GIVA

Your data, your control.

Last updated: 2026-05-10

1. Who we are

GIVA ("we", "us") is operated from Montréal, Québec, Canada. GIVA is a platform that helps Canadian residents send Gifts to registered charities. Our contact email is hello@thegiva.app.

2. What we collect

Information you give us

Account: your email address and (optionally) your full name when you sign up.
Donations: the amount, charity, currency, and timestamp of each Gift you send.
Favorites: the charities you save in the app.
Location (optional): if you enable the "Local 50 km" filter we use your device's GPS to filter charities — never stored, only used in-memory for that one search.

Information we never collect

Your credit card number — handled directly by Stripe; we never see or store it.
Your bank details — handled by Stripe Connect for charities; we never see them either.
Your contacts, photos, microphone, calendar, or any other personal data on your device.

Information collected automatically

Crash reports (via Sentry): error messages and stack traces if the app crashes. No PII is included.
Device info: iOS version, device model, app version. Used only for triage.

3. How we use it

To process your Gifts (via Stripe).
To email you donation confirmations and tax receipts.
To show you relevant charities (e.g. "Local" filter uses GPS).
To detect and fix bugs or abuse.
To comply with applicable Canadian and Québec laws.

We do not sell your data, do not show ads, and do not let advertisers track you through GIVA.

4. Who we share it with

Stripe — to process card payments and route funds to the charity. Stripe's privacy policy.
Supabase — our database provider; data is stored encrypted at rest in Canadian/US datacenters.
Resend — to send confirmation and receipt emails.
Sentry — to receive anonymized crash reports.
The charity — for each Gift, the receiving charity sees: your name, email, the amount, and the date — needed to issue you a tax receipt.

5. Where it's stored

Account, donation, and favorites data is stored on Supabase (AWS) infrastructure with encryption at rest. We retain your data while your account is active.

6. Your rights

Under Québec Law 25 and federal PIPEDA, you have the right to:

Access the personal data we hold about you — use the in-app "Export my data" feature.
Correct any inaccurate information — via Profile → Settings.
Delete your account at any time — via Profile → Settings → Delete my account. Deletion is permanent and immediate.
Withdraw consent for any processing — by deleting your account or contacting us.
File a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

7. Donation history after deletion

When you delete your account, your profile, favorites, and payment methods are permanently erased. Donation records are anonymized: the donor link is removed, but the row is preserved so the receiving charity can keep its tax records intact. The anonymized record cannot be re-linked to you.

8. Children

GIVA is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, contact us at hello@thegiva.app and we will delete it.

9. Changes

We may update this policy as the app evolves. Material changes will be posted in-app and on this page. Date at the top is always current.

10. Contact

Questions? hello@thegiva.app — we read every email.