Privacy Policy

Do Good Market · Last updated 24 August 2026

This policy describes what Do Good Market collects, why, and what we do with it. It describes what the service actually does today — not what it might do later.

Who we are

The short version

• We do not sell or rent your information. To anyone. Ever.
• We do not track you across other apps or websites, and we show no advertising.
• We do not collect your precise location.
• A business you visit never learns your name or your age — only that a valid code was presented.
• You can close your account from inside the app, and we explain exactly what that erases.

What we collect

When you create an account

As you use the app

• Which shifts you sign up for, check in to, and complete, and the hours recorded for them.
• The Appreciations you earn, what you choose with them, and where you redeem them.
• Your roles — whether you also run a nonprofit or a business here.
• Your IP address and browser or device identifier, recorded with sign-ins and with security-relevant actions so that we have a record of who did what.

If you register an organization

For a nonprofit we collect its legal name, EIN, and address. For a business we collect its legal name, category, and address. We check these against public records — see below.

What we do not collect

• Precise or background location.
• Your contacts, photos library, calendar, or microphone.
• Advertising identifiers, or any cross-app or cross-site tracking.
• Payment card details. Nothing in Do Good Market costs a volunteer money, so we never take them.

The app asks for camera access in one place only: a business scanning a volunteer's code at its counter. The camera reads the code and nothing is recorded, stored, or uploaded.

Who else sees your information

A nonprofit you volunteer with

Sees your first name, last initial, and whether you have checked in — the roster it needs to run the shift. It does not see your other volunteering, your Appreciations, or your profile.

A business where you redeem an Appreciation

Sees only that a valid code was presented and what it is for. It never learns your name, your age, or which nonprofit you volunteered with. This is deliberate: a counter is a public place, and nothing about your age or your circumstances should be announced across it.

Service providers

These providers act on our instructions and cannot use your information for their own purposes.

How long we keep it

• Unused Appreciations expire 90 days after you earn them.
• Your account information is kept while your account is open.
• Records of redemptions are kept after you leave. When you redeem something at a local business, that record is how the business documents what it donated and how the nonprofit receives credit for it. Those are somebody else's financial records as much as yours, so one person closing an account cannot erase them. After you close your account the record carries no name, no email, and nothing that points back to you.

Closing your account

In the app: You → Close my account. We ask for your password, because a phone can be picked up off a table and this cannot be undone.

You may also write to us at the address above and ask what we hold about you, ask us to correct it, or ask us to delete it.

Children

Do Good Market is currently available only to people aged 18 and over. If you tell us you are under 18 during signup, we do not create an account and we do not keep what you entered.

We intend to open the service to volunteers aged 13 to 17 with verified parental consent. When we do, a parent will receive a direct notice describing exactly what we collect from their child before anything is collected, and this policy will be updated first. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, write to privacy@thedogoodmarket.com and we will delete it.

How we protect it

• Everything travels over HTTPS. The app refuses unencrypted connections.
• Passwords are stored as one-way hashes, never as text we could read.
• A parent's contact address, when we hold one, is encrypted in the database.
• The code shown at a counter is signed, expires in seconds, and can be used exactly once.

No service can promise perfect security, and we will not pretend otherwise. If a breach affects your information we will tell you.

Your choices

• Email we send about your own shifts and account is part of the service. You can stop it by closing your account.
• The camera permission can be refused or withdrawn in iOS Settings; only the counter scanner needs it.
• You can ask us for a copy of what we hold, ask us to correct it, or ask us to delete it.

Changes

If we change this policy we will update the date at the top. If a change materially affects what we collect or who sees it, we will tell you in the app before it takes effect.

Contact