Privacy Policy

Fund-It ("we," "us," or "our") operates the Fund-It website and mobile application (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using the Service, you agree to the practices described here.

1. Information We Collect

Account information. When you register, we collect your email address, username, and a hashed password. We do not store plaintext passwords.

Voting data. When you cast a vote, we record which charity you voted for in a given voting period. This is required to enforce the one-vote-per-period rule and maintain ballot integrity.

Donation records. When you donate, we record the donation amount and the voting period it is associated with. Your payment information (card number, bank details) is processed entirely by PayPal and is never transmitted to or stored on our servers.

Technical data. Our infrastructure providers may log IP addresses, browser type, and device information for security, performance, and debugging purposes. We do not actively collect this data ourselves.

2. How We Use Your Information

• To authenticate your account and maintain your session across visits
• To enforce voting integrity — one vote per user per active voting period
• To associate donations with voting periods for our public transparency records
• To send account-related emails, such as password resets or service notices

We do not sell your personal information. We do not use your data for advertising or share it with advertisers.

3. Third-Party Services

We rely on the following third-party services to operate Fund-It. Each has its own privacy policy governing how it handles your data:

• Supabase — Authentication, database storage, and session management. Your email, username, and vote history are stored on Supabase infrastructure.
• PayPal — All donation payments are processed by PayPal. We do not receive or store your payment credentials.
• Vercel — Website hosting, edge networking, and request logging.

4. Cookies and Session Data

Fund-It uses cookies solely to maintain your login session. These cookies are strictly necessary for the Service to function and cannot be disabled without breaking authentication. We do not use cookies for advertising, analytics, or cross-site tracking.

5. Data Retention

We retain your account information for as long as your account is active. Vote and donation records are retained indefinitely for public transparency purposes. If you request account deletion, we will remove your personal information from our systems. Aggregated, anonymized data — such as total vote counts per period — may be retained.

6. Children's Privacy

Fund-It is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has registered an account, please email funditsupport@gmail.com immediately and we will delete that information promptly.

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing funditsupport@gmail.com. We will respond within a reasonable timeframe.

8. Changes to This Policy

We may update this Privacy Policy periodically. If we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.

9. Contact

If you have questions or concerns about this Privacy Policy, email us at funditsupport@gmail.com.