This summary highlights key points. For details, review the full policy or use the table of contents below.

• We may process personal information depending on how you interact with our Services. We do not process sensitive personal information.
• We may receive data from third parties such as public databases, marketing partners, social media platforms, and other sources.
• We process data to provide, improve, administer, secure, and comply with law, and with consent where applicable.
• We share data with service providers and in specific situations described in this notice.
• You may have rights depending on your location, including access and deletion. Exercise your rights via our request form (https://forms.office.com/r/tX16M4ARM9) or by contacting us.

In short: We collect personal information that you provide to us.

We collect personal information you voluntarily provide when you register, express interest in our products and Services, participate in activities, or contact us. The personal information we collect may include: Full Name and Email Address.

We do not process sensitive information.

Social Media Login Data: If you register using social media account details (e.g., Meta), we will collect information described in “How Do We Handle Your Social Logins?” below.

Application Data: Depending on your permissions, we may request access to features from your mobile device (e.g., Bluetooth, calendar, camera) and send push notifications. You can manage permissions and notifications in your device settings.

Information automatically collected: We do not collect any information automatically when you visit our Services.

Information from other sources: We do not collect data from public databases, marketing partners, social media platforms, or other outside sources.

Facebook applications: By default, we may access your Facebook basic account information (e.g., name and email) when you use our Facebook app integration. Refer to Facebook’s Permissions Reference for more details.

In short: To provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

• Facilitate account creation, authentication, and account management
• Deliver requested services and support
• Respond to inquiries and send administrative information
• Request feedback and send marketing (per your preferences)
• Protect our Services, monitor for fraud, and identify usage trends
• Measure effectiveness of marketing campaigns
• Protect vital interests when necessary

In short: We process personal information only when necessary and with a valid legal basis (consent, contract, legitimate interests, legal obligations, or vital interests). If you are in the EU/UK, the GDPR applies; if in Canada, PIPEDA and related laws apply.

• Consent: You can withdraw at any time
• Performance of a contract
• Legitimate interests (balanced against your rights)
• Legal obligations
• Vital interests

We share information with vendors and service providers under contracts that safeguard your information. We may also share in connection with business transfers, with Google Analytics/Maps where used, with affiliates and business partners, and in public areas when you choose to share content.

We use a cloud service provider to securely process and store your information, which may be transferred globally. We take necessary measures to protect your information consistent with this notice and applicable law.

We do not knowingly collect or market to children under 13. If we learn that data from a child under 13 was collected without parental consent, we will delete it. Parents/guardians can contact contact@yohanna.org.

Depending on your region (e.g., EEA, UK, Switzerland, Canada), you may have rights to access, rectify, erase, restrict, port, or object to processing. If based on consent, you may withdraw it at any time.

Opt out of marketing via unsubscribe links or by contacting us. Account changes or deletion can be requested via account settings or by contacting us. Cookies can be controlled in your browser.

If you have questions, email contact@yohanna.org.

If you are a resident of California, Colorado, Connecticut, Utah, or Virginia, you have specific rights. Categories collected and sharing practices, as well as request methods, are described in this section. To exercise rights, use https://forms.office.com/r/tX16M4ARM9 or contact@yohanna.org.

California: Shine the Light, CCPA rights (access, deletion, non-discrimination, etc.). Colorado/Connecticut/Utah/Virginia: rights to access, correct, delete, obtain copies, and opt out of certain processing. Appeals can be submitted via email if we decline a request.

When you redeem Blessings, you may recommend a charitable organization to receive a grant from Yohanna Foundation. Your recommendation is used solely to process and track our grantmaking. We may share necessary information with the recommended charity or payment processors to complete the grant. Yohanna Foundation retains sole discretion over final grant recipients.

Australia and New Zealand: We process under the Privacy Act 1988 (AU) and Privacy Act 2020 (NZ). You can request access/correction and lodge complaints with relevant authorities.

Republic of South Africa: You may request access/correction. If unsatisfied, contact the Information Regulator (South Africa).

For EEA/Switzerland/UK residents, we act as the data controller and can be contacted via the details above.