ShareHearth

Privacy Policy

ShareHearth (“we”, “the Service”) helps people help each other and earn recognition for real acts of kindness. It is a free, non-profit community project, built on privacy by design: you own your reputation, and no one sees it without your explicit consent.

1. Data we collect

• Account data: display name and an authentication identifier from your login provider (Google / Firebase). Email is collected only if your provider shares it.
• Activity data: help requests you post, help events you report or confirm, and the recognition points the system calculates for you.
• Optional evidence: images or files you attach to a help event.
• Safety signals: IP address and a device identifier, used only to detect fraud and abuse — never sold, never used for advertising.

2. How we use data

• To operate the help-matching and reputation features you request.
• To calculate reputation server-side and to detect fraud and abuse.
• To keep the community safe (moderation of reported content).

We do not sell personal data and do not use it for third-party ads.

3. Reputation sharing — consent required

Your reputation is yours. A third party (school, employer, another app, etc.) can read it only if you issue an explicit, scoped, revocable consent grant. You can view and revoke every grant at any time. Revocation is immediate.

4. Your rights (GDPR / CCPA-aligned)

• Access & export: request a copy of your data.
• Deletion: delete your account and erase personal data from within the app, or via the account deletion page. Your help history is retained pseudonymously (personal identifiers removed) only to keep the shared reputation ledger consistent for other users you interacted with.
• Consent control: grant or revoke third-party access anytime.

5. Cookies & local storage

We use only essential storage to sign you in and run the Service — no ad or tracking cookies. See our Cookie Policy.

6. Auditability

Every reputation change is recorded in an append-only, tamper-evident ledger, so changes to your score are always traceable and explainable.

7. Children

The Service is not directed to children under the age required by your jurisdiction (e.g. 13 / 16). We do not knowingly collect their data.

8. Security

Access requires authentication. Reputation points can never be set by a client — only computed by our backend. Admin actions are logged. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Changes

We may update this policy; material changes are reflected by the “Last updated” date above.

10. Contact

[email protected]