Privacy Policy

What we collect

• Account details. When you sign in with Apple or Google we receive your name (if you share it), your email address or Apple's private relay address, and a sign-in identifier.
• Your giving choices. The organizations in your portfolio, how you weight them, the causes you pick, and your monthly amount.
• Location you tell us. A ZIP code, if you enter one, so we can suggest nonprofits near you. We do not collect device location.
• Payment details. Payments are handled by Stripe. Your card or Apple Pay details go directly to Stripe; we store only a Stripe customer reference, the card brand and last four digits, and a record of each charge and how it was split.
• Usage data. We use Mixpanel to understand which screens and features are used, so we can improve the app. This includes a device identifier, app version, and events such as "added an org". It does not include payment details.
• Messages you send us. If you email us, we keep the thread so we can help you.

How we use it

• To run your portfolio: charge the amount you set, split it across your organizations, and send you an itemized receipt.
• To transfer donations to the nonprofits you chose and tell them, in aggregate, that Good Crowd donors are supporting them.
• To send you service emails such as receipts, failed-payment notices, and important changes to these terms. We do not send marketing email without your consent.
• To keep the service secure, prevent fraud, and meet our legal and tax obligations.
• To understand how the app is used and make it better.

Who we share it with

We do not sell your personal information. We share it only with the services we need to operate Good Crowd:

• Stripe processes payments and pays out nonprofits. Stripe's handling of your data is covered by its own privacy policy.
• Supabase hosts our database and sign-in service.
• Mixpanel provides product analytics.
• Resend delivers our transactional email.
• Candid and the IRS are the sources of the nonprofit data we show you. We send them nothing about you.
• The nonprofits you support receive your donations through Stripe. We do not give them your name, email, or payment details unless you ask us to.
• Law enforcement or regulators, when required by law, or to protect the rights and safety of our users, the nonprofits, or Good Crowd.

Your choices

• You can change or cancel your monthly amount, swap organizations, or update your payment method at any time in the app.
• You can delete your account from Manage Account in the app. This cancels your giving, removes your profile and portfolio, and detaches your Stripe customer. We keep transaction records we are required to retain for tax and accounting purposes.
• You can ask us for a copy of your data, or ask us to correct or delete it, by emailing hello@goodcrowd.app. We will respond within 30 days.
• If you signed in with Apple using Hide My Email, you can stop forwarding at any time in your Apple ID settings.

How long we keep it

We keep your account data while your account is open. When you delete your account we remove your profile and portfolio right away. Donation and payout records are kept for seven years to satisfy tax and accounting rules, then deleted. Analytics data is kept for up to two years.

Security

Data is encrypted in transit and at rest. Access to production systems is limited to the people who need it. Card numbers never touch our servers; they go straight to Stripe. No system is perfectly secure, and if we learn of a breach affecting your data we will tell you promptly.

Children

Good Crowd is for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, email us and we will remove it.

Changes

When we make meaningful changes to this policy we will update the date above and, for significant changes, notify you in the app or by email before they take effect.

Contact

Questions about privacy? Email hello@goodcrowd.app.