you, provided these interests are not overridden by your rights.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations.

4. How We Share and Disclose Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

• Service Providers: We share information with the following companies and kinds of service, which run parts of the Services for us, and give each only what it needs for its part.
  • Google (Firebase and Google Cloud): hosting, our database, file storage, sign-in, notification delivery and app settings. Our database, stored files and server code are in the United States.
  • Google (Gmail, through our Google Workspace account): sending our emails — a note that your data download is ready when you ask for one (the download link itself goes only to the app), and alerts to our team about support requests, bug reports and reports about other users. A copy of each email we send stays in our company mailbox.
  • Google, through its Gemini API, and Deepgram: AI features and turning recordings into text (see Section 6).
  • Anthropic, through its Claude API: helping our team draft replies to your support requests (see Internal Engineering Assistant below).
  • An error-reporting service and an IP-location service: crash reports and the sign-up country check (see below).
  • The notification service run by your device's or browser's maker: delivering notifications to your device (see Notification Delivery below).
  • A messaging service: alerts to our team about our own engineering work (see Internal Engineering Assistant below).
• Sign-Up Location and Diagnostics Providers: When you create an account, the app asks an IP-location service which country your IP address is in, because mylnk is available only in the United States. If that check cannot be completed, sign-up continues. We do not save the result to your account. On every version, an error-reporting service receives crash reports, error messages and performance timings so we can find and fix faults. These providers are in the United States, and we do not send them your contacts, messages, calendar entries, uploaded files or academic records.
• Research and Logo Lookups: When you prepare for a conversation, ask the AI assistant about a company, or look up a company, mylnk searches public sources for you. It sends a person's, company's or school's name as a search term to Google web search and to public news, social media, podcast and encyclopedia search services. To suggest companies as you type and to show a company's logo, it sends the company's name or web address to Google and to company-logo services. These searches carry only the search term, not your notes or anything else from your account, but the ones your device makes directly (the podcast, encyclopedia and logo searches) also let that service see your device's IP address.
• Notification Delivery: To show a notification on your device, we pass its title, its short text and the reference the app needs to open the right screen, together with your device's push notification token, to Google Firebase. Google Firebase hands it to the push notification service run by your device's or browser's maker, which delivers it to your device. These services receive the notification and your token, not the rest of your mylnk data. A notification can include, for example, a contact's or another mylnk user's name (or their email address, if they have not set a name), a task title, a short preview of a chat message, or an email's subject line or preview, and your device may show it on your lock screen. You can hide notification previews or turn notifications off in your device's settings.
• Internal Engineering Assistant: We use an internal, staff-only engineering assistant to help us build, operate and debug mylnk. It sends its working instructions to third-party AI services and its status notifications to a messaging service; those notifications carry titles of our own engineering work, counts and error messages, not your contacts, messages or other content. Of the AI services, anything that could contain a user's information is handled only by US-based providers (Google, through its Gemini API, and Anthropic, through its Claude API); AI providers based outside the United States are used solely to review mylnk's own source code, and our systems refuse in code to send them anything derived from your data. The assistant is barred by design from changing your data at all, and from reading the contents of it: for anything holding personal or academic information it can see only field names, data types and how many records exist — never a value — and any part of our database that has not been explicitly classified is refused outright. Your contacts, emails, messages, notes, files and calendar entries are therefore not sent to these providers. The one exception is support: if you have allowed AI features and you contact us for help, the assistant can read that conversation, with email addresses and phone numbers stripped out automatically, and names stripped wherever we can identify them, so it can draft a reply for a member of our team to review and approve.
• Other Users: Information you share through messaging, shared documents, or chat requests will be visible to the recipients you designate.
• Reports About Other Users: If you report someone, your report (who you are, who you reported, the reason, any details you add, and the chat it relates to) is sent to our team for review. The email our team receives about a report may quote up to five of the reported person's recent messages in that chat. We keep that email in our support inbox until we have finished reviewing the report, then delete it, and in any case within 12 months. The separate copy our system uses to send it is deleted automatically about 30 days after it is sent.
• Legal Requirements: We may disclose your information if required to do so by law, or in good faith belief that such action is necessary to: (a) comply with legal processes; (b) enforce our Terms of Service; (c) respond to claims that any content violates the rights of third parties; or (d) protect the rights, property, or personal safety of mylnk, its users, or the public.
• Business Transfers: In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
• Aggregated/De-Identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, analytics, or other purposes.

5. Third-Party Integrations

The Services allow you to connect and integrate with third-party platforms: Google (Gmail, Calendar, Contacts and Tasks) through your Google account; your LinkedIn account; LinkedIn, Gmail on the web and WhatsApp Web through our browser extension, which is described in section 1.2; a meeting-notes service, if you add your key for it, so your meeting notes can come into mylnk; and coding and learning sites where you link your public profile by username. When you enable these integrations:

• We send each service only what it needs to find your account or profile (your sign-in, key, calendar link or username), and we read your information from it.
• We store OAuth tokens securely to maintain your connection. These tokens may be revoked by you at any time.
• The information we receive is governed by this Privacy Policy.
• Your use of third-party services is governed by those services' own terms and privacy policies. We encourage you to review them.
• We do not control, and are not responsible for, the privacy practices of third-party services.

6. Artificial Intelligence and Automated Processing

mylnk uses artificial intelligence to provide features such as:

• Conversational AI chat for career-related queries
• Automated drafting of emails, texts, and LinkedIn messages
• Pre-game briefs and post-call debriefs
• Summaries of conversations you record or paste into Note Taker
• Reading photos and screenshots you attach, such as a screenshot of a profile
• Contact summaries
• Pipeline classification of emails and calendar events

We ask first. Before you use AI features for the first time, the app shows a one-time permission screen that names the AI companies that receive your data and what each one receives. Nothing is sent to them until you allow it. You can turn AI features off at any time: in the iPhone or Android app, open Settings; on the web, open your profile, go to the Account tab and use the Privacy section.

Once you allow AI features, the content they work on is sent to Google, through its Gemini API, for processing: your prompts and chats with the assistant, notes, conversation history and transcripts, photos and screenshots you attach, the emails and calendar events mylnk syncs from your connected accounts, the email conversation you ask it to help you reply to or forward, details about your contacts (such as names, roles, organizations, notes and timeline entries), and your profile, school, career information and goals. Some of this happens automatically once allowed, for example sorting newly synced emails and calendar events into your pipeline, and summarizing older emails with your valuable contacts if you turned that on. Audio you record is sent to Deepgram to produce a transcript. We take the following precautions:

• AI processing is performed only to provide the specific feature you are using, and none of these providers may use your data to train their AI models. Google's data processing terms for this service also limit it to using your information only to provide the service.
• We minimize the personal data shared with AI processors to what is necessary for the requested feature.
• AI-generated outputs are provided for informational and preparatory purposes and should not be relied upon as professional, legal, or career advice.

7. Cookies and Similar Technologies

On the web, we use cookies and similar browser storage to keep you signed in, keep the Services secure, and remember your settings. Our iPhone and Android apps store similar information on your device for the same purposes. We do not use analytics or advertising cookies, and we do not track you across other companies' websites or apps.

• Essential Cookies: Required for the Services to function, including authentication and security.
• Preference Cookies: Remember your settings and preferences.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Services.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Services. We may also retain and use your information as necessary to:

• Comply with our legal obligations
• Resolve disputes
• Enforce our agreements
• Protect against fraudulent or illegal activity

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required by law to retain it or where retention is necessary for the purposes stated above. Backup copies may take additional time to be fully purged.

We record which features you use and when (for example, that you created a task, never what the task says), to understand what is working and improve the Services. These records stay in our own systems, are never shared, and are included when you download your data. When you delete your account, each of your records is added to that day's total for all users and then deleted. The totals do not record who was counted. You can turn this off at any time with Share feature-use counts: in the iPhone or Android app, open Settings; on the web, open your profile, go to the Account tab and use the Privacy section.

We also keep a short record each time you delete your account, download your data, your plan changes, you sign out, or we end your sign-ins for security reasons (after 30 days without use, after 90 days, or when Google or Apple tells us your account's security changed): what happened and when, and an internal account number. The record itself holds no name or email address. These records show that we handled your requests and help keep the Services secure. We keep each one for 2 years, including after your account is deleted, and then delete it. They are included when you download your data.

When you sign in, and when the app checks your account as it opens, our sign-in provider records the request in our security logs: your name, email address, profile picture link, account ID, the sign-in methods on your account and which one you used, your IP address and your browser or device type. Only mylnk's owner can see these logs. We use them only to detect and investigate misuse of accounts, never share them, and they are deleted automatically after 30 days.

The email telling you that your data download is ready does not contain the download link, which only the app receives. Our system's record of that email is deleted automatically about 30 days after it is sent, or when you delete your account.

Saved email content for your valuable contacts (see Section 1.2) is retained only while that contact is marked valuable and you have the feature enabled. Un-marking a contact deletes the email content saved for them, turning the feature off in Settings deletes everything already saved, and deleting your account removes all of it.

Audio you record or upload for transcription is not stored on our servers; it is used only to make the transcript, and our transcription provider keeps it only for as long as that takes. Transcripts and summaries you save stay in your notes until you delete them or your account. Photos and screenshots you attach for the AI to read are not stored, except on a computer or tablet, where images you attach to a note, task or debrief and a contact photo cropped from a scanned profile are kept until you delete your account.

Contacts imported from your phone's address book or a LinkedIn data export are kept until you remove them or delete your account.

Notifications in your in-app notification list are deleted automatically about 60 days after they are created. A notification about a contact is also removed when you delete that contact; if it is a summary that mentions other contacts too, only the deleted contact is taken out of it.

Your push notification token is kept only while it is needed to reach your device, and it is replaced when another device registers to receive notifications on your account. Besides removing it when you sign out, we remove it when your device's notification service tells us the token no longer works, when a different mylnk account starts receiving notifications on the same device, when we end your account's sessions for security reasons or suspend your account, and when you delete your account.

9. How We Protect Your Information

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure authentication via Google Sign-In or Sign in with Apple, both using OAuth 2.0
• Firebase Security Rules to restrict data access
• Regular security assessments and monitoring
• API key protection through environment variables and backend proxies
• Secure storage of OAuth tokens and sensitive credentials

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

10. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
• Restriction: Request that we restrict processing of your personal information.
• Objection: Object to processing of your personal information based on our legitimate interests.
• Withdraw Consent: Where processing is based on consent, withdraw your consent at any time.

To exercise any of these rights, please contact us at support@milnk.app. We will respond to your request within 30 days (or as required by applicable law).

Account Controls

• You can review and update your profile information through your account settings.
• You can download a copy of your data at any time from Settings → Download my data.
• You can disconnect third-party integrations (Gmail, Calendar, Contacts and Tasks, and your LinkedIn account) at any time, and remove the contacts imported from your phone's address book under Settings → Phone contacts.
• You can turn AI features off at any time: in the iPhone or Android app, open Settings; on the web, open your profile, go to the Account tab and use the Privacy section.
• You can report or block other users from the ⋯ menu in a chat, or from a chat request. Reports are sent to our team for review, and reported accounts may be restricted or removed. Once you block someone, they can no longer send you chat requests and your chats with them are hidden.
• You can delete your account and associated data at any time: (1) in the iPhone or Android app, open Settings, tap Delete account, tick the confirmation box and tap Delete my account (on the web, open your profile, go to the Account tab and choose Delete account); (2) visit Request Account & Data Deletion; or (3) email us at support@milnk.app with "Account deletion request" and your account email. Deleting your account cannot be undone; we delete or anonymize your personal information as described in Section 8 and on the deletion page.

Communication Preferences

You may opt out of non-essential communications by adjusting your notification settings or by following the unsubscribe instructions in any marketing email. You cannot opt out of transactional or service-related communications necessary for the operation of your account.

11. Children's Privacy

The Services are designed for college and university students and are intended only for people 18 or older. Everyone confirms they are 18 or older when they create an account, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from someone under 18, we will take steps to delete such information promptly. If you believe someone under 18 has provided us with personal information, please contact us at support@milnk.app.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights regarding your personal information:

Categories of Personal Information Collected

Category	Collected	Examples
Identifiers	Yes	Name, email address, username, IP address, push notification token
Personal Information (Cal. Civ. Code § 1798.80(e))	Yes	Name, email address, education, employment information
Education Information	Yes	Institution, major, minor, extracurricular activities
Internet or Network Activity	Yes	Interaction with the Services, such as features used, error logs and crash reports
Geolocation Data	Yes	General location derived from IP address
Professional Information	Yes	Career goals, target industries, companies of interest
Audio/Visual Information	Yes	Profile images; audio you record for transcription and photos or screenshots you attach for the AI to read (processed; stored only where attached to a note or saved as a contact photo)
Inferences	Yes	AI-generated contact summaries, engagement scores

Your California Rights

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your California privacy rights, contact us at support@milnk.app.

13. International Users

The Services are hosted in the United States using Google Firebase infrastructure. If you access the Services from outside the United States, your information will be transferred to and processed in the United States. By using the Services, you consent to this transfer. We will take appropriate measures to ensure your information is protected in accordance with this Privacy Policy and applicable data protection laws, including the use of Standard Contractual Clauses where required.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you may have additional rights under the General Data Protection Regulation (GDPR) or equivalent legislation. To exercise those rights or request a Data Processing Agreement, please contact us at support@milnk.app.

14. Educational Records (FERPA)

mylnk is a service for individuals. It is not run on behalf of any school, and no school runs mylnk for its students or receives your information from us, so we do not hold "education records" under the Family Educational Rights and Privacy Act (FERPA). What you add about your school, such as its name, your major or your graduation year, is information you chose to put in your own profile, and it is handled like the rest of your information under this policy.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on the Services with a revised "Effective Date" and, where appropriate, by sending you a notification through the Services or via email. Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us