Privacy Policy

Sadaqah Syndicate ("we", "us", "our") is the data controller responsible for your personal data when you use our website and app. This policy explains what we collect, why, and the rights you have under the UK GDPR and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, you can reach our team at privacy@sadaqahsyndicate.com.

Account information: your name and email address, and a password if you sign up with one (stored only as a salted hash). If you sign in with Google, we receive your name, email address and profile picture from Google instead of a password.

Pledge and payment information: your chosen monthly amount, how you spread it across syndicates, your payment history on the platform, and the limited payment metadata returned by Stripe, our payment processor (such as the card brand and last four digits). We never see or store your full card number.

Gift Aid information: if you make a Gift Aid declaration, the home address and postcode HMRC requires us to hold in order to reclaim tax on your eligible donations.

App and device information: if you enable notifications in the mobile app, a push notification token that identifies your device to our notification service, together with your notification preferences.

Giving activity: which syndicates you back, the field updates you open, your giving streak and the badges you earn. These are derived from your own activity on the platform and exist to power your Progress view.

Circles and referrals: the Circles you create or join, and, if you share or use a referral link, your referral code and the link between referrer and referred accounts.

Support correspondence: messages you send us, so we can help you and keep a record of the resolution.

We do not run advertising trackers or third-party analytics in the app or on the website.

We use your data to operate your monthly pledge and its spread across syndicates, to send the receipts, statements and delivery updates that make our proof guarantee possible, to show you your own progress (streaks, badges, causes backed), to run Circles and referrals you choose to take part in, to provide customer support, to keep the platform secure, and to meet our legal and regulatory obligations as a platform handling charitable giving.

Push notifications and emails about delivery updates, receipts and payment issues can each be switched off in the app (Billing, Notifications). We will only ever send you marketing communications where you have opted in, and you can withdraw that consent at any time.

We rely on the performance of our contract with you to process pledges and run your account, on our legitimate interests to keep the platform secure and improve it, on your consent for optional notifications and marketing, and on legal obligation where we are required to retain financial records.

We share the minimum necessary data with the service providers who run the platform, each bound by data-processing agreements: Stripe (payment processing and payouts to charity partners), Supabase (authentication, database and file hosting), Vercel (web hosting), Twilio SendGrid (email delivery) and Expo (push notification delivery). We do not sell your personal data to anyone, ever.

If you join a Circle, the other members of that Circle can see your name, your initials and the amounts you give through the platform each month. Leave a Circle at any time to stop sharing this.

Charity partners receive the funds raised for their syndicates and aggregate figures about them. They do not receive member lists or your contact details.

Aggregate, anonymised figures (for example, the total pooled this month) may be shared publicly, but these never identify you individually.

Some of our service providers process data outside the UK. Where they do, transfers are protected by appropriate safeguards such as the UK Addendum to the EU Standard Contractual Clauses or an adequacy decision.

You have the right to access, correct, delete or port your data, to object to or restrict certain processing, and to withdraw consent. You can exercise most of these directly in the app, or by contacting us at privacy@sadaqahsyndicate.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

You can close your account at any time in the app (Account, Close my account) or by visiting sadaqahsyndicate.com/account/delete. Closing your account cancels future collections and deletes or anonymises your personal data, except the financial records we are legally required to keep for a limited period.

We keep your account data for as long as you have an active account, and for a limited period afterwards to meet financial and legal record-keeping requirements (typically six years for payment records), after which it is securely deleted or anonymised.

Sadaqah Syndicate is for adults. You must be at least 18 to create an account, and we do not knowingly collect data from anyone under 18.