Privacy Policy

Information we collect

• Account information, including your phone number, display name, language preference, community membership, role, and authentication identifiers from Privy.
• Wallet information, including public wallet addresses used for transparent voting and project funding workflows.
• Community activity, including proposals, votes, comments, reports, project updates, receipt uploads, action plans, agreement activity, notification preferences, and audit events.
• Media and files you submit, such as proposal photos, voice recordings, progress evidence, receipts, and signed artifacts.
• Device and usage information needed to operate the service, including push tokens, analytics events, IP address, user agent, timestamps, and error or security logs.
• Location data only when you choose to attach it to a proposal or project submission.

How we use information

• To create and secure your account, authenticate sessions, and prevent unauthorized access.
• To operate community membership, project proposal, voting, funding, repayment, receipt, and reporting workflows.
• To provide notifications, support, moderation, fraud prevention, safety, auditability, and service reliability.
• To automatically screen comments and project updates for potentially harmful or objectionable content before publication and route uncertain content to human review.
• To generate transparency records for community governance and donor reporting while limiting unnecessary personal data disclosure.
• To comply with legal, tax, accounting, security, sanctions, anti-fraud, nonprofit governance, and regulatory obligations.

Automated content safety

Comments, project-update text, and supported images may be sent to OpenAI for automated safety classification before publication. The safety result is used to publish, reject, or hold content for human moderation. If automated screening is unavailable or cannot evaluate a media type, the content is kept private while a moderator reviews it. Do not include unnecessary sensitive personal information in user content.

Sharing and disclosure

We do not sell your personal information. We may share information with service providers that help us run Impact Stream, including authentication, hosting, storage, messaging, analytics, security, payment, blockchain infrastructure, and support providers. We may disclose information to community administrators, reviewers, auditors, legal authorities, or partners when needed to operate projects, enforce rules, protect people, investigate misuse, or comply with law.

Public and community-visible content

Some project information is intentionally visible to other community members or the public, such as project titles, descriptions, budgets, updates, public receipt details, funding status, and proposal or project owner names. Do not submit sensitive personal information in public project content unless you are comfortable with that visibility.

Blockchain records

Some voting or funding activity may be submitted to public blockchain networks. Public blockchain records are maintained by decentralized networks and may not be changeable or deletable by Impact Stream. We limit what personal information we intentionally put on chain.

Retention and deletion

We retain information for as long as needed to provide the service, maintain security, resolve disputes, support project accountability, and meet legal or audit obligations. You can delete your account in the mobile app from Profile > Delete account, or visit Account Deletion. Deletion removes personal profile identifiers from your account record. Some records may be retained when required by law, needed for nonprofit governance, financial integrity, public blockchain integrity, audit trails, fraud prevention, or dispute resolution.

Your choices

• You can update your display name and notification preferences in the app.
• You can request community membership changes through available app workflows or support.
• You can delete your account from the app or request deletion through our account deletion page.
• You can contact us about access, correction, deletion, or privacy questions.

Security

We use technical, administrative, and organizational safeguards designed to protect information, including token-based authentication, access controls, audit logging, encrypted transport, and provider security controls. No system can be guaranteed to be perfectly secure.

Children

Impact Stream is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can review and remove it where appropriate.

Contact

For privacy questions or requests, contact support@impact.stream.