Privacy

Information used

Students use an email address to confirm eligibility and sign in. The app stores a profile role and a generic display label. Donors may provide an email address for Stripe checkout and a receipt; that address is sent to Stripe and is not retained in Kōkua Counter contribution records. A donation can be anonymous in program displays.

The app stores contribution amounts and status, pass hashes and expiry/status timestamps, and redemption time and eatery. The raw pass code is held in the active browser session and is not stored in the database.

Who can see information

Participating eateries can confirm that a pass is accepted. They do not see a student’s name, email, or profile. Donors do not see recipient identities. Authorized program administrators can access account and transaction information needed to operate the service. Stripe processes checkout information under its own terms.

Retention and deletion

A retention schedule has not yet been established. The pool ledger is append-only, so accounting entries cannot be edited through the application. The operating organization must determine retention and deletion procedures, including how to handle records required for accounting, before launch.

To request account deletion or ask a privacy question, contact: [OWNER: ADD PRIVACY CONTACT EMAIL]. The owner must define the request-verification and response process before launch.