About this policy
This policy explains how GoodDeeds handles information when you use the app to set volunteering goals and record your hours, visit our support pages, or contact us. For privacy questions, contact buzaza+gooddeeds@gmail.com.
Your account and volunteer records
When you create an account, we use your email address, display name and account identifier to sign you in and maintain your profile. You may also provide a profile photo and the date you began volunteering. Firebase Authentication handles sign-in credentials; passwords are not included in our usage analytics or diagnostic event parameters.
We store the information you choose to save, including volunteering dates, hours, organizations, activity types, notes and monthly or yearly goals. These records and your profile are associated with your account so the app can save them and show your history and progress.
Services needed to run GoodDeeds
GoodDeeds uses Google Firebase for authentication, database storage and profile-photo storage. Firebase also processes technical connection, security and service-operation information, such as IP addresses, app and device details, authentication identifiers and SDK diagnostic metadata, as needed to provide these services. This necessary service processing is separate from the optional reporting choices below.
If you enable reminders, the app schedules local notifications on your device. You can change reminders in the app and notification permission in your device settings. Password-reset emails are sent through Firebase when you request them.
Optional usage analytics
With your permission, Google Analytics for Firebase receives general actions and named screens, such as completing onboarding or saving a volunteer session. It also processes a random app-installation identifier and technical app/device information, and may derive approximate geography from your connection. These reports help us understand which features people use and where the app can improve.
We do not set a GoodDeeds account ID in Analytics or include your name, email, exact hours or goals, organizations, notes, photos or photo URLs in our event parameters. Installation identifiers can distinguish an installation over time: this information is pseudonymous, not anonymous. We do not collect your device's advertising identifier or use this reporting for targeted advertising.
Optional crash and performance reporting
With your separate permission, Firebase Crashlytics and Performance Monitoring receive crash reports, sanitized operation-error categories, operation timings and technical app/device information. Reports can include installation identifiers and technical runtime context. If both reporting choices are enabled, Analytics actions may also appear as breadcrumbs in crash reports. Automatic network-URL monitoring is disabled.
Crashlytics can save crash information on your device before it is sent. GoodDeeds keeps automatic uploads off and sends pending reports from a previous launch only when diagnostic sharing is enabled. Starting the app with diagnostic sharing off discards pending reports. Turning diagnostics on later does not upload reports from before that choice.
Your choices and deletion
Usage analytics and diagnostic sharing are off by default. Choose them separately in Privacy & Analytics, available before sign-up and from Profile. Both choices are optional, and the app's features work with either choice off. You can change your choices at any time. Reporting choices are saved on this device, rather than synced as an account setting.
Turning sharing off stops future optional reporting, discards pending diagnostic uploads and resets the local Analytics identifier when analytics is turned off. A network request already in progress may finish. These controls do not erase reports already received by Firebase.
You can edit or delete volunteer records in the app. To delete your account and its associated saved profile, goals and volunteer records, use Profile's account-deletion controls and confirm with your account password. Account deletion also turns off both reporting choices and resets the local Analytics identifier; it does not automatically erase historical telemetry held by Firebase. Contact buzaza+gooddeeds@gmail.com for privacy or deletion requests. We may need information to verify the request or locate pseudonymous reports. Do not send us your password or password-reset links.
Retention and service providers
Account and volunteer information is stored to provide your account and saved history until you remove it using the app's deletion controls. Deletion removes the app's active account records; limited provider backups or security logs may remain under the provider's retention policies. Previously uploaded analytics and diagnostic reports are subject to Firebase's configured retention periods and service policies and may remain after account deletion. Uninstalling the app or changing a reporting switch does not delete previously uploaded information.
We do not sell your personal information or use it for targeted advertising. Google Firebase processes information to provide the services described in this policy. We may also disclose information where required by law or to protect the security and rights of our users and service. Firebase's processing is governed by its applicable service terms and privacy information.
Support messages and this website
If you contact support, we receive your email address and the information you choose to send so we can respond. Our support inbox uses Gmail, which processes these messages as our email provider. Please avoid including private volunteer records or other sensitive information unless needed to explain your request.
Our support website does not load advertising or analytics scripts. Firebase Hosting processes connection and security information to deliver the pages. Links to other services, such as the App Store or your email provider, are handled under those services' policies when you choose to open them.
Security
We use reasonable measures to protect information, including Firebase's authentication and access controls. No method of transmission or storage can guarantee complete security.
Children's privacy
GoodDeeds is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided personal information to GoodDeeds, contact buzaza+gooddeeds@gmail.com so we can investigate and address it.
Updates and contact
We may update this policy as GoodDeeds changes. The updated date identifies the current version; material changes will be communicated through the app or another appropriate notice. For questions about this policy, contact buzaza+gooddeeds@gmail.com.