Plain-language summary. We collect the information we need to run IMPACT — your account details, the missions and content you interact with, and basic device and usage data. We do not sell your personal information. We share data only with service providers that help us operate the platform, with schools or organizations you join, and where law requires. You can request access to or deletion of your data at any time.
This Privacy Policy explains how Minds & Hearts, Inc. (“Minds & Hearts,” “IMPACT,” “we,” “us,” or “our”) collects, uses, and discloses information when you use the IMPACT website at joinimpact.app, the IMPACT mobile applications for iOS and Android, and any related services (together, the “Services”).
By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.
1. Information We Collect
1.1 Information you provide
- Account information: name, email address, phone number (if provided), password, profile photo, age or date of birth (where required), and the school, organization, or community you affiliate with.
- Content you create:mission completions, posts, comments, replies, group activity, messages sent through the app's social features, and questions submitted to the AskIMPACT AI tool.
- Donations: when you donate, payment is processed by a third-party processor (such as Givebutter). We do not store full payment-card numbers on our servers; we may receive transaction confirmations, donation amounts, and the email you used.
- Communications: messages you send to our support team, survey responses, and feedback you submit.
1.2 Information collected automatically
- Device and technical data: device type, operating system and version, app version, language preference, time zone, IP address, and crash logs.
- Usage data: pages or screens you view, features you use, missions you complete, points and recognition earned, session duration, and referring URLs.
- Cookies and similar technologies:on the website, we use cookies and similar storage to keep you signed in, remember preferences, and measure performance. See “Cookies” below.
- Approximate location: we may infer your general location (such as country or city) from your IP address. We do not collect precise GPS location unless you explicitly grant permission for a specific feature.
1.3 Information from third parties
- If you sign in using a third-party identity provider (such as Apple or Google), we receive a basic profile and authentication token from that provider.
- If you join IMPACT through a school, house of worship, or organization, that institution may share your name, role, and cohort membership with us so we can place you in the right groups.
2. How We Use Information
We use the information we collect to:
- create and operate your account and the Services;
- power core features, including missions, rewards, leaderboards, groups, content feeds, and the AskIMPACT AI tool;
- communicate with you about your account, security, missions, and service announcements;
- personalize content and recommendations within the Services;
- measure performance, debug issues, prevent abuse, and improve the Services;
- comply with legal obligations and enforce our Terms & Conditions.
3. How We Share Information
We share personal information only as described below:
- Service providers: with vendors who host our infrastructure, send transactional email, process donations, provide analytics and crash reporting, and supply AI capabilities for the AskIMPACT feature. These providers are contractually limited to using the data on our behalf.
- Your school, organization, or cohort: if you join IMPACT through an institution, the administrators of that institution can see your name, activity, and progress within their cohort, as needed to run the program.
- Other users: content you post publicly within IMPACT (such as group posts, public profile fields, or comments) is visible to other users of the Services.
- Legal and safety:we may disclose information when required by law, valid legal process, or to protect the rights, property, or safety of users, the public, or Minds & Hearts, Inc.
- Business transfers:if Minds & Hearts is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.
We do not sell your personal information. We also do not share personal information with third parties for their own independent advertising purposes.
4. Cookies and Tracking
On the website, we use cookies and similar technologies for authentication, security, preferences, and performance measurement. You can control cookies through your browser settings. Disabling certain cookies may prevent parts of the Services from working correctly. The mobile apps use similar local-storage mechanisms for the same purposes.
5. Data Retention
We retain personal information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, prevent abuse, and maintain backups. When information is no longer needed, we delete or anonymize it.
6. Data Security
We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, access controls, and regular review of our practices. No system is perfectly secure; we cannot guarantee absolute security of information transmitted to or stored on the Services.
7. Children's Privacy
IMPACT is built for use in schools, houses of worship, youth organizations, and community programs that may include minors.
- We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent or consent provided through a school or program acting in loco parentis.
- For users between ages 13 and 18, we encourage parental or guardian involvement and limit features in ways appropriate to age.
- If you believe a child under 13 has provided personal information to us without proper consent, please contact us using the details in Section 13 and we will take prompt steps to delete it.
8. Your Privacy Rights
Depending on where you live, you may have the following rights with respect to your personal information:
- access to the personal information we hold about you;
- correction of inaccurate or incomplete information;
- deletion of your personal information;
- objection to or restriction of certain processing activities;
- portability of your information in a machine-readable form;
- the right to withdraw consent, where processing is based on consent;
- the right to lodge a complaint with a data protection authority.
To exercise these rights, contact us using the details in Section 13. We will respond within the timeframes required by applicable law.
8.1 California residents
Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information, including the right to know, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. As stated above, we do not sell or share personal information for cross-context behavioral advertising.
8.2 EEA, UK, and Swiss residents
If you are located in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing your personal information are: performance of a contract with you, compliance with our legal obligations, your consent (where required), and our legitimate interests in operating and improving the Services.
9. Account Deletion
You can request deletion of your IMPACT account and the personal information associated with it at any time. To do so:
- In the mobile app, go to Settings → Account → Delete account; or
- Email privacy@joinimpact.app with the subject line “Account Deletion Request”.
We will confirm the request and delete or anonymize your account and associated personal information within a reasonable timeframe, except where retention is required for legal, security, or fraud-prevention purposes.
10. Third-Party Services and Links
The Services may link to or integrate with third-party services (for example, donation processing, identity providers, social networks). Their privacy practices are governed by their own policies, which we encourage you to review.
11. International Data Transfers
Minds & Hearts, Inc. is based in the United States. If you use the Services from outside the United States, your information will be transferred to and processed in the United States and other jurisdictions where we or our service providers operate. We take steps to ensure such transfers comply with applicable law.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the Services. Your continued use of the Services after the changes take effect constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact us at:
Minds & Hearts, Inc.
Email: privacy@joinimpact.app