Privacy Policy

This Privacy Policy explains how Minds & Hearts, Inc. (“Minds & Hearts,” “IMPACT,” “we,” “us,” or “our”) collects, uses, and discloses information when you use the IMPACT website at joinimpact.app, the IMPACT mobile applications for iOS and Android, and any related services (together, the “Services”).

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services. Using the Services or submitting content does not by itself authorize external promotional use of an identifiable person's image, likeness, or voice; separate authorization is required as described in Section 2.1.

1. Information We Collect

1.1 Information you provide

• Account information: name, email address, phone number (if provided), password, profile photo, age or date of birth (where required), and the school, organization, or community you affiliate with.
• Content you create:mission completions, posts, comments, replies, group activity, messages sent through the app's social features, and questions submitted to the AskIMPACT AI tool. This includes photos, videos, and audio you submit, along with related information about identifiable people depicted or heard in that content, such as their image, likeness, voice, and any names, school affiliations, or locations you provide.
• Donations: when you donate, payment is processed by a third-party processor (such as Givebutter). We do not store full payment-card numbers on our servers; we may receive transaction confirmations, donation amounts, and the email you used.
• Communications: messages you send to our support team, survey responses, and feedback you submit.

1.2 Information collected automatically

• Device and technical data: device type, operating system and version, app version, language preference, time zone, IP address, and crash logs.
• Usage data: pages or screens you view, features you use, missions you complete, points and recognition earned, session duration, and referring URLs.
• Cookies and similar technologies:on the website, we use cookies and similar storage to keep you signed in, remember preferences, and measure performance. See “Cookies” below.
• Approximate location: we may infer your general location (such as country or city) from your IP address. We do not collect precise GPS location unless you explicitly grant permission for a specific feature.

1.3 Information from third parties

• If you sign in using a third-party identity provider (such as Apple or Google), we receive a basic profile and authentication token from that provider.
• If you join IMPACT through a school, house of worship, or organization, that institution may share your name, role, and cohort membership with us so we can place you in the right groups.

2. How We Use Information

We use the information we collect to:

• create and operate your account and the Services;
• power core features, including missions, rewards, leaderboards, groups, content feeds, and the AskIMPACT AI tool;
• communicate with you about your account, security, missions, and service announcements;
• personalize content and recommendations within the Services;
• measure performance, debug issues, prevent abuse, and improve the Services;
• comply with legal obligations and enforce our Terms & Conditions.

2.1 Photos, videos, and promotional use

We collect photos, videos, and related information you submit through IMPACT to provide the Services and display content according to the audience and settings of the feature you use.

You are responsible for the content you submit. When you submit content for promotional use, you represent and warrant that you own it or have the copyright owner's permission, and that you have obtained all permissions needed for the proposed use, including written consent from every identifiable person depicted or heard and written consent from a parent or legal guardian for each minor. You must not submit content for promotional use if you lack those permissions. You are responsible for making those permissions available if requested.

When you authorize promotional use, you grant Minds & Hearts, Inc., to the extent you hold or are authorized to grant the relevant rights, a nonexclusive, royalty-free license to reproduce, reasonably edit, display, and share the authorized content to promote IMPACT on our website, IMPACT-operated social-media accounts, and other promotional materials, within the scope of the permissions actually obtained. Names, school affiliations, locations, paid advertising, and partner use are included only where authorized. An uploader's representation or agreement does not replace another person's written consent or a minor's parent or legal guardian's written consent.

Permission to use the app is separate from permission for external promotional use. Using IMPACT, uploading content, or posting it publicly does not by itself establish those permissions. Authorized content shared on external platforms may be public and is subject to those platforms' terms and privacy practices. We may decline promotional content or request additional permission information.

For questions about promotional permissions, concerns about content, or removal requests, contact privacy@joinimpact.app. Requests are subject to applicable law and the authorization given. Removal from third-party reposts, previously distributed materials, or channels outside our control cannot be guaranteed. Updating this policy does not supply missing permissions for existing content.

3. How We Share Information

We share personal information only as described below:

• Service providers: with vendors who host our infrastructure, send transactional email, process donations, provide analytics and crash reporting, and supply AI capabilities for the AskIMPACT feature. These providers are contractually limited to using the data on our behalf.
• Your school, organization, or cohort: if you join IMPACT through an institution, the administrators of that institution can see your name, activity, and progress within their cohort, as needed to run the program.
• Other users: content you post publicly within IMPACT (such as group posts, public profile fields, or comments) is visible to other users of the Services.
• Authorized external promotional sharing: only with the separate permissions described in Section 2.1, we may publish authorized content on our website, IMPACT-operated social-media accounts, and other authorized promotional channels. This content may be visible to the public. Sharing names, school affiliations, locations, paid advertising, or use by partner organizations requires express coverage in the authorization. External platforms have their own terms and privacy practices; third-party reposts or copies may remain outside our control.
• Legal and safety:we may disclose information when required by law, valid legal process, or to protect the rights, property, or safety of users, the public, or Minds & Hearts, Inc.
• Business transfers:if Minds & Hearts is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.

We do not sell your personal information. We also do not share personal information with third parties for their own independent advertising purposes, except where a separate authorization expressly covers promotional use by a partner organization as described in Section 2.1.

4. Cookies and Tracking

On the website, we use cookies and similar technologies for authentication, security, preferences, and performance measurement. You can control cookies through your browser settings. Disabling certain cookies may prevent parts of the Services from working correctly. The mobile apps use similar local-storage mechanisms for the same purposes.

5. Data Retention

We retain personal information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, prevent abuse, and maintain backups. When information is no longer needed, we delete or anonymize it.

6. Data Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, access controls, and regular review of our practices. No system is perfectly secure; we cannot guarantee absolute security of information transmitted to or stored on the Services.

7. Children's Privacy

IMPACT is built for use in schools, houses of worship, youth organizations, and community programs that may include minors.

• IMPACT accounts are available only to people aged 13 or older. Children under 13 may not create or use an account. We do not knowingly collect personal information directly from children under 13 through an IMPACT account.
• Users who are 13 or older but under the age of majority where they live must have the consent and involvement of a parent or legal guardian, as described in Section 2 of our Terms.
• If you believe a child under 13 has created an account or provided personal information directly to us, contact privacy@joinimpact.app. We will investigate and, where applicable, close the account and delete the information, subject to applicable legal requirements.

A user submitting content involving a minor for promotional use is responsible for obtaining the written parent or legal guardian authorization and other permissions described in Section 2.1. A child's agreement, or a school's or uploader's assurance, is not a substitute for the required guardian consent. Permission for app participation alone is not promotional permission.

8. Your Privacy Rights

Depending on where you live, you may have the following rights with respect to your personal information:

• access to the personal information we hold about you;
• correction of inaccurate or incomplete information;
• deletion of your personal information;
• objection to or restriction of certain processing activities;
• portability of your information in a machine-readable form;
• the right to withdraw consent, where processing is based on consent;
• the right to lodge a complaint with a data protection authority.

To exercise these rights, contact us using the details in Section 13. We will respond within the timeframes required by applicable law.

8.1 California residents

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information, including the right to know, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. As stated above, we do not sell or share personal information for cross-context behavioral advertising.

8.2 EEA, UK, and Swiss residents

If you are located in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing your personal information are: performance of a contract with you, compliance with our legal obligations, your consent (where required), and our legitimate interests in operating and improving the Services.

9. Account Deletion

You can request deletion of your IMPACT account and the personal information associated with it at any time. To do so:

• In the mobile app, go to Settings → Account → Delete account; or
• Email privacy@joinimpact.app with the subject line “Account Deletion Request”.

We will confirm the request and delete or anonymize your account and associated personal information within a reasonable timeframe, except where retention is required for legal, security, or fraud-prevention purposes.

10. Third-Party Services and Links

The Services may link to or integrate with third-party services (for example, donation processing, identity providers, social networks). Their privacy practices are governed by their own policies, which we encourage you to review.

11. International Data Transfers

Minds & Hearts, Inc. is based in the United States. If you use the Services from outside the United States, your information will be transferred to and processed in the United States and other jurisdictions where we or our service providers operate. We take steps to ensure such transfers comply with applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the Services. Your continued use of the Services after the changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Minds & Hearts, Inc.
Email: privacy@joinimpact.app