Privacy Policy

Privacy Policy

Effective Date: June 27, 2026 · Last Updated: October 18, 2026

Who we are. This Privacy Policy is provided by Givfi, Inc. ("Givfi," "we," "us," or "our") — the for-profit operator of the Givmo platform, the entity responsible for this notice, which collects consumer personal information and determines the purposes and means of processing it. It also describes the role of Givmo Charitable Fund ("GCF"), the Internal Revenue Code §501(c)(3) donor-advised-fund sponsor that receives your donation as donee for its own charitable and tax-recordkeeping purposes. Together, Givfi and GCF are referred to in this policy as "Givmo." Givfi and GCF are separate entities; GCF is a charitable affiliate that receives donor information from Givfi, not a co-controller of the platform.

This Privacy Policy explains how we collect, use, and disclose information about you. It applies when you use our websites and mobile applications that link to this Privacy Policy (collectively, our "Services"), contact our customer service team, engage with us on social media, or otherwise interact with us.

We may change this Privacy Policy from time to time. If we make changes, we will notify you by updating the Effective Date / Last Updated date at the top of this policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website or sending you a notification). We retain prior versions of this policy in a version-controlled record so we can identify which version applied at a given time. We review this Privacy Policy at least once every twelve (12) months. We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you.

Collection of Information

Information You Provide to Us. We collect information you provide directly to us. For example, you share information directly with us when you create an account and profile, fill out a form, submit or post content through our Services, make a donation, communicate with us via third-party platforms, request customer support, or otherwise communicate with us. The types of personal information we may collect include your name, email address, phone number, photo or image, and financial information (including credit card and financial-institution information), and any other information you choose to provide. In keeping with best practices, credit card information is collected via our payment processing partner's PCI-compliant forms to ensure that it never touches Givmo's database.

Information We Collect Automatically When You Interact with Us. When you access or use our Services or otherwise interact with us, we automatically collect certain information, including:

- Transactional Information: When you donate or make a donation request, we collect information about the transaction, such as the amount donated or requested, and the date and location of the transaction. - Device and Usage Information: We collect information about how you access our Services, including data about the device and network you use, such as your hardware model, operating system version, mobile network, IP address, unique device identifiers, browser type, and app version. We also collect information about your activity on our Services, such as access times, pages viewed, links clicked, and the page you visited before navigating to our Services. - Information Collected by Cookies and Similar Tracking Technologies: We (and those that perform work for us) use limited tracking technologies, such as cookies, to operate our Services. Cookies are small data files stored on your hard drive or in device memory that help us operate the Services and your experience, such as keeping you signed in, remembering your preferences, and counting visits to understand which areas and features of our Services are used. We do not use advertising cookies, web beacons, or tracking pixels. For more information about cookies and how to disable them, see the Your Choices section below.

Information We Collect from Other Sources. We obtain information from third-party sources. For example, we may collect information about you from the financial institutions from which you choose to make donations. If you interact with us on social media, we will collect information about you, such as your username, profile information, and any additional information you choose to provide. Additionally, if you create or log into your Givmo account through a third-party platform (such as Google), we will have access to certain information from that platform, such as your name and profile picture, in accordance with the authorization procedures determined by that platform.

Information We Derive. We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your location based on your IP address, or infer charities or causes that you might be interested in based on your prior donations.

Use of Information

We use the information we collect to administer your account and facilitate donations. We also use the information we collect to:

- Provide, maintain, and improve our products and services; - Process transactions and send you related information, including confirmations, receipts, invoices, and customer-experience surveys; - Personalize and improve your experience on our Services; - Send you technical notices, security alerts, and support and administrative messages; - Respond to your comments and questions and provide customer service; - Communicate with you about products, services, and events offered by Givmo and others and provide news and information that we think will interest you (see the Your Choices section below for information about how to opt out of these communications at any time); - Monitor and analyze trends, usage, and activities in connection with our Services; - Facilitate contests, sweepstakes, and promotions and process and deliver entries and rewards; - Detect, investigate, and prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity and protect the rights and property of Givmo and others; - Debug to identify and repair errors in our Services; - Comply with our legal and financial obligations; and - Carry out any other purpose described to you at the time the information was collected.

Sharing of Information

We share personal information to conduct our operations and provide you with our Services, including in the following circumstances or as otherwise described in this policy:

- We share personal information with vendors, service providers, and consultants that need access to personal information in order to perform services for us, such as companies that assist us with web hosting, payment processing, financial services in connection with your contributions, fraud prevention, customer service, and marketing. - Affiliate sharing with Givmo Charitable Fund (GCF). When you make a donation, Givfi shares your donation and related identifying and tax-substantiation information with GCF, the §501(c)(3) donor-advised-fund sponsor that receives your donation as the donee. GCF uses this information for its own charitable and tax-recordkeeping purposes, including issuing your tax-donation receipt, maintaining donor-advised-fund records, and meeting its own legal and recordkeeping obligations. - We share personal information to complete transactions you request, including with the recipients of your contributions. - If you create a profile or otherwise share content on our Services, we share this information with other users of our Services unless you make your profile private via settings. If you choose to make your profile public via the settings on our Services, we also share this information publicly. - If you choose to use integrations we offer on our Services, we may share certain information with the integration partners. - We may disclose personal information if we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law-enforcement requirements. - We may share personal information if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of Givmo, our affiliates, our users, the public, or others. - We share personal information with our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests. - We may share personal information in connection with, or during negotiations concerning, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company. - Personal information may be shared between and among Givfi, GCF, and our current and future parents, affiliates, and subsidiaries and other companies under common control and ownership. - We share personal information with your consent or at your direction. - We also share aggregated or de-identified information that cannot reasonably be used to identify you.

Notwithstanding the categories of sharing described above, no mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

We do not sell your personal information, and we do not share your personal information with advertising or analytics partners to personalize advertising. The sharing we do is limited to the operational purposes described above — including the affiliate data-sharing with Givmo Charitable Fund for charitable and tax-recordkeeping purposes, which is not a sale and not advertising.

Advertising and "selling"/"sharing" of your information

Givmo does not engage in cross-context behavioral advertising. We do not sell your personal information, and we do not share it with advertising or analytics partners to personalize ads on other platforms, apps, or websites. The Givmo app does not use advertising identifiers (such as the iOS IDFA), does not include advertising-network, attribution, or data-broker software, and does not display third-party advertising. We do not use advertising cookies, web beacons, or tracking pixels; any cookies or local storage we use are limited to operating the service (for example, keeping you signed in and remembering your preferences). Because we do not sell or share your personal information for advertising, there is no "Do Not Sell or Share My Personal Information" choice to offer for that purpose.

We share certain donation-related information with Givmo Charitable Fund (GCF), the 501(c)(3) donor-advised-fund sponsor that receives your donation, so GCF can issue your tax receipt and maintain its charitable and tax records. This is an affiliate data-sharing for charitable and tax-recordkeeping purposes — it is not a sale of your information and not advertising.

If we ever introduce advertising or begin selling or sharing personal information for advertising, we will update this policy and provide the choices the law then requires before doing so.

Health and Fitness Data (Steps Competitions)

If you choose to join a walking competition, Givmo (operated by Givfi, Inc.) reads your daily step totals from Apple Health (iOS) or Health Connect (Android), with your explicit permission, and only after you join a competition and consent.

What we collect. Only daily step totals for the dates of a competition you have joined. We do not collect step timestamps, individual step samples, GPS or location data, routes, heart rate, sleep, workouts, or any other health or fitness information. Steps you entered manually into Apple Health or Health Connect are excluded and do not count.

Sources. We read daily step totals only from your device's health store (Apple Health or Health Connect), and only with your permission.

How we use it. Solely to display competition leaderboards and determine the winner, whose chosen charity receives the sponsoring company's prize donation. Your visibility reflects both your own setting (public or private) and the competition's setting (open to any signed-in Givmo user, or limited to your employer's participants); the more restrictive of the two always applies. If your participation is private, others see only an anonymous rank and step count — not your name, avatar, or chosen charity. One exception: if a private participant wins, the public celebration post names the sponsoring company and the winning charity — but never the winner's name, avatar, or identity.

How we share it. We do not sell your health data or share it with third parties. We do not use it for advertising, marketing, or analytics. Your sponsoring employer's competition admins can view participant rows only to run the competition, under a contract that binds them as our processor. Daily step totals are sent only to Givmo's servers to run the competition and are transmitted securely (encrypted in transit).

Retention and deletion. We keep your step data only while it is needed to run a competition you have joined. If you withdraw, your row is removed immediately. If you delete your Givmo account, your individual step entries are deleted. Completed competitions may retain aggregate results that do not require your individual daily step records.

Your rights and control. You may at any time withdraw your consent; confirm whether we hold your step data and access it; and request deletion of your step data (which we will pass on to anyone we have shared it with). We respond within 45 days and remove step data from active systems, and from backups the next time they are cycled (within six months). To exercise these rights, contact support@givmocharitable.org. On your device, you can revoke Givmo's access to Apple Health or Health Connect at any time in your system settings. Washington and Nevada residents: see our Consumer Health Data Privacy Policy at https://givmocharitable.org/consumer-health-data for state-specific consumer-health-data disclosures.

Sensitive personal information (California). Givfi collects certain sensitive personal information (including daily step totals for Steps Competitions, which we treat as health information). We use and disclose this information only to provide the services you request — for Steps Competitions, solely to run the competition you joined — and not for any purpose that would require us to offer a "Limit the Use of My Sensitive Personal Information" choice under Cal. Civ. Code § 1798.135. We do not sell or share your sensitive personal information.

The Givmo Assistant (AI-Powered Help)

Where available, Givmo offers an optional AI assistant that answers your questions and helps with account tasks inside the app; it may not be available to all users or at all times. This section applies if and when you use the assistant. The assistant is for users 18 or older only, and it stays off until you turn it on.

Turning it on — your consent. The first time you open the assistant, we show you a short consent screen that explains how it works and asks your permission before any of your information is sent for AI processing. Using the assistant is all-or-nothing: if you decline, the assistant stays off and none of your messages are sent for AI processing. You can stop using the assistant at any time, and you can withdraw your consent by contacting us at support@givmocharitable.org; deleting your account also deletes your conversations.

What we send, and to whom. When you use the assistant, the messages you type — and, when you ask for help with an account task, the account details needed to answer you — are sent from Givmo's servers to Anthropic, the company that provides the AI models behind the assistant. This happens on our back end; the app does not connect to Anthropic directly.

How Anthropic uses your information. Anthropic acts as our service provider: it processes your messages on Givmo's behalf and on Givmo's instructions — primarily to generate the assistant's replies, and additionally, as our agreement permits, to maintain and secure its service, enforce its safety and usage policies (including automated safety review of the content it processes), and comply with legal obligations. Anthropic is not permitted to use your information for its own purposes: under our commercial agreement it may not use your information to train its AI models, sell it, or share it for advertising.

How long Anthropic keeps it. Under our configuration, Anthropic deletes the messages and replies it processes within about 30 days. Two exceptions apply. First, if Anthropic's automated safety systems flag a conversation, Anthropic may keep that content for up to two years to enforce its safety and usage policies. Second, and separately, Anthropic may keep information for longer where the law requires it — there is no fixed time limit on this, and it lasts only as long as the legal requirement does.

How Givmo keeps it, and how to delete it. Separately from Anthropic, Givmo (Givfi, Inc.) keeps a copy of your assistant conversations for up to 18 months to operate and improve our support — not to train AI. You can delete individual conversations at any time, and deleting your Givmo account also deletes your conversations.

When you ask to talk to a person. If you ask the assistant to connect you with our human support team and confirm that request, we email our support team about it — nothing is sent until you confirm. That email includes the reason you give us; it may also include a short AI-written summary of your conversation, and — only if you choose to include it — the conversation transcript. The email becomes part of our support records, which we keep only as long as needed to handle and document your support request.

Connected Calendars (Givmo Board)

Where available, Givmo Board (operated by Givfi, Inc.), the board tool in Givmo's console for organizations, lets an organization's officers connect a Google Calendar, either their own or an account the organization keeps for its board, so that board meetings scheduled in Givmo Board go on that calendar and the people invited get the invitations from it. Givmo Board is not available to every organization. This section applies if and when a calendar is connected. Today, Givmo Board connects only to Google Calendar.

Connecting is a choice. Nothing is connected unless an officer chooses to connect a calendar and agrees on Google's own consent screen, which asks permission to "See, create, change, and delete events on Google calendars you own." Givmo Board uses that permission only for the board meetings it puts on the calendar, as described below.

What Givmo Board does on the calendar. When an officer sends a meeting's invitations from a connected calendar, Givmo Board creates a private event on that account's main calendar with the meeting's time, place and video link (a new Google Meet link, unless the organization entered its own), a short title such as "Example Charity, regular board meeting" (or the meeting's own title, if the organization chooses that in Givmo Board's settings) and a short description giving the place and video link. It adds as guests the people the meeting is for, the board's members or a committee's, using the name and email address the organization recorded for each, and sets whether guests may change the meeting, invite others and see who else is invited, as the organization's settings say. Google then sends the invitations from that calendar, as it does for any meeting scheduled there. Afterwards, Givmo Board updates the event when the meeting's time, place or video link changes in Givmo Board, or when someone joins or leaves the board or committee, and cancels it when the meeting is cancelled in Givmo Board. It also adds a private label, carried only by the organizer's copy of the event, so it can tell its board meetings apart from other events.

What Givmo Board reads. Givmo Board opens only the events it created for board meetings, and asks Google only for what it needs to keep each meeting in step: the time, place and video link, whether the event is still scheduled, who organizes it, its guests and their replies, and its guest settings. It never asks for an event's title, description, attachments or reminders, and it never opens other events on the calendar. It checks a meeting's event from time to time, including when Givmo Board shows or sends that meeting. If the time, place or video link was changed in the calendar, or the organizer cancelled the event there, Givmo Board updates its record of the meeting to match and notes in the meeting's history that the change was made in Google Calendar.

Other guests. If someone adds guests of their own to a board meeting in a calendar, Givmo Board leaves them on the event. Their names and email addresses pass through Givmo's servers only so that Givmo Board's updates keep them on the event; Givmo Board records how many other guests there are, not who they are. Notes that guests add to their replies are handled the same way and are never stored.

What we keep. For each connected calendar, we keep its Google account's email address, Google's identifier for that account, whether it is a personal or a Google Workspace account, the permission Google granted, and when it was connected and last used. We keep the tokens Google issues for it, which let Givmo Board act on the calendar without the officer signing in again, encrypted and apart from everything else, and use them only on Givmo's servers. For each meeting sent from a connected calendar, Givmo Board keeps which calendar sent it, the event's identifiers, the details above as they last stood in the calendar, who was invited and at which address, each invited person's reply, and a history of the changes it saw there, including how many other guests were added or removed. Givmo Board never keeps an event's title or description from the calendar.

How we use it, and who sees it. We use information from a connected calendar only to keep the organization's board meetings in step between Givmo Board and the calendar, and to show those meetings in Givmo Board, such as a meeting's time, place and video link, which calendar sent its invitations, and how the people invited replied. Who in the organization sees these details depends on their role in Givmo Board. We send Google the meeting's details and its guests' names and email addresses so that Google can put the meeting on the calendar and send the invitations. We do not sell information from connected calendars, use it for advertising, or use it to create, train or improve artificial intelligence or machine-learning models.

If someone connects their own AI assistant. An administrator of the organization can connect an AI assistant of their own choosing to Givmo and, on Givmo's consent screen, let it view the organization's Givmo Board. When that person asks the assistant about the board's meetings, Givmo answers with board information that person is allowed to see. For a meeting sent from a connected calendar, that includes its time, place and video link (with any change made in the calendar), which calendar sent its invitations, how many people were invited, and whether the invitations went out. The assistant does not receive guests' replies or anything else from the calendar. What the assistant's provider does with what it receives is governed by that person's agreement with the provider.

People at Givmo. People at Givmo do not read information from a connected calendar except with the agreement of the person who connected the calendar (for example, when they ask us for help with a meeting), when needed for security, or when the law requires it.

Disconnecting. The officer who connected a calendar can disconnect it at any time in Givmo Board, under Settings, then Your settings, then Calendar. Someone who manages the organization's Givmo Board settings can disconnect the board account or any officer's calendar. If the calendar still sends upcoming meetings, Givmo Board first asks what should happen to them: move them to another calendar, send them by email from Givmo instead where that is offered, or leave them in the calendar as they are. Disconnecting deletes the tokens we kept for that calendar and asks Google to remove Givmo Board's access, unless the same Google account is still connected to Givmo Board for another organization. Closing the organization's Givmo account disconnects every calendar the same way. Anyone can also remove Givmo Board's access to their Google account at https://myaccount.google.com/connections. Givmo Board then can't reach that calendar until it is connected again.

What stays. Events already in people's calendars stay there unless the meetings were moved. The meetings' records in Givmo Board, including which calendar sent each meeting, the replies and the history of changes, stay part of the organization's board records. We also keep a record of the connection itself: its email address and when it was connected and disconnected.

Google's Limited Use requirements. Givmo Board's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect the personal information we hold against unauthorized or unlawful access, use, alteration, disclosure, loss, or destruction, appropriate to the nature of the information. As noted above, credit card information is collected through our payment processing partner's PCI-compliant forms so that it never touches Givmo's database. No method of transmission over the internet or method of electronic storage is completely secure, however, so we cannot guarantee absolute security.

Children's Privacy

Our Services are intended for adults. Our Terms of Service require users to be at least 18 years of age, and our Services are not directed to children. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information. If you believe a child under 13 has provided us with personal information, please contact us using the details in the Contact Us section below.

Your Choices

Account Information. You may update and correct certain account information at any time by logging into your account on our website or in our mobile application, or by contacting us using the details in the Contact Us section below. If you wish to delete your account, please contact us, but note that we may retain certain information as required by law or for our legitimate business purposes (including donation and tax-substantiation records that the law requires GCF and/or Givfi to keep).

Cookies. Most web browsers are set to accept cookies by default. If you prefer, you can usually adjust your browser settings to remove or reject browser cookies. Please note that removing or rejecting cookies could affect the availability and functionality of our Services.

Advertising. We do not use your information for interest-based advertising and do not share it with advertising partners, so there is no advertising opt-out to offer; see the Advertising and "selling"/"sharing" of your information section above.

Communications Preferences. You may opt out of receiving promotional emails from Givmo by following the instructions in those communications or by contacting us using the details in the Contact Us section below. If you opt out, we may still send you non-promotional emails, such as those about your account or transactions.

Mobile Push Notifications. With your consent, we may send push notifications to your mobile device. You can deactivate these messages at any time by changing the notification settings on your mobile device.

Contact Us

Givfi, Inc. is responsible for this Privacy Policy. If you have any questions about it, or to exercise any choice described above, please contact us at:

Givfi, Inc. — Attn: Privacy Email: support@givmocharitable.org Mail: 322 Culver Blvd., Unit V415, Playa del Rey, CA 90293

(All privacy questions and requests are handled through this single Givfi channel.)

APPENDIX — Your California Privacy Rights (CCPA/CPRA)

FORWARD-LOOKING / PRE-COVERAGE — NOT CURRENTLY OPERATIVE. Givfi, Inc. is not currently a "business" subject to the California Consumer Privacy Act (CCPA), as amended by the CPRA, because it does not currently meet any of the statute's coverage thresholds. The disclosures, rights, links, and mechanisms in this Appendix are provided on a forward-looking basis and will be activated if and when Givfi becomes a covered business. They are staged here so they are ready to take effect, and do not represent that Givfi is presently covered. This Appendix will be reviewed as the platform scales.

Categories of personal information we collect, sources, purposes, and recipients. When activated, Givfi will disclose, mapped to the CCPA's statutory categories, for the preceding 12 months: the categories of personal information and sensitive personal information collected (note that financial-account information is "sensitive personal information" under the statute); the categories of sources; the business or commercial purpose for each category; and the categories of third parties / recipients to whom personal information is disclosed, sold, or shared.

No sale; no sharing for cross-context behavioral advertising. Givfi does not sell personal information, and Givfi does not "share" personal information for cross-context behavioral advertising (Givmo does not engage in cross-context behavioral advertising, as described in Advertising and "selling"/"sharing" of your information above). If Givfi ever sells or shares personal information for advertising in the future, it will provide the disclosures and opt-out mechanisms the law then requires before doing so.

Your California privacy rights. When activated, California consumers will have the rights to: know/access the categories and specific pieces of personal information collected; know what personal information is sold or shared and to whom; delete personal information; correct inaccurate personal information; opt out of the sale or sharing of personal information; limit the use and disclosure of sensitive personal information; data portability; and non-discrimination for exercising these rights.

Opt-out mechanisms (to be activated). If and when Givfi sells or shares personal information such that an opt-out is required, it will provide a "Do Not Sell or Share My Personal Information" link and a "Limit the Use of My Sensitive Personal Information" link (or a single combined link), and/or honor opt-out-preference signals including the Global Privacy Control (GPC).

Retention. When activated, Givfi will disclose the retention period — or the criteria used to set it — for each category of personal and sensitive personal information. Donation, donor-advised-fund, and tax-substantiation records are retained as required by law; a deletion request does not require deletion of records we are legally required to keep.

Submitting a request. When activated, you may submit a verifiable consumer request by at least two methods — email to support@givmocharitable.org and a designated web request form — and you may use an authorized agent to submit a request on your behalf. We will verify your identity before fulfilling a request and will respond within the timeframes the law requires.

Other states / universal opt-out. Residents of other states may have additional rights (for example, a right to appeal a decision on a privacy request, and opt-in consent for sensitive-data processing in certain states), and we intend to honor recognized universal opt-out mechanisms.