Privacy Policy

Summary

MitzvahBox operates Tzedakah Box, a donation facilitation app for intentional Jewish giving. This policy explains what data may be collected, why it is used, what is shared with service providers, and how to request access or deletion.

MitzvahBox does not sell personal information and does not use third-party advertising tracking.

Data we may collect

• A Support ID or signed-in account identifier so activity can be reconciled and recovered.
• Email address or contact details if you provide them for support, account recovery, charity onboarding, or review communication.
• Donation and tray activity, including amounts, currency, selected boxes, selected charities, allocation status, and timestamps.
• Payment provider references, such as Stripe payment intent identifiers, Apple Pay-related payment references, refund references, dispute references, and ledger operation IDs.
• App settings, pending donation state, device-local preferences, and notification choices where relevant.
• Support requests, deletion requests, refund requests, charity inquiries, and related correspondence.
• Account recovery information if account recovery is enabled and you choose to sign in through a configured provider.

Data we do not store

MitzvahBox does not store full credit card numbers. Card and wallet payments are handled by payment providers such as Stripe and Apple Pay. The app may receive limited payment status and reference information so support, reconciliation, fraud prevention, and accounting workflows can work.

How we use data

• To operate the app, including tray balances, boxes, charity selection, donation history, and support IDs.
• To process payments, reconcile ledger entries, handle refunds or disputes, and support charity payout operations.
• To provide donor support, account recovery, data access, deletion, and security responses.
• To prevent fraud, misuse, payment abuse, and operational errors.
• To comply with legal, tax, accounting, payment-network, App Store, and charity-operation requirements.
• To improve reliability, accessibility, and product quality without third-party advertising tracking.

Service providers

MitzvahBox may share limited data with service providers only as needed to run the service. These may include:

• Stripe for payment processing, payment status, refunds, disputes, and payout-related workflows.
• Apple Pay when you choose to pay through Apple Pay.
• Clerk if account recovery or sign-in is configured in the app build you use.
• Backend hosting, database, logging, email, and support tooling used to operate the app and respond to requests.
• Listed charities or charity representatives when needed for payout, reporting, support, or receipt handling.

Service providers are expected to process data for operational purposes, not for third-party advertising on behalf of MitzvahBox.

Charity, tax, and receipt information

MitzvahBox is a donation facilitation platform, not a registered charity. Tax receipts, where available, are issued by receiving charities. Data needed for receipt, payout, fraud, accounting, or legal compliance may need to be retained even after a deletion request.

Retention

MitzvahBox keeps data only as long as needed for app functionality, payment reconciliation, donor support, accounting, fraud prevention, legal compliance, charity payout operations, or legitimate operational records.

Some data may be retained longer when required for payment disputes, refunds, tax or accounting records, fraud prevention, legal obligations, audit trails, or charity payout reconciliation.

Access and deletion

You may request access to or deletion of personal data by visiting mitzvahbox.org/delete-data or emailing privacy@mitzvahbox.org.

Please include your Support ID if available. MitzvahBox may need to verify your identity before sharing or deleting account-linked data.

Children and family use

Tzedakah Box is suitable for family conversations about giving, but payments and account management should be handled by a parent, guardian, or responsible adult. The service is not intended to collect personal information directly from children without appropriate adult involvement.

International processing

MitzvahBox and its service providers may process data in countries other than where you live. When data is processed internationally, it is handled for the purposes described in this policy and subject to applicable provider safeguards and legal requirements.

Changes

This policy may be updated as the app, payment model, charity operations, or legal structure changes. The last-updated date will change when material updates are made.