Privacy Policy
This Privacy Notice for Daily Manna, PBC describes how and why we might access, collect, store, use, and share your personal information when you use our Services.
This notice applies when you:
- Visit our website at dailymanna.co or any website of ours that links to this Privacy Notice
- Use the Manna app (the “App”), in a web browser or on a phone or tablet, or any other application of ours that links to this Privacy Notice
- Use Manna, a roundup-based giving utility that enables users to connect their accounts and automate micro-contributions to their designated non-profit organizations
- Engage with us in other related ways, including any marketing or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services.
Summary of Key Points
This summary provides key points from our Privacy Notice. Use the contents list to jump to any section in full.
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the products and features you use.
Do we process sensitive personal information? Some information may be considered "special" or "sensitive" in certain jurisdictions. We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law.
Do we collect information from third parties? Yes. When you connect a bank account, our bank data provider gives us read-only transaction information so we can calculate your round-ups. Our payment processor gives us the status of payments and, for churches, verification information. We do not buy personal information from data brokers.
How do we process your information? To provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
In what situations do we share personal information? We may share information in specific situations and with specific third parties, described in section 3.
How do we keep your information safe? We have organizational and technical processes in place to protect your personal information. However, no electronic transmission or storage technology can be guaranteed to be 100% secure.
What are your rights? Depending on where you are located, applicable privacy law may give you certain rights regarding your personal information.
1. What Information Do We Collect?
Personal information you disclose to us
We collect personal information that you voluntarily provide when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us.
Personal Information Provided by You. The personal information we collect may include:
- Your name and email address, and a phone number if you give one
- A profile photo, if you upload one
- The church you give to, and whether you choose to be named to it
- Your giving settings: your threshold, multiplier, monthly cap, and whether giving is paused
- Which emails you have switched off
- What you send us when you contact us or fill in a form on our website
Bank data. You sign in to your bank with our bank data provider, never with us. We receive the name of your bank, the name and last four digits of each account, and, for each transaction, its amount, its date, whether it is still pending, and an identifier. We do not keep merchant names or descriptions. We read each transaction’s general category to leave out transfers, card payments, and fees, and we do not keep it.
Payment data. You add your payment method, such as a debit or credit card, with our payment processor, never with us. We do not receive your full card number or security code. We keep a reference to your payment method so that we can charge it, and the record of each gift: its amount, its date, the church, and the fee. Your payment method is separate from the bank accounts you link for round-ups.
Agreements. When you agree to our terms, this notice, or an authorization in the App, we record which version you agreed to, when, your IP address, and your browser.
Churches. If you register or administer a church, we collect the church’s name, address, phone number, employer identification number, logo, and the people who administer it. The identity details of the church’s representative, such as date of birth and the last four digits of a Social Security number, go directly to our payment processor and are never seen or stored by us.
Sensitive information. With your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:
- Financial data, described above
- Religious affiliation, which the church you choose to give to may reveal
All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.
Information automatically collected
This information may include device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, your approximate location based on your IP address, and other technical information. It is primarily needed to maintain the security and operation of our Services and for internal analytics and reporting.
Like many businesses, we also collect information through cookies and similar technologies. The information we collect includes:
- Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect, which may include your IP address, device information, browser type and settings, activity in the Services, and device event information such as system activity and error reports.
2. How Do We Process Your Information?
- To facilitate account creation and authentication and otherwise manage user accounts.
- To deliver and facilitate delivery of services to the user, including calculating your round-ups, charging your payment method, and delivering each gift to your church.
- To send you records of your giving, including a receipt for each gift and, where your church has appointed us, written acknowledgements and year-end statements in the church’s name.
- To show your church who gives, by an alias unless you choose to be named, as described in section 3.
- To keep a record of what you agreed to, and to ask you again when the wording changes.
- To respond to user inquiries and offer support.
- To send administrative information to you, including changes to our terms and policies.
- To request feedback and to contact you about your use of our Services.
- To protect our Services, including fraud monitoring and prevention.
- To evaluate and improve our Services and your experience.
3. When and With Whom Do We Share Your Personal Information?
We do not sell your personal information and we do not share it for advertising. We do rely on a small number of service providers to operate the Services, and information necessarily passes to them:
- Our bank data provider connects your bank account and provides us with read-only transaction information so we can calculate round-ups. Your bank credentials are entered with the bank data provider and are never seen or stored by us. This access does not allow us to move money from your bank account.
- Our payment processor charges your payment method and routes your giving to the church. Your payment details are entered with the payment processor and are never seen or stored by us. For churches, the payment processor also collects the identity and verification information required to receive funds.
- Our email provider delivers your sign-in codes and account notices, and therefore processes your email address.
- Our hosting and analytics providers operate the Services and help us understand how they are used.
- Your church. Your church sees each of your gifts, with its amount and date, under an alias. It sees your name and email address only if you choose to be named to it. Anonymous is the default, and you can change your choice at any time on your giving page. The church’s year-end record of contributions lists you the same way.
- Disclosure of your identity for tax purposes. If you ask us for information about your contributions for tax purposes, you authorize us to disclose your name, and the contributions recorded under your alias, to the church that received them, solely so that the church can prepare or confirm a written acknowledgement of those contributions. We make this disclosure only at your request and only for that purpose. Except as required by law, we do not reveal the identity of an anonymous giver to a church in any other circumstance.
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
Our providers
This notice refers to each service provider by its role: our bank data provider, our payment processor, our email provider, our hosting provider, and our analytics providers. Each one processes information under its own privacy notice and under its contract with us. We do not publish their names, to reduce the risk of targeted fraud. To ask which providers process your information, email privacy@dailymanna.co.
Your gift goes to your church, not to us. Manna is not the recipient of your contribution. The written acknowledgement you need for tax purposes is your church’s to give. Where your church has appointed us to do so, we issue it in the church’s name and on its behalf.
4. Do We Use Cookies and Other Tracking Technologies?
We may use cookies and similar technologies (like web beacons and pixels) to gather information when you interact with our Services. Some help us maintain security, prevent crashes, fix bugs, save your preferences, and support basic site functions.
We also permit service providers to use online tracking technologies for analytics. To the extent these are deemed a "sale" or "sharing" under applicable US state laws, you can opt out as described in section 10.
Analytics
Analytics runs on our website only. The App does not use analytics. We use a product analytics provider to understand how the website is used: which pages are viewed, and whether a form was submitted. It is not sent your email address. Where a submission needs to be linked to earlier activity, we send an irreversible hash of the address instead, so the analytics provider holds an identifier it cannot resolve back to you. We do not record sessions, and we do not use analytics for advertising.
We also use a web analytics provider to understand where visits come from, such as the referring site or campaign. It is configured not to collect your full IP address, and it is not sent your email address or the hash described above.
Opting out. The product analytics respects your browser’s “Do Not Track” setting: with it on, your browser sends it nothing. The web analytics does not read that setting. A content blocker that blocks analytics requests stops both. When you submit a form on the website, our server records that a form was submitted, whatever your browser settings, because we follow up on every submission by hand. That record carries the hash described above, never your email address. None of this affects your ability to use the Services or to submit a form.
5. How Long Do We Keep Your Information?
No purpose in this notice will require us to keep your personal information for longer than the period in which you have an account with us, unless a longer retention period is required or permitted by law.
When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, or if that is not possible, securely store it and isolate it from further processing until deletion is possible.
Some records follow their own rules. When you unlink a bank account, we delete its transaction records. A round-up that is not charged within 90 days of the purchase is dropped. We keep the record of each gift, including after you close your account, because it is a financial record that you and your church may need for tax purposes. We keep the record of what you agreed to for as long as we keep your gift records.
6. How Do We Keep Your Information Safe?
We have implemented appropriate and reasonable technical and organizational security measures. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise that unauthorized third parties will never defeat our security. Transmission of personal information to and from our Services is at your own risk.
7. Do We Collect Information from Minors?
By using the Services, you represent that you are at least 18, or that you are the parent or guardian of a minor and consent to their use of the Services. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under 18, please contact us at privacy@dailymanna.co.
8. What Are Your Privacy Rights?
Withdrawing your consent: If we are relying on your consent, you have the right to withdraw it at any time by contacting us using the details in section 12. This will not affect the lawfulness of processing before withdrawal.
Choosing your emails: In your notification settings you can switch off four emails: the receipt for each gift, the reminder that there is no payment method to charge, the notice that your year-end statement is ready, and the notice that your church has stopped receiving gifts. The other emails we send are needed to run your account, and the settings screen says why each one keeps arriving. If we send you marketing email, you can unsubscribe with the link in it or by contacting us.
Account Information
You can review and change your profile and giving settings in the App at any time. To close your account or to get a copy of your information, email privacy@dailymanna.co.
When you close your account, we deactivate it and stop all future charges. We keep some information to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, or comply with legal requirements, including the gift records described in section 5.
Cookies: Most browsers accept cookies by default. You can usually set your browser to remove or reject cookies, though this may affect certain features of our Services.
9. Controls for Do-Not-Track Features
Most web browsers include a Do-Not-Track ("DNT") feature you can turn on to signal your privacy preference. California law requires us to say how we respond to it. Our website’s product analytics respects it, as described in section 4. Nothing else on the Services changes in response to it, because no uniform standard for DNT signals has been adopted. If a standard is adopted that we must follow, we will describe it in a revised version of this Privacy Notice.
10. Do United States Residents Have Specific Privacy Rights?
Categories of Personal Information We Collect
The table below shows the categories of personal information we have collected in the past twelve (12) months.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Your name, email address, phone number if you give one, IP address, account identifier, and the alias your church sees you by | YES |
| B. Personal information (California Customer Records) | Your name, contact details, and financial information: the name of your bank, the last four digits of each account you link, and the record of your gifts | YES |
| C. Protected classification characteristics | Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data | NO |
| D. Commercial information | The amount and date of each bank transaction we read to calculate round-ups, and the amount and date of each gift | YES |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or similar network activity | How you use our website and the App: pages viewed, forms submitted, and our server logs | YES |
| G. Geolocation data | Device location | NO |
| H. Audio, electronic, sensory, or similar information | A profile photo or church logo you choose to upload | YES |
| I. Professional or employment-related information | For church staff: your title at the church and the church you act for | YES |
| J. Education Information | Student records and directory information | NO |
| K. Inferences drawn from collected personal information | Inferences drawn to create a profile or summary about an individual’s preferences and characteristics | NO |
| L. Sensitive personal information | Your sign-in email address, the financial information in category B, and the religious affiliation that the church you give to may reveal | YES |
We only collect sensitive personal information as defined by applicable privacy laws, for the purposes allowed by law or with your consent. You may have the right to limit the use or disclosure of your sensitive personal information. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you. The church you choose to give to may reveal your religious affiliation, which some state laws treat as sensitive. We use it only to deliver your gifts and the records that go with them, and we process it with the consent you give when you choose your church.
We may also collect other personal information outside these categories where you interact with us in person, online, or by phone or mail in the context of receiving customer support, participating in surveys or contests, and facilitating delivery of our Services.
We will use and retain collected personal information as needed to provide the Services, or for Category L, as long as you have an account with us.
How We Use and Share Personal Information
We may disclose your personal information to service providers pursuant to a written contract. We may use your personal information for our own business purposes, such as internal research for technological development and demonstration. This is not considered "selling" of your personal information.
In the preceding twelve (12) months we have not sold personal information or shared it for cross-context behavioral advertising, and we will not do so. We do disclose personal information for business purposes: to our service providers under written contracts, and to your church as described in section 3.
Your Rights
- Right to know whether or not we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to request the deletion of your personal data
- Right to obtain a copy of the personal data you previously shared with us
- Right to non-discrimination for exercising your rights
- Right to opt out of processing used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions producing legal or similarly significant effects
Depending on the state where you live, you may also have rights to access the categories of personal data being processed; obtain a list of the categories of third parties, or specific third parties, to which we have disclosed personal data; obtain a list of third parties to which we have sold personal data; review, understand, question and correct how personal data has been profiled; limit use and disclosure of sensitive personal data; and opt out of the collection of sensitive data collected through a voice or facial recognition feature.
How to Exercise Your Rights
To exercise these rights, you can contact us by emailing us at privacy@dailymanna.co, or by referring to the contact details at the bottom of this page.
Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an agent who does not submit proof of valid authorization.
Request Verification
Upon receiving your request, we will need to verify your identity. We will only use personal information provided in your request to verify your identity or authority. If we cannot verify your identity from information already maintained, we may request additional information for verification and fraud-prevention purposes.
Appeals
If we decline to take action regarding your request, you may appeal our decision by emailing us at privacy@dailymanna.co. We will inform you in writing of any action taken or not taken, including a written explanation. If your appeal is denied, you may submit a complaint to your state attorney general.
California "Shine The Light" Law
California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the preceding calendar year. Submit such requests in writing using the contact details in section 12.
11. Do We Make Updates to This Notice?
We may update this Privacy Notice from time to time. The updated version carries a new date at the top. When we publish a new version, we email everyone who agreed to an earlier one, once, and ask you to agree to the new version the next time you use the App.
12. How Can You Contact Us About This Notice?
If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO) by email at privacy@dailymanna.co, or by post at:
Daily Manna, PBC
Data Protection Officer
2225 Hawkins Street, 110
Charlotte, NC 28203
United States
13. How Can You Review, Update, or Delete Your Data?
You have the right to request access to the personal information we collect from you, details about how we have processed it, correction of inaccuracies, or deletion of your personal information. You may also have the right to withdraw your consent. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please email us at privacy@dailymanna.co.