REACT Initiative — Member Terms & Privacy Policy

Effective date: January 2025 · Version 1.0

Welcome to the REACT Initiative member portal. Before creating an account, please read this document carefully. It explains what information we collect, how it is used, what is visible to others, and the rights you hold over your own data. By clicking "I agree — continue" you confirm that you have read and accept these terms. If you do not agree, you may close this page and continue browsing as a visitor — no account will be created.

1. Who we are

REACT Initiative is a student-led medical community operating three committees: Medical Education Committee (MEC), Community Engagement Committee (CEC), and Research Capacity & Professional Excellence Committee (RCPEC). The portal is hosted and maintained by the executive members of these committees and the steering council undert supervision of University of Alkafeel College of Medicine. For questions about this policy, contact us at admin@reactinitiative.org.

2. Information we collect

When you register, we collect the following information:

Identity: your full name, email address, and the academic affiliation or institution you provide at signup.
Profile content: any optional information you add later — a personal aspiration, a profile photo, social media links, or a phone number.
Activity: events you register for, citations you request, and certificates you upload.
Technical data: the date you joined and an automatically assigned membership identifier (your REACT ID, explained below).
Consent record: the date and time you accepted these terms, stored as an audit trail.

We do not sell your data to third parties, use it for advertising, or share it outside the organization except where required by law.

3. Public profiles and ePortfolios

Your member profile is public by default. This means other visitors to the portal can find your profile through the Member Directory and see your:

Full name and profile photo
Committee memberships and membership tier
REACT ePortfolio — approved event citations (past REACT events you contributed to and requested credit for) and any certificates you choose to upload yourself
Any Connect fields you individually mark as public (see section 4)

Information you have not made public is never shown to other visitors or included in search results.

4. Your privacy controls

You are always in control of what others can see. From your dashboard you can:

Make your entire profile private — your profile will disappear from the Member Directory search and no one except you (when signed in) can view it.
Hide your personal aspiration — toggle it off and it is visible only to you.
Control Connect fields individually — choose which of your email address, phone number, LinkedIn, Instagram, and Twitter links are visible on your public profile. Each field has its own toggle.
Delete self-uploaded certificates — any certificate you upload yourself can be removed at any time from your dashboard.

Changes take effect immediately and are reflected across the portal in real time.

5. Your REACT ID

When you sign up, the system automatically generates a unique identifier for you in the format RX-XXXX (e.g. RX-4271). This is used internally as your membership reference. Your REACT ID is not displayed publicly to other visitors — only you can see your own ID when you are signed in. It is also not searchable by others through the Member Directory.

6. Code of Conduct

As a member of the REACT Initiative you agree to:

Treat all other members, staff, and visitors with respect and professionalism in all interactions on and through this platform.
Use member profile information (including contact details visible on public profiles) only for legitimate organizational purposes and never for spam, harassment, or unsolicited commercial communications.
Provide accurate information at signup and keep your profile reasonably up to date.
Not attempt to access, scrape, or misuse other members' data in ways beyond normal individual browsing.
Not impersonate another member or provide false credentials to gain unauthorized access.

Violations may result in account suspension or removal at the discretion of the organization's leadership.

7. Data retention and your rights

Your data is held for as long as your account is active. You have the right to:

Access the data we hold about you (visible from your dashboard).
Correct inaccurate information at any time from your dashboard.
Request deletion of your account and all associated data by emailing admin@reactinitiative.org. We will action deletion requests within 30 days.

We use Supabase (hosted on secure cloud infrastructure) for data storage and authentication. Data is encrypted in transit (HTTPS) and at rest.

8. Changes to this policy

If we make material changes to this policy, we will notify members via email or an in-portal notice and update the effective date above. Continued use of the portal after such notice constitutes acceptance of the revised terms.