What we store, and who sees it

What other users can see

Your name, headline, what you wrote about yourself, your skills, your town, your time zone and languages. For mentors, also your occupation, session length and how many mentees you can take. For young people, your school stage and school name.

A mentor is visible only after the Foundation approves them. A young person is visible only if they choose to be, and only to approved mentors.

What the safeguarding team can see

Your messages. The Foundation's safeguarding team can read any conversation on ZongoConnect. We tell everyone this before they start, because a young person and a mentor both have a right to know the room is not private.

Every time a staff member opens a conversation, that is recorded against their name in a log they cannot edit or delete. The people who can read your messages are themselves watched.

Staff also see your date of birth, your guardian's name and contact details, and anything reported about you.

What we never store

Photographs. There is nowhere in this system to upload a picture of anyone. Profile images are drawn from initials. An image of a child is the most sensitive thing a service like this could hold, and the safest way to hold it is not to.

We also do not store payment details, because mentoring here is always free.

Your guardian's details

If you are under 18 we hold your guardian's name, their relationship to you, and a phone number or email address — used only to ask for and confirm permission. Your guardian never needs an account with us.

You cannot change those contact details yourself. That rule exists so nobody can redirect a permission request to themselves; ask the Foundation to correct them.

How it is protected

Sign-in is handled by Supabase Auth, so we never see or store your password. Session tokens are kept in cookies that scripts on the page cannot read. Guardian permission links are stored only as one-way digests, so a copy of our database would not let anyone grant permission on a child's behalf.

Every form is protected against cross-site request forgery, every page is served under a strict Content Security Policy, and the database enforces its own access rules underneath the app rather than trusting it.

Deleting your account

Settings → Delete account removes your profile, skills, requests, messages, sessions, and your guardian's details.

Two things deliberately survive: any safeguarding report about you, and the log of staff actions. An open child-protection case has to outlive the account it concerns, or deleting an account would be a way to erase an investigation. Those records name the case, not your profile.