Privacy & consent

Beneficiary privacy is a core requirement, not an afterthought

Private beneficiary details are stored only for internal verification and are never exposed through public pages or APIs.

Policy 1

Beneficiary names, contact details, and locations are stored separately from public-safe case content.

Policy 2

Public dashboards show approved aggregates only.

Policy 3

Stories are anonymized by default.

Policy 4

Name or photo publication requires recorded consent and consent proof.

Policy 5

Takedown requests can be handled through the super admin console and contact workflow.