Privacy Policy

Welcome to Microfund ("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Microfund mobile application and website (collectively, the "Service").

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

1. Information We Collect

We collect information you provide directly to us and information generated through your use of the Service.

1.1 Information You Provide

• Account registration: name, email address, password, and profile photo (optional).
• Campaign creation: campaign title, story, goal amount, photos, and bank/payout account details.
• Payment information: credit or debit card details, billing address. Payment data is processed by our third-party payment processor (e.g., Stripe) and is not stored on our servers.
• Communications: messages, support requests, and feedback you send us.

1.2 Information Collected Automatically

• Usage data: pages viewed, features used, donation activity, share-link clicks, and session duration.
• Device information: device type, operating system, unique device identifiers (IDFA / Android ID), IP address, and browser type.
• Location: general location inferred from IP address. We do not collect precise GPS location.
• Push notification tokens: used to deliver optional daily giving reminders.
• Cookies and similar technologies: used on our website for analytics and session management.

1.3 Information from Third Parties

• If you sign in via Apple, Google, or Facebook, we receive your name and email address from that provider.
• Payment processors provide transaction confirmation data (amount, status) but not full card numbers.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and wallet.
• Process donations and credit pack purchases.
• Display campaign pages and track progress (gauge indicator).
• Generate and track viral share links.
• Send optional push notifications and daily giving reminders (you may opt out at any time in Settings).
• Send transactional emails (receipts, campaign updates, payout confirmations).
• Detect and prevent fraud, abuse, and security incidents.
• Improve and personalize the Service through analytics.
• Comply with legal obligations.

We do not sell your personal information to third parties. We do not use your personal information for targeted advertising.

3. How We Share Your Information

We may share your information with:

• Service providers: payment processors (Stripe), cloud infrastructure (AWS / Google Cloud), analytics (Mixpanel or similar), email delivery (SendGrid), and push notification services (APNs, FCM). These providers are contractually bound to protect your data.
• Campaign recipients: payout details (name, payout account) are shared with the bank or payment service used to disburse funds.
• Law enforcement / legal process: when required by law, subpoena, or to protect the rights, property, or safety of Microfund, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice provided to you.

Public campaign pages display the campaign creator's name and story. Donor identities are never displayed on public pages — donations are anonymous to other users.

4. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. Transaction records are retained for a minimum of 7 years for tax and legal compliance. You may request deletion of your account and associated data at any time (see Section 7). Certain data may be retained in anonymized, aggregated form for analytics.

5. Security

We use industry-standard security measures including TLS encryption in transit, encrypted storage at rest, access controls, and regular security audits. However, no method of transmission over the internet or method of electronic storage is 100% secure. We encourage you to use a strong, unique password and enable two-factor authentication when available.

6. Children's Privacy

Microfund is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information, please contact us immediately at Microfund@proton.me and we will delete that information.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your account and personal data (subject to legal retention requirements).
• Portability: request your data in a portable format.
• Opt-out of notifications: disable push notifications in your device settings or in the Microfund app Settings → Notifications.
• California residents (CCPA): you have the right to know, delete, and opt out of the "sale" of personal information. We do not sell personal information.
• EEA/UK residents (GDPR): you have the right to lodge a complaint with your local supervisory authority.

To exercise these rights, contact us at Microfund@proton.me. We will respond within 30 days.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to maintain sessions, remember preferences, and analyze usage. You may disable cookies through your browser settings; however, some features of the website may not function properly without them.

We use analytics tools (e.g., Google Analytics) to understand how users interact with our website. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

9. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing any information to them.

10. International Data Transfers

Microfund is operated in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. By using the Service, you consent to such transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and, for material changes, notify you via email or an in-app notification. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us. We are happy to help.