Privacy Policy
This Privacy Notice for Daily Manna, PBC describes how and why we might access, collect, store, use, and share your personal information when you use our Services.
This notice applies when you:
- Visit our website at dailymanna.co or any website of ours that links to this Privacy Notice
- Download and use our mobile application (Daily Manna: Roundups), or any other application of ours that links to this Privacy Notice
- Use Manna, a roundup-based giving utility that enables users to connect their accounts and automate micro-contributions to their designated non-profit organizations
- Engage with us in other related ways, including any marketing or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services.
Summary of Key Points
This summary provides key points from our Privacy Notice. Use the contents list to jump to any section in full.
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the products and features you use.
Do we process sensitive personal information? Some information may be considered "special" or "sensitive" in certain jurisdictions. We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law.
Do we collect information from third parties? Yes. When you connect a bank account, Plaid provides us with read-only transaction information so we can calculate your round-ups. Stripe provides us with the status of payments and, for churches, verification information. We do not buy personal information from data brokers.
How do we process your information? To provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
In what situations do we share personal information? We may share information in specific situations and with specific third parties, described in section 3.
How do we keep your information safe? We have organizational and technical processes in place to protect your personal information. However, no electronic transmission or storage technology can be guaranteed to be 100% secure.
What are your rights? Depending on where you are located, applicable privacy law may give you certain rights regarding your personal information.
1. What Information Do We Collect?
Personal information you disclose to us
We collect personal information that you voluntarily provide when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us.
Personal Information Provided by You. The personal information we collect may include:
- Names
- Email addresses
- Contact preferences
- Phone numbers
Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:
- Financial data
Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and its security code. All payment data is handled and stored by Stripe and Plaid. Their privacy notices are available at stripe.com/privacy and plaid.com/legal.
Application Data. If you use our application, we may collect the following if you grant permission:
- Push Notifications. We may request to send you push notifications regarding your account or certain features. You can opt out in your device settings.
All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.
Information automatically collected
This information does not reveal your specific identity but may include device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and other technical information. It is primarily needed to maintain the security and operation of our Services and for internal analytics and reporting.
Like many businesses, we also collect information through cookies and similar technologies. The information we collect includes:
- Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect, which may include your IP address, device information, browser type and settings, activity in the Services, and device event information such as system activity and error reports.
2. How Do We Process Your Information?
- To facilitate account creation and authentication and otherwise manage user accounts.
- To deliver and facilitate delivery of services to the user.
- To respond to user inquiries and offer support.
- To send administrative information to you, including changes to our terms and policies.
- To request feedback and to contact you about your use of our Services.
- To protect our Services, including fraud monitoring and prevention.
- To evaluate and improve our Services and your experience.
3. When and With Whom Do We Share Your Personal Information?
We do not sell your personal information and we do not share it for advertising. We do rely on a small number of service providers to operate the Services, and information necessarily passes to them:
- Plaid connects your bank account and provides us with read-only transaction information so we can calculate round-ups. Your bank credentials are entered with Plaid and are never seen or stored by us. This access does not allow us to move money from your bank account. plaid.com/legal
- Stripe processes card payments and holds and disburses funds. Your card details are entered with Stripe and are never seen or stored by us. For churches, Stripe also collects the identity and verification information required to receive funds. stripe.com/privacy
- Our email provider delivers your sign-in codes and account notices, and therefore processes your email address.
- Our hosting and analytics providers operate the Services and help us understand how they are used.
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
Your gift goes to your church, not to us. Manna is not the recipient of your contribution and does not issue tax receipts. Any acknowledgement you need for tax purposes comes from the church that received the gift.
4. Do We Use Cookies and Other Tracking Technologies?
We may use cookies and similar technologies (like web beacons and pixels) to gather information when you interact with our Services. Some help us maintain security, prevent crashes, fix bugs, save your preferences, and support basic site functions.
We also permit service providers to use online tracking technologies for analytics. To the extent these are deemed a "sale" or "sharing" under applicable US state laws, you can opt out as described in section 10.
Analytics
We use Mixpanel to understand how the Services are used: which pages are viewed, and whether a form was submitted. Mixpanel is not sent your email address. Where a submission needs to be linked to earlier activity, we send an irreversible hash of the address instead, so the analytics provider holds an identifier it cannot resolve back to you. We do not record sessions, and we do not use analytics for advertising.
We also use Google Analytics to understand where visits come from, such as the referring site or campaign. It is configured not to collect your full IP address, and it is not sent your email address or the hash described above. To opt out of Google Analytics specifically, install Google’s browser add-on.
To opt out, enable “Do Not Track” in your browser, or use any content blocker that blocks analytics requests. Doing so does not affect your ability to use the Services or to submit a form.
5. How Long Do We Keep Your Information?
No purpose in this notice will require us to keep your personal information for longer than the period in which you have an account with us, unless a longer retention period is required or permitted by law.
When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, or if that is not possible, securely store it and isolate it from further processing until deletion is possible.
6. How Do We Keep Your Information Safe?
We have implemented appropriate and reasonable technical and organizational security measures. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise that unauthorized third parties will never defeat our security. Transmission of personal information to and from our Services is at your own risk.
7. Do We Collect Information from Minors?
By using the Services, you represent that you are at least 18, or that you are the parent or guardian of a minor and consent to their use of the Services. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under 18, please contact us at privacy@dailymanna.co.
8. What Are Your Privacy Rights?
Withdrawing your consent: If we are relying on your consent, you have the right to withdraw it at any time by contacting us using the details in section 12. This will not affect the lawfulness of processing before withdrawal.
Opting out of marketing: You can unsubscribe at any time using the link in our emails or by contacting us. We may still send service-related messages necessary for the administration of your account.
Account Information
If you would like to review or change the information in your account or terminate your account, you can log in to your account settings and update your user account.
Upon your request to terminate, we will deactivate or delete your account and information from our active databases. We may retain some information to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, or comply with legal requirements.
Cookies: Most browsers accept cookies by default. You can usually set your browser to remove or reject cookies, though this may affect certain features of our Services.
9. Controls for Do-Not-Track Features
Most web browsers include a Do-Not-Track ("DNT") feature you can activate to signal your privacy preference. No uniform technology standard for recognizing DNT signals has been finalized, so we do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will inform you in a revised version of this Privacy Notice.
California law requires us to disclose how we respond to DNT signals. Because there is currently no industry or legal standard, we do not respond to them at this time.
Global Privacy Control: We recognize and honor Global Privacy Control (GPC) signals. If you use a browser or extension that supports GPC, we treat this as a valid request to opt out of the sale or sharing of your personal information for targeted advertising under applicable state privacy laws, including the CCPA. Learn more at globalprivacycontrol.org.
10. Do United States Residents Have Specific Privacy Rights?
Categories of Personal Information We Collect
The table below shows the categories of personal information we have collected in the past twelve (12) months.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, IP address, email address, and account name | NO |
| B. Personal information (California Customer Records) | Name, contact information, education, employment, employment history, and financial information | NO |
| C. Protected classification characteristics | Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data | NO |
| D. Commercial information | Transaction information, purchase history, financial details, and payment information | NO |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or similar network activity | Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements | NO |
| G. Geolocation data | Device location | NO |
| H. Audio, electronic, sensory, or similar information | Images and audio, video or call recordings created in connection with our business activities | NO |
| I. Professional or employment-related information | Business contact details, job title, work history, and professional qualifications | NO |
| J. Education Information | Student records and directory information | NO |
| K. Inferences drawn from collected personal information | Inferences drawn to create a profile or summary about an individual’s preferences and characteristics | NO |
| L. Sensitive personal information | Account login information and financial information including account access details | YES |
We only collect sensitive personal information as defined by applicable privacy laws, for the purposes allowed by law or with your consent. You may have the right to limit the use or disclosure of your sensitive personal information. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.
We may also collect other personal information outside these categories where you interact with us in person, online, or by phone or mail in the context of receiving customer support, participating in surveys or contests, and facilitating delivery of our Services.
We will use and retain collected personal information as needed to provide the Services, or for Category L, as long as you have an account with us.
How We Use and Share Personal Information
We may disclose your personal information to service providers pursuant to a written contract. We may use your personal information for our own business purposes, such as internal research for technological development and demonstration. This is not considered "selling" of your personal information.
We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information belonging to website visitors, users, or other consumers in the future.
Your Rights
- Right to know whether or not we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to request the deletion of your personal data
- Right to obtain a copy of the personal data you previously shared with us
- Right to non-discrimination for exercising your rights
- Right to opt out of processing used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions producing legal or similarly significant effects
Depending on the state where you live, you may also have rights to access the categories of personal data being processed; obtain a list of the categories of third parties, or specific third parties, to which we have disclosed personal data; obtain a list of third parties to which we have sold personal data; review, understand, question and correct how personal data has been profiled; limit use and disclosure of sensitive personal data; and opt out of the collection of sensitive data collected through a voice or facial recognition feature.
How to Exercise Your Rights
To exercise these rights, you can contact us by emailing us at privacy@dailymanna.co, or by referring to the contact details at the bottom of this page. We will honor your opt-out preferences if you enact the Global Privacy Control signal on your browser.
Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an agent who does not submit proof of valid authorization.
Request Verification
Upon receiving your request, we will need to verify your identity. We will only use personal information provided in your request to verify your identity or authority. If we cannot verify your identity from information already maintained, we may request additional information for verification and fraud-prevention purposes.
Appeals
If we decline to take action regarding your request, you may appeal our decision by emailing us at privacy@dailymanna.co. We will inform you in writing of any action taken or not taken, including a written explanation. If your appeal is denied, you may submit a complaint to your state attorney general.
California "Shine The Light" Law
California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the preceding calendar year. Submit such requests in writing using the contact details in section 12.
11. Do We Make Updates to This Notice?
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated date at the top. If we make material changes, we may notify you by prominently posting a notice or by directly sending you a notification. We encourage you to review this notice frequently.
12. How Can You Contact Us About This Notice?
If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO) by email at privacy@dailymanna.co, or by post at:
Daily Manna, PBC
Data Protection Officer
2225 Hawkins Street, 110
Charlotte, NC 28203
United States
13. How Can You Review, Update, or Delete Your Data?
You have the right to request access to the personal information we collect from you, details about how we have processed it, correction of inaccuracies, or deletion of your personal information. You may also have the right to withdraw your consent. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please email us at privacy@dailymanna.co.