Privacy Policy

MORGANIZE LLC ("MORGANIZE," "we," "our," or "us") operates the Covey Leadership Center mobile app (the "App") in partnership with Utah State University's Stephen R. Covey Leadership Center (the "Covey Center"). We publish the App on the Apple App Store and Google Play Store, host the backend infrastructure, and process your data on the Covey Center's behalf as part of the Covey Leadership Credential program.

The Covey Center administers the program itself. Designated Covey Fellows and Admins — USU staff and student leaders — may view your profile, credential progress, event sign-ups, and cohort chat messages as part of their role mentoring credential students. Access to the App is restricted to verified USU students and staff with @usu.edu or @aggies.usu.edu email addresses.

This Privacy Policy explains what data we collect, why we collect it, how it's used, and the choices you have. By using the App, you agree to the practices described here.

We collect only what we need to run the App and the credential program. Categories below match Apple's App Privacy framework. All data listed here is linked to your identity and used solely for App Functionality and Analytics. We do not use any of it for tracking across third-party apps or websites, and we do not sell your data.

2.1 Contact information

• Name — first and last name, entered during onboarding.
• Email address — your USU email, used to sign you in and verify USU affiliation.
• Phone number — optional; used by event organizers to contact you about events you sign up for.

2.2 User content

• Photos — your profile photo, and any images you choose to attach to chat messages or announcements.
• Other user content — credential progress notes, event sign-up details, cohort chat messages, direct messages, announcements you post (if you are a Fellow or Admin), and in-app feedback submissions.

2.3 Identifiers

• User ID — an internal account identifier and your USU A-number, used to scope your data within the App.
• Device ID — a push-notification token (Apple Push or Firebase Cloud Messaging), used solely to deliver notifications to your device.

2.4 Usage data

• Product interaction — which screens you visit, which features you use, completion timestamps, and similar usage events. This helps us improve the App.

2.5 Diagnostics

• Crash data — collected via Firebase Crashlytics when the App crashes.
• Performance data — app launch times, network latency, and similar.
• Other diagnostic data — non-fatal errors and log events necessary to troubleshoot bugs.

We do not collect precise location, browsing history outside the App, health data, financial data, or sensitive personal information.

• To authenticate you and verify you are an enrolled USU student or USU staff member.
• To provide core App features (credential tracking, events, chat, announcements, push notifications).
• To allow Covey Fellows and Admins to mentor, verify credential progress, and run the leadership credential program.
• To send program-related push notifications, including announcements, event reminders, and waitlist openings.
• To investigate crashes, fix bugs, and improve App performance and usability.
• To respond to support requests and feedback you submit.
• To comply with legal obligations or enforce the App's terms.

We do not use your data to train machine-learning models, sell advertising, or share with data brokers.

4.1 With the Covey Center

Covey Fellows and Admins (USU staff and student leaders designated by the Covey Center) can view information that is relevant to their role:

• Fellows can see the profiles, credential progress, event sign-ups, and cohort messages of credential students assigned to their cohort.
• Admins can see all program data necessary to administer the credential program, including users, cohorts, event sign-ups, and aggregate metrics.
• Other users see only your name, profile photo, and (in your cohort or shared events) your role and event role label. Email, phone number, and A-number are visible only to Fellows/Admins and only where program administration requires it.

4.2 Service providers

We use the following third-party services to operate the App. Each is used only for the purposes listed and is bound by its own privacy practices.

• Supabase (database, authentication, file storage, edge functions) — hosts all App data in the United States. Privacy policy.
• Firebase (Cloud Messaging, Crashlytics) — push notification delivery and crash reporting. Privacy policy.
• Resend — sends one-time-passcode (OTP) sign-in emails and support notifications. Privacy policy.
• Apple and Google — the App is distributed through their stores; they may collect anonymous install metrics per their policies.

4.3 Legal disclosures

We may disclose information if required by law, court order, or to protect the rights, property, or safety of MORGANIZE LLC, USU, the Covey Center, or App users.

4.4 No sale of personal information

We do not sell, rent, or trade your personal information for any purpose.

Because the App supports a credential program operated by a U.S. public university, certain information may be considered part of an educational record under the Family Educational Rights and Privacy Act ("FERPA"). MORGANIZE LLC acts as a school official with a legitimate educational interest, under the Covey Center's direction, when processing this information.

• We use your educational-record data only to provide and improve the credential-program features described in this policy.
• We do not redisclose your educational records to third parties except as permitted by FERPA or with your consent.
• You may request to inspect, review, or correct your educational records by contacting the Covey Center directly, or by emailing us at the address below and we will route the request.

6.1 Access, update, and delete

• You can update your profile, photo, and phone number in the App at any time.
• You can delete your account from the App settings. Deletion removes your profile and chat messages within 30 days. Some non-identifying aggregate metrics may be retained.
• You can request a copy of your data by emailing us; we will respond within 30 days.

6.2 Push notifications

You can disable push notifications at any time in your device settings, or by toggling category-specific preferences inside the App (announcements, chat, events).

6.3 California residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to limit certain uses of sensitive personal information. We do not sell or share personal information as defined by the CPRA. To exercise your rights, email us at coveycenter@morganize.com.

6.4 Other U.S. state privacy rights

Residents of states with comprehensive privacy laws (including Colorado, Virginia, Connecticut, and Utah) have similar rights. Submit requests to coveycenter@morganize.com.

6.5 EEA, UK, and Swiss residents (GDPR)

If you are in the EEA, UK, or Switzerland, you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and the right to data portability. Our legal bases for processing are: contract performance (operating the App), legitimate interests (improving the App and preventing abuse), and consent (for optional features). To exercise your rights, email us at coveycenter@morganize.com.

We keep your data only as long as needed to provide the App and support the credential program:

• Active account data — retained while your account is active.
• Credential progress — retained per the Covey Center's program records policy, typically while you are an active student or alumnus of the credential program.
• Chat messages and direct messages — retained while your account is active and deleted within 30 days of account deletion.
• Crash and diagnostic data — retained up to 90 days.
• Push notification tokens — deleted when you sign out or revoke notification permission.

We implement industry-standard safeguards to protect your data, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256) at our hosting providers.
• Row-level security on every database table so users see only data they're authorized to see.
• Optional biometric (Face ID / Touch ID / fingerprint) app lock you can enable in settings.
• Limited employee access and audit logging of administrative actions.

No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and the appropriate authorities as required by applicable law.

The App is operated from the United States. If you access the App from outside the U.S., your data will be transferred to and processed in the U.S. We rely on standard contractual clauses or equivalent safeguards for international transfers from the EEA, UK, or Switzerland.

The App is restricted to verified USU students and staff with @usu.edu or @aggies.usu.edu email addresses and is intended for users 16 years of age or older. We do not knowingly collect personal information from anyone under 13, and we do not direct the App to children under that age. If we learn that we have collected personal information from a user under 13, we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be announced in-app and reflected in the "Last updated" date at the top of this page. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

For privacy questions, data requests, or other concerns, reach us at:

For questions about the Covey Leadership Credential program itself, contact the Covey Center directly at huntsman.usu.edu/leadership.